C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 30/21

2021-07-30 09:30 - Renier van Heerden

Hack
- NPM Package Steals Passwords via Chrome’s Account-Recovery Tool [Lisa Vaas, Threatpost]
- Transnet declares force majeure at SA ports over cyber attack [Felix Njini and John Viljoen, News24]
Randsomeware
- Kaseya Obtains Universal Decryptor for REvil Ransomware [Tara Seals, Threatpost]
- Ransomware: Here’s how much victims have saved in ransom payments by using these free decryption tools [Danny Palmer, ZDNet]
- Transnet hit with Death Kitty ransomware [Bloomberg, MyBoadband]
Other
- When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure [Microsoft 365 Defender Threat Intelligence Team, Microsoft]
- A New Approach to Finding Cybersecurity Talent. A Conversation with Alan Paller [Kelvene Requiroso, eSecurityPlanet]
- Twitter handle swatter jailed after victim dies following home raid [Charlie Osborne, ZDNet]
- Here’s what that Google Drive security update message means [Ron Amadeo, Arstechnica]
Pegasus
- WhatsApp chief says government officials, US allies targeted by Pegasus spyware [Charlie Osborne, ZDNet]
- Check If Your Phone Is Infected With Pegasus Using MVT [Priye Rai, FossBytes]
- Israel begins investigation into NSO Group spyware abuse [Patrick Howell O’Neill, Technology Review]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2