cyberveille.decio.ch

cyberveille.decio.ch

5334 bookmarks
Custom sorting
Support King, banned by FTC, linked to new phone spying operation
Support King, banned by FTC, linked to new phone spying operation
year after it was banned by the Federal Trade Commission, a notorious phone surveillance company is back in all but name, a TechCrunch investigation has found. A groundbreaking FTC order in 2021 banned the stalkerware app SpyFone, its parent company Support King, and its chief executive Scott Zuckerman from the surveillance industry. The order, unanimously approved by the regulator’s five sitting commissioners, also demanded that Support King delete the phone data it illegally collected and notify victims that its app was secretly installed on their device.
#techcrunch#EN#2022#SupportKing#stalkerware#SpyFone#FTC#banned
·techcrunch.com·
Support King, banned by FTC, linked to new phone spying operation
New Ransom Payment Schemes Target Executives, Telemedicine
New Ransom Payment Schemes Target Executives, Telemedicine
Ransomware groups are constantly devising new methods for infecting victims and convincing them to pay up, but a couple of strategies tested recently seem especially devious. The first centers on targeting healthcare organizations that offer consultations over the Internet and sending them booby-trapped medical records for the “patient.” The other involves carefully editing email inboxes of public company executives to make it appear that some were involved in insider trading.
#krebsonsecurity#EN#2022#executives#ransom#healthcare#Venus#CL0P#infiltration
·krebsonsecurity.com·
New Ransom Payment Schemes Target Executives, Telemedicine
Using OpenAI Chat to Generate Phishing Campaigns
Using OpenAI Chat to Generate Phishing Campaigns
OpenAI chat has exploded in popularity over the last couple of weeks. People are using it to do all sorts of interesting things. If you are unfamiliar with OpenAI Chat and GPT-3, you can find a primer here. The gist is that it’s an artificial intelligence model that you can chat with as if it were a person. It can do all kinds of things like answer questions, write code, find bugs in code, and more. It also remembers context, so you can refer to something you already mentioned at it is able to follow along. I thought maybe this could be a useful tool for building email phishing campaigns for my pentesting work, so I thought I’d try it out and see what I could get it to do.
#richardosgood#ChatGPT#Phishing#Campaigns
·richardosgood.com·
Using OpenAI Chat to Generate Phishing Campaigns
How ChatGPT can turn anyone into a ransomware and malware threat actor  
How ChatGPT can turn anyone into a ransomware and malware threat actor  
Ever since OpenAI launched ChatGPT at the end of November, commentators on all sides have been concerned about the impact AI-driven content-creation will have, particularly in the realm of cybersecurity. In fact, many researchers are concerned that generative AI solutions will democratize cybercrime.
#venturebeat#EN#2022#ChatGPT#cybercrime#generative#AI
·venturebeat-com.cdn.ampproject.org·
How ChatGPT can turn anyone into a ransomware and malware threat actor  
Global crackdown against DDoS services shuts down most popular platforms
Global crackdown against DDoS services shuts down most popular platforms
Known as Operation Power Off, this operation saw law enforcement in the United States, the United Kingdom, the Netherlands, Poland and Germany take action against these types of attacks which can paralyse the internet.   The services seized were by far the most popular DDoS booter services on the market, receiving top billing on search engines. One such service taken...
#europol#EN#2022#DDoS#crackdown#platforms
·europol.europa.eu·
Global crackdown against DDoS services shuts down most popular platforms
Mallox Ransomware showing signs of Increased Activity
Mallox Ransomware showing signs of Increased Activity
“TargetCompany” is a type of ransomware that was first identified in June 2021. The researchers named it TargetCompany ransomware because it adds the targeted company name as a file extension to the encrypted files. In September 2022, researchers identified a TargetCompany ransomware variant targeting Microsoft SQL servers and adding the “Fargo” extension to the encrypted files. TargetCompany ransomware is also known to add a “Mallox” extension after encrypting the files.
#cyble#en#2022#mallox#Ransomware#analysis
·blog.cyble.com·
Mallox Ransomware showing signs of Increased Activity
Patrol and Persuade - A follow up on 110 Overseas investigation
Patrol and Persuade - A follow up on 110 Overseas investigation
This latest release documents further extensive evidence of the establishment by local PRC Public Security authorities of at least 102 “Chinese Overseas Police Service Centers” in 53 countries around the world and how some of them have been partaking in the execution of "persuasions to return" operations. Patrol and Persuade (PDF) also documents the (silent) complicity of a number of host countries, instilling a further sense of fear into targeted communities and severely undermining the international rules-based order .
