🔥 INCIDENT REPORTING 2[−]
1 OctMeet LostTrust ransomware — A likely rebrand of the MetaEncryptor gangThe LostTrust ransomware operation is believed to be a rebrand of MetaEncryptor, utilizing almost identical data leak sites and encryptors. [...]BLEEPINGCOMPUTER.COM
1 OctAmazon sends Mastercard, Google Play gift card order emails by mistakeAmazon mistakenly sent out purchase confirmation emails for Hotels.com, Google Play, and Mastercard gift cards to customers, making many worried their accounts were compromised. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 4[−]
1 OctUse of QR codes in email phishingsubmitted by throws_lemy to cybersecurity 1 points | 0 comments https://securelist.com/qr-codes-in-phishing/110676/SECURELIST.COM
1 OctHackers Impersonate Meta Recruiter to Target Aerospace FirmLazarus Deploys New Backdoor to Target Aerospace Firm Researchers discovered an undocumented backdoor being used by the North Korea-backed Lazarus group to target a Spanish aerospace company. The attacker masquerading as a Meta recruiter and tricked the victim into downloading an…DATABREACHTODAY.CO.UK
1 OctAnalyzing MIME Files: a Quick Tip, (Sun, Oct 1st)In my blog post " Quickpost: Analysis of PDF/ActiveMime Polyglot Maldocs " I explain how to search through MIME files with my tool emldump.py to find suspicious/malicious content:
ISC.SANS.EDU
1 OctSomeone tried baiting people into downloading malware on r/cybersecuritysubmitted by L4s to secops 1 points | 0 comments https://chris.partridge.tech/2023/malware-targeting-cybersecurity-subreddit/ Someone tried baiting people into downloading malware on r/cybersecurity:: Are there Darwin awards for skids burning their C2 infrastructure?CHRIS.PARTRIDGE.TECH
📡 INFOSEC NEWS 1[−]
1 OctNew Marvin attack revives 25-year-old decryption flaw in RSAA flaw related to the PKCS #1 v1.5 padding in SSL servers discovered in 1998 and believed to have been resolved still impacts several widely-used projects today. [...]BLEEPINGCOMPUTER.COM