BleepingComputer.com

"Hackers use VPN provider's code certificate to sign malware."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 20 August 2023, 1402 UTC.  Content provided by "BleepingComputer.com."

Source:  https://www.bleepingcomputer.com/ ("BleepingComputer.com").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

• 
   
  SECURITY

Hackers use VPN provider's code certificate to sign malware

• The China-aligned APT (advanced persistent threat) group known as 'Bronze Starlight' was seen targeting the Southeast Asian gambling industry with malware signed using a valid certificate used by the Ivacy VPN provider.

  • BILL TOULAS
   
  • AUGUST 19, 2023
   
  • 10:07 AM
   
  •  0
• 
   
  SECURITY

Rust devs push back as Serde project ships precompiled binaries

• Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks.

  • AX SHARMA
   
  • AUGUST 19, 2023
   
  • 09:55 AM
   
  •  0
• 
   
  SECURITY

The Week in Ransomware - August 18th 2023 - LockBit on Thin Ice

• While there was quite a bit of ransomware news this week, the highlighted story was the release of Jon DiMaggio's third article in the Ransomware Diaries series, with the focus of this article on the LockBit ransomware operation.

  • LAWRENCE ABRAMS
   
  • AUGUST 18, 2023
   
  • 05:07 PM
   
  •  0
• 
   
  SECURITY, SOFTWARE

WinRAR flaw lets hackers run programs when you open RAR archives

• A high-severity vulnerability has been fixed in WinRAR, the popular file archiver utility for Windows used by millions, that can execute commands on a computer simply by opening an archive.

  • BILL TOULAS
   
  • AUGUST 18, 2023
   
  • 01:20 PM
   
  •  2
• 
   
  MICROSOFT

Hotmail email delivery fails after Microsoft misconfigures DNS

• Hotmail users worldwide have problems sending emails, with messages flagged as spam or not delivered after Microsoft misconfigured the domain's DNS SPF record.

  • LAWRENCE ABRAMS
   
  • AUGUST 18, 2023
   
  • 11:44 AM
   
  •  1
• 
   
  SECURITY, LEGAL

Interpol arrests 14 suspected cybercriminals for stealing $40 million

• An international law enforcement operation led by Interpol has led to the arrest of 14 suspected cybercriminals in an operation codenamed 'Africa Cyber Surge II,' launched in April 2023.

  • BILL TOULAS
   
  • AUGUST 18, 2023
   
  • 10:39 AM
   
  •  0
• 
   
  MICROSOFT

Microsoft: BlackCat's Sphynx ransomware embeds Impacket, RemCom

• Microsoft has discovered a new version of the BlackCat ransomware that embeds the Impacket networking framework and the Remcom hacking tool, both enabling spreading laterally across a breached network.

  • LAWRENCE ABRAMS
   
  • AUGUST 17, 2023
   
  • 06:05 PM
   
  •  0
• 
   
  SECURITY

Hackers ask $120,000 for access to multi-billion auction house

• Hackers have breached the network of a major auction house and offered access to whoever was willing to pay $120,000.

  • IONUT ILASCU
   
  • AUGUST 17, 2023
   
  • 04:17 PM
   
  •  1
• 
   
  SECURITY, MICROSOFT

Microsoft PowerShell Gallery vulnerable to spoofing, supply chain attacks

• Lax policies for package naming on Microsoft's PowerShell Gallery code repository allow threat actors to perform typosquatting attacks, spoof popular packages and potentially lay the ground for massive supply chain attacks.

  • BILL TOULAS
   
  • AUGUST 17, 2023
   
  • 04:00 PM
   
  •  0
• 
   
  SECURITY

Phishing campaign steals accounts for Zimbra email servers worlwide

• An ongoing phishing campaign has been underway since at least April 2023 that attempts to steal credentials for Zimbra Collaboration email servers worldwide.

  • BILL TOULAS
   
  • AUGUST 17, 2023
   
  • 01:22 PM
   
  •  0
• 
   
  MICROSOFT

Windows Task Manager refresh can be paused using CTRL key

• A very useful and previously unknown Windows tip was revealed this week, where you can halt process jumping in Task Manager by holding down the Ctrl key on your keyboard, allowing easier access to a listed process.

  • LAWRENCE ABRAMS
   
  • AUGUST 17, 2023
   
  • 12:27 PM
   
  •  2
• 
   
  SECURITY

Thousands of Android APKs use compression trick to thwart analysis

• Threat actors increasingly distribute malicious Android APKs (packaged app installers) that resist decompilation using unsupported, unknown, or heavily tweaked compression algorithms.

  • BILL TOULAS
   
  • AUGUST 17, 2023
   
  • 10:51 AM
   
  •  1
• 
   
  SECURITY

File sharing site Anonfiles shuts down due to overwhelming abuse

• Anonfiles, a popular service for sharing files anonymously, has shut down after saying it can no longer deal with the overwhelming abuse by its users.

  • LAWRENCE ABRAMS
   
  • AUGUST 16, 2023
   
  • 07:25 PM
   
  •  7
• 
   
  SECURITY

CISA warns of critical Citrix ShareFile flaw exploited in the wild

• CISA is warning that a critical Citrix ShareFile secure file transfer vulnerability tracked as CVE-2023-24489 is being targeted by unknown actors and has added the flaw to its catalog of known security flaws exploited in the wild.

  • LAWRENCE ABRAMS
   
  • AUGUST 16, 2023
   
  • 05:31 PM
   
  •  2
• 
   
  SECURITY, GOOGLE

Google released first quantum-resilient FIDO2 key implementation

• Google has announced the first open-source quantum resilient FIDO2 security key implementation, which uses a unique ECC/Dilithium hybrid signature schema co-created with ETH Zurich.

  • BILL TOULAS
   
  • AUGUST 16, 2023
   
  • 02:35 PM
   
  •  1

• 1
 
• 2
 
• 3
 
• 4
 
• 5
 

VIEW MORE