#safeguarddefenders#EN#2022#PRC#operations#Chinese#Overseas#Police#Service#Centers
·safeguarddefenders.com·
Patrol and Persuade - A follow up on 110 Overseas investigation
Check Point Research analyzes files on the Dark Web and finds millions of records available
Check Point Research analyzes files on the Dark Web and finds millions of records available
  • Check Point Research (CPR) has analyzed the files that are for sale on the Dark Web, whose sellers claim are from WhatsApp users, revealing the leak includes 360 million phone numbers from 108 countries * Full list went on sale for 4 days, and is now being distributed freely amongst Dark Web users * Users are advised to be aware of links and unknown senders, while using any messaging services
#checkpoint#EN#2022#WhatsApp#darkweb#dump
·blog.checkpoint.com·
Check Point Research analyzes files on the Dark Web and finds millions of records available
Pulling the Curtains on Azov Ransomware: Not a Skidsware but Polymorphic Wiper - Check Point Research
Pulling the Curtains on Azov Ransomware: Not a Skidsware but Polymorphic Wiper - Check Point Research
  • Check Point Research (CPR) provides under-the-hood details of its analysis of the infamous Azov Ransomware * Investigation shows that Azov is capable of modifying certain 64-bit executables to execute its own code * Azov is designed to inflict impeccable damage to the infected machine it runs on * CPR sees over 17K of Azov-related samples submitted to VirusTotal
#checkpoint#EN#2022#Azov#analysis#Ransomware
·research.checkpoint.com·
Pulling the Curtains on Azov Ransomware: Not a Skidsware but Polymorphic Wiper - Check Point Research
Cryptocurrency Scam - Pig Butchering
Cryptocurrency Scam - Pig Butchering
A recent cryptocurrency scam has highlighted a need for fraud awareness. The new scam - called “pig butchering” - includes a sophisticated new twist that combines a romance scam with an investment spin. According to the Federal Bureau of Investigation (FBI), the term “pig butchering” refers to a time-tested, heavily scripted, and contact intensive process to fatten up the prey before slaughter.
#michigan.gov#EN#2022#cryptocurrency#scam#definition#FBI
·michigan.gov·
Cryptocurrency Scam - Pig Butchering
Pulse Connect Secure: A View from the Internet
Pulse Connect Secure: A View from the Internet
Pulse Connect Secure is a low-cost and widely-deployed SSL VPN solution for remote and mobile users. Over the years, researchers have found several significant vulnerabilities in the server software, some even resulting in the active exploitation of critical infrastructure by malicious threat actors. In April of 2021, CISA released a report detailing some of these activities, which included exploiting several unknown (at the time) vulnerabilities and resulted in swift action from Ivanti, the Pulse Connect Secure software developer.
#censys#EN#2022#PulseConnectSecure#VPN#vulnerable#CVE-2021-22893
·censys.io·
Pulse Connect Secure: A View from the Internet
Hitching a ride with Mustang Panda
Hitching a ride with Mustang Panda
Avast discovered a distribution point where a malware toolset is hosted, but also serves as temporary storage for the gigabytes of data being exfiltrated on a daily basis, including documents, recordings, and webmail dumps including scans of passports from Asian, American and European citizens and diplomats applying for Burmese visas, from Burmese human rights activists and Burmese government institutions.
#avast#EN#2022#MustangPanda#exfiltrated#analysis
·decoded.avast.io·
Hitching a ride with Mustang Panda
New MuddyWater Threat: Old Kitten; New Tricks
New MuddyWater Threat: Old Kitten; New Tricks
MuddyWater, also known as Static Kitten and Mercury, is a cyber espionage group that’s most likely a subordinate element within Iran's Ministry of Intelligence and Security (MOIS). Since at least 2017 MuddyWater has targeted a range of government and private organizations across sectors, including telecommunications, local government, defense, and oil and natural gas organizations, in the Middle East, Asia, Africa, Europe, and North America.
#deepinstinct#MuddyWater#EN#2022#analysis#malspam#StaticKitten#Mercury
·deepinstinct.com·
New MuddyWater Threat: Old Kitten; New Tricks
Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets
Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets
APT group Mustang Panda now appears to have Europe and Asia Pacific targets in its sights. The BlackBerry Research and Intelligence team recently unearthed evidence that the group may be using global interest in the Russian-Ukraine war to deliver PlugX malware via phishing lure to unsuspecting users.
#blackberry#EN#2022#MustangPanda#Europe#Asia#russia-ukraine-war#PlugX#malware
·blogs.blackberry.com·
Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets