08/07

New IoT RapperBot Malware Targeting Linux Servers via SSH Brute-Forcing Attack

https://thehackernews.com/2022/08/new-iot-rapperbot-malware-targeting.html
New IoT RapperBot Malware Targeting Linux Servers via SSH Brute-Forcing Attack

Finding hooks with windbg – NVISO Labs

https://blog.nviso.eu/2022/08/05/finding-hooks-with-windbg/
Finding hooks with windbg – NVISO Labs

Let's Roll: A SpecterOps Bowling Party Tickets, Wed, Aug 10, 2022 at 5:00 PM | Eventbrite

https://www.eventbrite.com/e/lets-roll-a-specterops-bowling-party-tickets-321494487667
Let's Roll: A SpecterOps Bowling Party Tickets, Wed, Aug 10, 2022 at 5:00 PM | Eventbrite

Lazarus hackers lure crypto-experts with Coinbase engineer job offers

https://www.bleepingcomputer.com/news/security/lazarus-hackers-lure-crypto-experts-with-coinbase-engineer-job-offers/
Lazarus hackers lure crypto-experts with Coinbase engineer job offers

Chaos after heat crashes computers at leading London hospitals | Climate crisis | The Guardian

https://www.theguardian.com/environment/2022/aug/07/chaos-after-heat-crashes-computers-at-leading-london-hospitals
Chaos after heat crashes computers at leading London hospitals | Climate crisis | The Guardian

Hackers Exploit Twitter Vulnerability to Exposes 5.4 Million Accounts

https://thehackernews.com/2022/08/hackers-exploit-twitter-vulnerability.html
Hackers Exploit Twitter Vulnerability to Exposes 5.4 Million Accounts

VirusTotal - File - 514d1b93b380bcb7967848525a92df05983a9e02df925a61f5592ce3a887af54

https://www.virustotal.com/gui/file/514d1b93b380bcb7967848525a92df05983a9e02df925a61f5592ce3a887af54
VirusTotal - File - 514d1b93b380bcb7967848525a92df05983a9e02df925a61f5592ce3a887af54

VirusTotal - File - b5f2b2194415146489e94258209d85008fa3147787f974f9182a9fdc69a59ae8

https://www.virustotal.com/gui/file/b5f2b2194415146489e94258209d85008fa3147787f974f9182a9fdc69a59ae8/relations
VirusTotal - File - b5f2b2194415146489e94258209d85008fa3147787f974f9182a9fdc69a59ae8

Greek intelligence spied on journalist with a surveillance spywareSecurity Affairs

https://securityaffairs.co/wordpress/134097/intelligence/greek-intelligence-surveillance-malware.html
Greek intelligence spied on journalist with a surveillance spywareSecurity Affairs

We Love Relaying Credentials: A Technical Guide to Relaying Credentials Everywhere – SecureAuth

https://www.secureauth.com/blog/we-love-relaying-credentials-a-technical-guide-to-relaying-credentials-everywhere/
We Love Relaying Credentials: A Technical Guide to Relaying Credentials Everywhere – SecureAuth

Twitter

https://twitter.com/marcorubio/status/1556019363093913604
Twitter

Microsoft 365 phishing attacks abuse Snapchat, Amex open redirects

https://www.bleepingcomputer.com/news/security/microsoft-365-phishing-attacks-abuse-snapchat-amex-open-redirects/
Microsoft 365 phishing attacks abuse Snapchat, Amex open redirects

Why BARDA Deserves More Funding - Institute for Progress

https://progress.institute/why-barda-deserves-more-funding/
Why BARDA Deserves More Funding - Institute for Progress

Detecting anomalous Vectored Exception Handlers on Windows – NCC Group Research

https://research.nccgroup.com/2022/01/03/detecting-anomalous-vectored-exception-handlers-on-windows/
Detecting anomalous Vectored Exception Handlers on Windows – NCC Group Research

VirusTotal - File - 374d37426a04eb478e5fa4235cd7c42454addda1b8709aaa55b2a5bf16705a41

https://www.virustotal.com/gui/file/374d37426a04eb478e5fa4235cd7c42454addda1b8709aaa55b2a5bf16705a41/detection
VirusTotal - File - 374d37426a04eb478e5fa4235cd7c42454addda1b8709aaa55b2a5bf16705a41

Week 32 – 2022 – This Week In 4n6

http://thisweekin4n6.com/2022/08/07/week-32-2022/
Week 32 – 2022 – This Week In 4n6

MalwareBazaar | SHA256 04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c

https://bazaar.abuse.ch/sample/04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c/
MalwareBazaar | SHA256 04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c

Amazon’s One-Stop Shop for Identity Thieves

https://theintercept.com/2022/08/07/amazon-registry-identity-theft/
Amazon’s One-Stop Shop for Identity Thieves

CVE-2022-29582 - Computer security and related topics

https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/
CVE-2022-29582 - Computer security and related topics

GitHub - waawaa/breakcyserver

https://github.com/waawaa/breakcyserver/tree/master
GitHub - waawaa/breakcyserver

About - Prodigy Reloaded

https://www.prodigyreloaded.com/
About - Prodigy Reloaded

Subscribe to read | Financial Times

https://www.ft.com/content/f76534bf-b501-4cbf-9a46-80be9feb670c
Subscribe to read | Financial Times

The Secret History of Family Separation - The Atlantic

https://www.theatlantic.com/magazine/archive/2022/09/trump-administration-family-separation-policy-immigration/670604/
The Secret History of Family Separation - The Atlantic

Page Not Found | CISA

http://cisa.gov/events
Page Not Found | CISA

https://securereload.tech/Phishing/Lists/Latest/

https://securereload.tech/Phishing/Lists/Latest/

nday exploit: libinput format string bug, canary leak exploit (cve-2022-1215) | hyprblog

https://blog.coffinsec.com/nday/2022/08/04/CVE-2022-1215-libinput-fmt-canary-leak.html
nday exploit: libinput format string bug, canary leak exploit (cve-2022-1215) | hyprblog

Serious cyberattack hits German Chambers of Industry and Commerce (DIHK)Security Affairs

https://securityaffairs.co/wordpress/134121/hacking/dihk-cyberattack.html
Serious cyberattack hits German Chambers of Industry and Commerce (DIHK)Security Affairs

VirusTotal - Domain - panel.erbium.ml

https://www.virustotal.com/gui/domain/panel.erbium.ml/
VirusTotal - Domain - panel.erbium.ml

VirusTotal - File - 04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c

https://www.virustotal.com/gui/file/04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c/
VirusTotal - File - 04642249b0ad41b1c6cc8862ec372c3b9b1e855d104a16a6a3fae694cc23ec0c

MalwareBazaar | SHA256 2d04a0d8fac45912b00ddc206423b2a0536e2a035642729535852f6d163946ee (njrat)

https://bazaar.abuse.ch/sample/2d04a0d8fac45912b00ddc206423b2a0536e2a035642729535852f6d163946ee/
MalwareBazaar | SHA256 2d04a0d8fac45912b00ddc206423b2a0536e2a035642729535852f6d163946ee (njrat)

5 nm process - Wikipedia

https://en.wikipedia.org/wiki/5_nm_process
5 nm process - Wikipedia

panel.erbium.ml - urlscan.io

https://urlscan.io/result/e08958cb-1f47-4f16-b328-e47ba3d7ece2/
panel.erbium.ml - urlscan.io

DOC1041822021ENGLISH.pdf

https://policehumanrightsresources.org/content/uploads/2021/06/DOC1041822021ENGLISH.pdf
DOC1041822021ENGLISH.pdf

New GwisinLocker ransomware encrypts Windows and Linux ESXi servers

https://www.bleepingcomputer.com/news/security/new-gwisinlocker-ransomware-encrypts-windows-and-linux-esxi-servers/
New GwisinLocker ransomware encrypts Windows and Linux ESXi servers

Liferay revisited: A tale of 20k$

https://vsrc.vng.com.vn/blog/liferay-revisited-a-tale-of-20k/
Liferay revisited: A tale of 20k$