C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 46/22

2022-11-18 16:33 - Heloise Meyer

Cybersecurity News:
- DuckDuckGo launching anti-tracking tool for Android [Hanno Labuschagne, MyBroadband]
- Twitter source code indicates end-to-end encrypted DMs are coming [Bill Toulas, BleepingComputer]
Cyber Attacks:
- Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign [Ravie Lakshmanan, The Hacker News]
- Cyberattacks On U.S. Airport Websites Signal Growing Threat To Critical Infrastructure [Emil Sayegh, Forbes]
- Whoosh confirms data breach after hackers sell 7.2M user records [Bill Toulas, BleepingComputer]
- Iran-linked threat actors exploiting Log4Shell via unpatched VMware, feds warn [David Jones, Cybersecurity Dive]
Malware:
- Hive Ransomware Attackers Extorted $100 Million from Over 1,300 Companies Worldwide [Ravie Lakshmanan, The Hacker News]
- Researchers Sound Alarm on Dangerous BatLoader Malware Dropper [Jai Vijayan, Dark Reading]
- WASP malware stings Python developers [Jeff Burt, The Register]
- Android malware: A million people downloaded these malicious apps before they were finally removed from Google Play [Danny Palmer, ZDNet]
- Hackers are hiding malware in PNG files – Here’s what to watch for [Charlie Fripp, Komando]
Vulnerabilities:
- Remote Code Execution Vulnerabilities Found in F5 Products [Eduard Kovacs, Security Week]
Other:
- New Ransomware Data Is In: What’s Happening and How to Fight Back [Srinivas Mukkamala, Dark Reading]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2