C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 36/22

2022-09-09 13:23 - Heloise Meyer

Cybersecurity News:
- WhatsApp change could cause legal problems for group admins in South Africa — How to protect yourself [Hanno Labuschagne, MyBroadband]
- You should know that most websites share your in-site search queries with third parties [Zeljka Zorz, Help Net Security]
- Claim of TikTok Breach Spotlights Viral App’s Lure as Target [Jamie Tarabay, Bloomberg]
Malware:
- North Korean Hackers Deploying New MagicRAT Malware in Targeted Campaigns [Ravie Lakshmanan, The Hacker News]
- Bumblebee malware adds post-exploitation tool for stealthy infections [Bill Toulas, BleepingComputer]
- Microsoft Warns of Ransomware Attacks by Iranian Phosphorus Hacker Group [Ravie Lakshmanan, The Hacker News]
- New Linux malware evades detection using multi-stage deployment [Bill Toulas, BleepingComputer]
- Ransomware attacks on Linux up 75% [Myles Illidge, MyBroadband]
- Moobot Botnet is Coming for Your Unpatched D-Link Router [Garrett Thompson, Binary Defense]
Phishing Attacks:
- A Webb Telescope image is being used to push malware [Mariella Moon, Engadget]
- Hackers Repeatedly Targeting Financial Services in French-Speaking African Countries [Ravie Lakshmanan, The Hacker News]
- New EvilProxy service lets all hackers use advanced phishing tactics [Bill Toulas, BleepingComputer]
Hacks:
- Anonymous reportedly behind hack of Russia’s biggest taxi service [Hanno Labuschagne, MyBroadband]
- China accuses US of hacking government-linked research university [Bloomberg, MyBroadband]
Vulnerabilities & Patches:
- Cisco Releases Security Patches for New Vulnerabilities Impacting Multiple Products [Ravie Lakshmanan, The Hacker News]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2