06/24

Project Zero: The curious tale of a fake Carrier.app

https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html
Project Zero: The curious tale of a fake Carrier.app

Spyware vendor targets users in Italy and Kazakhstan

https://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/
Spyware vendor targets users in Italy and Kazakhstan

From NtObjectManager to PetitPotam | clearbluejar

https://clearbluejar.github.io/posts/from-ntobjectmanager-to-petitpotam/
From NtObjectManager to PetitPotam | clearbluejar

HTML Sanitizer API

https://wicg.github.io/sanitizer-api/#dom-element-sethtml
HTML Sanitizer API

add WerFault Silent Process Exit: --werfault · helpsystems/nanodump@578116f · GitHub

https://github.com/helpsystems/nanodump/commit/578116faea3d278d53d70ea932e2bbfe42569507
add WerFault Silent Process Exit: --werfault · helpsystems/nanodump@578116f · GitHub

Miracle - One Vulnerability To Rule Them All | by Peterjson | Jun, 2022 | Medium

https://peterjson.medium.com/miracle-one-vulnerability-to-rule-them-all-c3aed9edeea2
Miracle - One Vulnerability To Rule Them All | by Peterjson | Jun, 2022 | Medium

19-1392_6j37.pdf

https://www.supremecourt.gov/opinions/21pdf/19-1392_6j37.pdf
19-1392_6j37.pdf

Manu Raju on Twitter: "On way to the court https://t.co/XrE9ExAzhm" / Twitter

https://twitter.com/mkraju/status/1540362945921785856
Manu Raju on Twitter: "On way to the court https://t.co/XrE9ExAzhm" / Twitter

Novel Exploit in Mitel VOIP Appliance | CrowdStrike

https://www.crowdstrike.com/blog/novel-exploit-detected-in-mitel-voip-appliance/
Novel Exploit in Mitel VOIP Appliance | CrowdStrike

404 Page not found | STAR Labs

https://starlabs.sg/blog/2022/06/io_uring-new-code-new-bugs-and-a-new-exploit-technique/
404 Page not found | STAR Labs

AWS Misconfigurations – Geek Freak

https://dhiyaneshgeek.github.io/cloud/security/2022/06/23/aws-misconfigurations/
AWS Misconfigurations – Geek Freak

Looming abortion law changes prompt digital privacy worries for clinics

https://www.nbcnews.com/tech/security/abortion-clinics-providers-digital-privacy-roe-overturn-rcna30654
Looming abortion law changes prompt digital privacy worries for clinics

IcedID/icedID_23.06.2022.txt at main · pr0xylife/IcedID · GitHub

https://github.com/pr0xylife/IcedID/blob/main/icedID_23.06.2022.txt
IcedID/icedID_23.06.2022.txt at main · pr0xylife/IcedID · GitHub

Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

https://thehackernews.com/2022/06/log4shell-still-being-exploited-to-hack.html
Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

Jessica Khoury on Twitter: "Delete your period tracking apps today." / Twitter

https://twitter.com/jkbibliophile/status/1540345161955385345
Jessica Khoury on Twitter: "Delete your period tracking apps today." / Twitter

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs | Securelist

https://securelist.com/modern-ransomware-groups-ttps/106824/
The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs | Securelist

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

https://thehackernews.com/2022/06/new-quantum-builder-lets-attackers.html
New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

404 Not Found

http://verified.international/showthread.php?p=636832
404 Not Found

MalwareBazaar | Browse malware samples

https://bazaar.abuse.ch/sample/6593092dd29831d80d5fff05c7807fc3f327b62340560f55df53d115656a0aad/
MalwareBazaar | Browse malware samples

MalwareBazaar | SHA256 83402accb7cacbb3d6f6cc570ae9f1668b650324ad3c2489452e4378e9141012 (Heodo)

https://bazaar.abuse.ch/sample/83402accb7cacbb3d6f6cc570ae9f1668b650324ad3c2489452e4378e9141012/
MalwareBazaar | SHA256 83402accb7cacbb3d6f6cc570ae9f1668b650324ad3c2489452e4378e9141012 (Heodo)

MalwareBazaar | Browse malware samples

https://bazaar.abuse.ch/sample/00dcc4642d488643856259cd3c576d9e24045b48783fc21ebdccd5fb4de66f8c/
MalwareBazaar | Browse malware samples

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

https://thehackernews.com/2022/06/multiple-backdoored-python-libraries.html
Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys