C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 30/22

2022-07-29 15:36 - Sicelo Ncekana

Security News:
- Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office [Elizabeth Montalbano, Threatpost]
- Microsoft and Facebook Most Targeted Brands in The Rise of Phishing Attacks [ITsec Bureau, ITSecurity Wire]
- Messaging Apps Used As Platform For Cyber-Criminal Activity [Alan Rubins, PSBE Cyber News Group]
- Akamai blocked largest DDoS in Europe against one of its customers [Bill Toulas, BleepingComputer]
- Hackers change tactics to fight Microsoft, a new phishing service aimed at banks and more [Howard Solomon, ITWorld Canada]
- Kansas MSP shuts down cloud services to fend off cyberattack [Monday Daily, Monday Daily]
Malware:
- A New Novel Malware is Working to Hijack Facebook Business Accounts [Aleena Jawaid, Technologistan]
- Microsoft links Raspberry Robin malware to Evil Corp attacks [Yara Foster, NEWSPOSTALK]
- Ransom payments fall as fewer victims choose to pay hackers [Bill Toulas, The Office of Inadequate Security]
Vulnerabilities & Patches:
- Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office [Elizabeth Montalbano, Threatpost]
- Malicious npm packages steal Discord users’ payment card info [Sergiu Gatlan, BleepingComputer]
- Microsoft SQL servers hacked to steal bandwidth for proxy services [Bill Toulas, BleepingComputer]
- Cyberspies use Google Chrome extension to steal emails undetected [Sergiu Gatlan, BleepingComputer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2