C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 39/22

2022-09-30 09:19 - Maajied Moos

Vulnerabilities and Malware:
- Adware on Google Play and Apple Store installed 13 million times [Bill Toulas, Bleeping Computer]
- Mass email campaign with a pinch of targeted spam [Roman Dedenok, Artem Ushkov, Secure List]
- New Erbium password-stealing malware spreads as game cracks, cheats [Bill Toulas, Bleeping Computer]
- Hackers use PowerPoint files for ‘mouseover’ malware delivery [Bill Toulas, Bleeping Computer]
- WhatsApp “zero-day exploit” news scare – what you need to know [Paul Ducklin, Naked Security]
- How Underground Groups Use Stolen Identities and Deepfakes [Vladimir Kropotov, Fyodor Yarochkin, Craig Gibson, Stephen Hilt, Trend Micro]
- Researchers Warn of New Go-based Malware Targeting Windows and Linux Systems [Ravie Lakshmanan, The Hacker News]
Hacks:
- Hackers Leak French Hospital Patient Data in Ransom Fight [AFP, Security Week]
- Hacker Breaches Fast Company Apple News Account, Sends Racist Messages [Alessandro Mascellino, Info Security]
Other:
- Major Database Security Threats & How You Can Prevent Them [Isla Sibanda, Tripwire]
- The various ways ransomware impacts your organization [Help Net Security, Help Net Security]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2