Cyber Morning Call

[Referências do Episódio] -Samba Issues Security Updates to Patch Multiple High-Severity Vulnerabilities - https://thehackernews.com/2022/12/samba-issues-security-updates-to-patch.html -PF suspeita de acesso a sistema sigiloso do Judiciário por grupo hacker no Brasil - https://www1.folha.uol.com.br/cotidiano/2022/12/pf-suspeita-de-acesso-a-sistema-sigiloso-do-judiciario-por-grupo-hacker-no-brasil....

[Referências do Episódio] - Trojanized Windows Installers - https://www.mandiant.com/resources/blog/trojanized-windows-installers-ukrainian-government - Brasdex a new Brazillian ATS Malware - https://www.threatfabric.com/blogs/brasdex-a-new-brazilian-ats-malware.htm - HTML Smugglers turn to SVG images - https://blog.talosintelligence.com/html-smugglers-turn-to-svg-images/ - Operação polícial - htt...

[Referências do Episódio] - Vulnerabilidades da VMware - https://www.vmware.com/security/advisories/VMSA-2022-0033.html E https://www.vmware.com/security/advisories/VMSA-2022-0031.html - Unmasking Mirroface Operation LiberalFace Targeting Japanese Political Entities - https://www.welivesecurity.com/2022/12/14/unmasking-mirrorface-operation-liberalface-targeting-japanese-political-entities/ - GoTri...

[Referências do Episódio] -Critical security update now available for Citrix ADC, Citrix Gateway - https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/ -APT5: Citrix ADC Threat Hunting Guidance - https://media.defense.gov/2022/Dec/13/2003131586/-1/-1/0/CSA-APT5-CITRIXADC-V1.PDF -Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27...

[Referências do Episódio] -FortiOS - heap-based buffer overflow in sslvpnd - https://www.fortiguard.com/psirt/FG-IR-22-398 -Linux Cryptocurrency Mining Attacks Enhanced via CHAOS RAT - https://www.trendmicro.com/en_us/research/22/l/linux-cryptomining-enhanced-via-chaos-rat-.html -Xnspy stalkerware spied on thousands of iPhones and Android devices - https://techcrunch.com/2022/12/12/xnspy-stalkerwa...

[Referências do Episódio] - Katie Nickels - Making Order out of Chaos: How to Deal with Threat Group Names | STAR Webcast -    https://www.youtube.com/watch?v=fV_9X9gnTIk - Drokbk Malware Uses GitHub as Dead Drop Resolver - https://www.secureworks.com/blog/drokbk-malware-uses-github-as-dead-drop-resolver - New MuddyWater Threat: Old Kitten; New Tricks - https://www.deepinstinct.com/...

[Referências do Episódio] - Breaking the silence recent truebot activity - https://blog.talosintelligence.com/breaking-the-silence-recent-truebot-activity/ - Zombinder Ermac and Desktop Stelears - https://www.threatfabric.com/blogs/zombinder-ermac-and-desktop-stealers.html - Vice Society Targets Education Sector- https://unit42.paloaltonetworks.com/vice-society-targets-education-sector/ - Mallox r...

[Referências do Episódio] - Internet Explorer 0-day exploited by North Korean actor APT37 - https://blog.google/threat-analysis-group/internet-explorer-0-day-exploited-by-north-korean-actor-apt37/ - Zerobot – New Go-Based Botnet Campaign Targets Multiple Vulnerabilities - https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities - FortiOS &...

[Referências do Episódio] - Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets - https://blogs.blackberry.com/en/2022/12/mustang-panda-uses-the-russian-ukrainian-war-to-attack-europe-and-asia-pacific-targets - KNOWN EXPLOITED VULNERABILITIES CATALOG - https://www.cisa.gov/known-exploited-vulnerabilities-catalog#top - Cyber-Espionage in the Middle East: Investiga...

[Referências do Episódio] - Morre aos 52 anos o advogado Danilo Doneda, especialista em proteção de dados - https://www.conjur.com.br/2022-dez-04/morre-advogado-danilo-doneda-especialista-protecao-dados - CryWiper: fake ransomware - https://www.kaspersky.com/blog/crywiper-pseudo-ransomware/46480/ - Preparing for a Russian cyber offensive against Ukraine this winter - https://blogs.microsoft.com/on...

[Referências do Episódio] - DuckLogs New Malware Strain Spotted in the Wild - https://blog.cyble.com/2022/12/01/ducklogs-new-malware-strain-spotted-in-the-wild/ - Redigo Redis Backdoor Malware - https://blog.aquasec.com/redigo-redis-backdoor-malware - Localhost Attack Against Quarkus Developers Contrast Security - https://www.contrastsecurity.com/security-influencers/localhost-attack-against-quark...

[Referências do Episódio] - New Details on Commercial Spyware Vendor Variston - https://blog.google/threat-analysis-group/new-details-on-commercial-spyware-vendor-variston/ - Dolphin backdoor - https://www.welivesecurity.com/2022/11/30/whos-swimming-south-korean-waters-meet-scarcrufts-dolphin/ - LockBit 3.0 Wormable Tools - https://news.sophos.com/en-us/2022/11/30/lockbit-3-0-black-attacks-and-lea...

[Referências do Episódio] - MIT Technology Review - The Cyber Defense Index 2022/23 - https://mittrinsights.s3.amazonaws.com/CDIreport.pdf  - KNOWN EXPLOITED VULNERABILITIES CATALOG - https://www.cisa.gov/known-exploited-vulnerabilities-catalog - ATTACKER USES A POPULAR TIKTOK CHALLENGE TO LURE USERS INTO INSTALLING MALICIOUS PACKAGE - https://checkmarx.com/blog/attacker-uses-a-popular-tiktok...

[Referências do Episódio] - Thread da ESET sobre malware com a temática da Copa do Mundo - https://twitter.com/ESETresearch/status/1596222232384401408 - Russia-based RansomBoggs Ransomware Targeted Several Ukrainian Organizations - https://thehackernews.com/2022/11/russia-based-ransomboggs-ransomware.html - Stable Channel Update for Desktop - Thursday, November 24, 2022 - https://chromereleases.go...

[Referências do Episódio] - Professional Stealer - https://www.group-ib.com/media-center/press-releases/professional-stealers/ - Incidentes no servidor web Boa - https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ - Campanha do Qakbot e Black Basta - https://www.cybereason.com/blog/threat-alert-aggressive-qakbot-...

[Referências do Episódio] - TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/ - RansomExx Upgrades to Rust - https://securityintelligence.com/posts/ransomexx-upgrades-rust/ - Nighthawk: An Up-and-Coming Pentest Tool Likely to Gain Threat Actor Notice - https://www.proofpoint.com/us/blog/threat-insight/nighthawk-and-coming-pentest-tool-likely-gain-threat-actor-notice -...

[Referências do Episódio] - TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/ - Aurora: a rising stealer flying under the radar - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar/ - ViperSoftX: Hiding in System Logs and Spreading VenomSoftX - https://decoded.avast.io/janrubin/vipersoftx-hiding-in-system-logs-and-spreading-venomsoftx/ - Till REcoll...

[Referências do Episódio] - TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/ - Earth Preta Spear-Phishing Governments Worldwide - https://www.trendmicro.com/en_us/research/22/k/earth-preta-spear-phishing-governments-worldwide.html - Google Search results poisoned with torrent sites via Data Studio - https://www.bleepingcomputer.com/news/security/google-search-results...

[Referências do Episódio] - TrojanOrder Magento - https://sansec.io/research/trojanorder-magento - Vulnerabilidades em dispositivos F5 - https://support.f5.com/csp/article/K97843387, https://support.f5.com/csp/article/K94221585 e https://support.f5.com/csp/article/K13325942 - Alerta da Microsoft para fim do suporte para o .NET Core 3.1- https://learn.microsoft.com/en-us/windows/release-health/wind...

[Referências do Episódio] - TEMPEST LOVELACE DAY 2022 - https://www.even3.com.br/lovelace-day-2022/ - A Comprehensive Look at Emotet’s Fall 2022 Return - https://www.proofpoint.com/us/blog/threat-insight/comprehensive-look-emotets-fall-2022-return - CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures - https://www.rapid7.com/blog/post/2022/11/16/cve...

[Referências do Episódio] - Operation(Đường chín đoạn) typhoon：觊觎南海九段线的赛博海莲 - https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ - Typhon Reborn With New Capabilities - https://unit42.paloaltonetworks.com/typhon-reborn-stealer/ - BumbleBee Zeros in on Meterpreter - https://thedfirreport.com/2022/11/14/bumblebee-zeros-in-on-meterpreter/ - DTrack activity targeting Europe and Latin Ameri...

[Referências do Episódio] - Golpe milionário tira Justiça do Trabalho do ar - https://obastidor.com.br/investigacao/golpe-milionario-tira-justica-do-trabalho-do-ar-4667 - Twitter chaos after wave of blue tick impersonations - https://www.bbc.com/news/technology-63599553?at_medium=RSS&at_campaign=KARANGA - Lookout Discovers Long-running Surveillance Campaigns Targeting Uyghurs - https://www.loo...

[Referências do Episódio] - Man Charged for Participation in LockBit Global Ransomware Campaign - https://www.justice.gov/opa/pr/man-charged-participation-lockbit-global-ransomware-campaign - Check Point CloudGuard Spectral exposes new obfuscation techniques for malicious packages on PyPI - https://research.checkpoint.com/2022/check-point-cloudguard-spectral-exposes-new-obfuscation-techniques-for-...

[Referências do Episódio] - APT29 Windows Credential Roaming- https://www.mandiant.com/resources/blog/apt29-windows-credential-roaming - Vulnerabilidades críticas no VMware Workspace ONE Assist - https://www.vmware.com/security/advisories/VMSA-2022-0028.html - New Updated IceXLoader CLaims Thousands of Victims Around The World- https://minerva-labs.com/blog/new-updated-icexloader-claims-thousands-...

[Referências do Episódio] - Mercadores da insegurança: conjuntura e riscos do hacking governamental no Brasil - https://ip.rec.br/wp-content/uploads/2022/11/Mercadores-da-inseguranca.pdf - Microsoft Patch Tuesday novembro - https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2022-patch-tuesday-fixes-6-exploited-zero-days-68-flaws/ - Citrix Gateway and Citrix ADC Security Bulletin fo...