Petr Dvorak

🚨 Agent Tesla Malware Alert 🚨 Sharing an important update from our team on Agent Tesla, an infostealer campaign targeting Hungarian organizations. This malware poses serious data security risks, so our team has shared the analysis report with the key indicators of compromise (IoCs) and detection steps below to help cybersecurity teams respond. Check out the original post for the report and IoCs, and the recommended actions. Early detection is key! #CyberSecurity #ThreatIntel #TeslaAgent #Hungary #Infostealer #MalwareAlert

5

Yesterday’s Apocalypse? We are ready to support you. We have already solved Customers issues related to yesterday’s Microsoft / Crowdstrike bug. Currently there is only a manual procedure to adopt. If you need support, please call us. #Microsoft #Crowdstrike #bug #cybersecurity

8

OAuth 2.0 and OpenID Connect standards - Mobile-specific best practices are explained in the RFC 8252 – OAuth for Native Apps specification. Avoid token theft and bad actors with modern tool kits. #mobile #app #oauth #rfc8252 #rfc #tokentheft #token #api #sync #async ,spanning #architecture #design https://lnkd.in/e4fCpdBy

6

At Abissi S.r.l., during our security audits, we frequently encounter custom "security" libraries within software that ultimately prove to be insecure. While building a custom authentication mechanism or a new secret crypto algorithm seems appealing, it's often more efficient and secure to use existing solutions. As the saying goes, "don't reinvent the wheel," especially in software development. There is a wide range of well established libraries and frameworks readily available and battle tested, including industry-standard options for encryption and authentication. These tools likely address the security features you need, saving you valuable time and resources, and reducing the likelihood of vulnerabilities in your security library. If you don't know where to start, the OpenHub website is a great staring point for exploring these options #securebydesign #infosec #cybersecurity

10

Cyberattack Cripples Slovakia's National Cadastre Registry The Slovak national cadastre registry has been taken offline by a significant ransomware attack. Hackers have encrypted the entire database and are now demanding a ransom for its release. This incident exposes a troubling reality: critical infrastructure, such as the national cadastre, was not adequately prepared to handle such a crisis. Despite commitments outlined in UGKK’s annual report, which indicated a disaster recovery plan should have been completed by 2022, it appears this essential safeguard was not implemented. The consequences are dire. Public services relying on this infrastructure have been paralyzed indefinitely, leaving citizens and institutions in limbo. This attack serves as a stark reminder of the importance of cybersecurity and operational resilience in critical infrastructure. The lack of proper planning and implementation has now resulted in significant disruptions, undermining public trust and highlighting vulnerabilities that cannot be ignored. This situation raises critical questions: Are disaster recovery plans truly prioritized? And how can governments ensure these plans are not just created but fully operational?

3

SUMMARY: A new Golang-based botnet named Zergeca has been discovered, capable of bypassing security mechanisms and attacking various systems. MAIN POINTS: - Zergeca botnet uses Golang programming language for enhanced evasion capabilities. - It targets both Windows and Linux operating systems. - Security experts found it bypasses several advanced security mechanisms. TAKEAWAYS: - Organizations need to update their defenses to tackle evolving threats like Zergeca. - Cross-platform malware demands heightened attention on security practices. - Regular security audits and updates are crucial for threat mitigation. #Botnet #Golang #cybersecuritynews #MemorySafeLanguage #MSL

4

iOS Facebook Messenger Group Call DoS Vulnerability Exploited Using Emoji A newly discovered vulnerability in Facebook Messenger for iOS has revealed a critical flaw that could disrupt group calls by exploiting emoji reactions. This denial-of-service (DoS) bug, identified by Signal 11 Research in version 472.0.0 and analyzed in version 477.0.0, has since been patched, but its implications highlight the risks of unencrypted group chats. Messenger, used by hundreds of millions worldwide, introduced default end-to-end encryption (E2EE) for chats and calls in December 2023. However, group chats initially lack E2EE, allowing access to features unavailable in encrypted chats—such as emoji reactions during group calls. This vulnerability, categorized as a denial-of-service (DoS) issue, was triggered by sending an invalid emoji reaction during group calls. more: This vulnerability, categorized as a denial-of-service (DoS) issue, was triggered by sending an invalid emoji reaction during group calls.

2

Malware Targets Polish Small Businesses In May 2024, hackers hit Polish small and medium-sized companies with smart phishing scams. These attacks put dangerous software like Agent Tesla, Formbook, and Remcos RAT on their systems. The threat spread beyond Poland affecting businesses in Italy and Romania too. This showed how exposed small companies are when they don't have strong cyber defenses. Cybersecurity company ESET has found that the attackers used hacked email accounts and company servers to send harmful emails and gather stolen data. They used DBatLoader, a complex malware loader, to deliver their payloads. This method shows a change from earlier tactics and proves cyber threats have become more advanced. Phishing emails had attachments with malware that when opened, started a multi-step process to install the trojan. The increasing danger to SMBs is worrying, as these companies often fall victim to their weaker cybersecurity defenses. Kaspersky cautions that trojans, which can look like real software create a big risk by getting past normal security measures. To guard against these changing threats small and medium-sized businesses should make email filtering, regular software updates, and thorough phishing awareness training their top priorities. Investing into cutting-edge threat detection tools is also key to spot and stop threats. The latest wave of phishing attacks shows why businesses need to take steps to protect themselves before problems arise. How is your company improving its defenses to handle these kinds of threats? Let us know your plans and thoughts in the comments section. #Phishing #SMBSecurity #Malware #CyberThreats #CyberSecurity

1

Hello Linkedin community!🌐 Cyberthint's April 2024 #ransomware report has been published! At Cyberthint, we closely monitor the activities of ransomware groups and shed light on the latest statistics every month. 📊🔍 In the meantime, some snaps from the report: - #Lockbit victim French hospital "CHC-SV" rejects ransom payment requests - Omni Hotels Hit by Ransomware Attack - Japanese Optical Giant #Hoya Hit by Ransomware Attack In this report you will also find the necessary information to protect your digital assets. 💡🔒 👉 https://lnkd.in/gG2mfZ_c Join us to unravel the complexities of the cyber realm and stay informed. Follow us to stay one step ahead of the game and learn strategies to keep you safe. 💪 Becasuse, we know what information #hackers have on you! #CyberSecurity #ThreatIntelligence #CTI #InformationSecurity

22

🔷 Using secure defaults: Where and when possible, use secure default settings. History tells us that in most cases the defaults (secure or not) will be used, and only a few make the effort to do otherwise. 🔷 Clear security choices: When presenting users with choices, any security implications of such choices should be clear concerning consequences and trade-offs. #sdlc #applicationsecurity #securedesign

38

If this is as prevalent as suggested, it is a sad day for the industry as a whole, and an excellent reminder of why during audits and assessments we evaluate topics such as: 1 - Consideration of fraud as a function of risk assessment practices. 2 - Evaluation of leadership and "tone at the top" as it relates to the design and implementation of the corporate information security program. 3 - Availability of mechanisms to report concerns associated with information security, regulatory compliance, ethics... And so much more... Integrity is the essence of everything successful. ~ R. Buckminster Fuller

5

📢 Discover Malva․RE: Our New Advanced Malware Analysis Solution, Now in Beta! 📢 At Yneos, our mission is to free up time for what's essential by enabling cybersecurity experts to quickly access critical elements of malware while eliminating repetitive tasks. Today, we are thrilled to introduce Malva․RE, our static and structural malware analysis solution, now available in beta. 🔍 What is Malva․RE? Malva․RE is our new malware analysis platform, and it stands out by: • 🗂 Decapsulating over 40 file formats, such as Word documents, PDFs, and emails, often used in infection chains. • 🔍 Extracting configurations from more than 20 malware families to provide a comprehensive and detailed view of threats. • ⚙️ Offering fast and accurate static and structural analysis of malicious code without executing the malware, thereby minimizing infection risks. 🌟 Why Malva․RE is unique: • ⚡ Performance: Fast and efficient, saving your valuable time. • 🚀 Innovation: We use cutting-edge technologies for deeper analyses. • 💻 Accessibility: A user-friendly interface that's easy to use. • 🔐 Security: Static analysis reduces the risks associated with executing malware. • 👥 Who is it for? Malva․RE is designed for CERTs, CSIRTs, incident responders, antivirus vendors, and all cybersecurity experts looking to optimize their malware analysis capabilities. Why a beta version? Because we believe in the power of the community. By launching this beta version, we seek your feedback to refine and improve Malva․RE. Your insights are essential to help us create the most effective tool possible. Every comment and suggestion helps us move forward. Join our beta program (link in comments) and be among the first to explore the capabilities of Malva․RE. Together, let's make cybersecurity a priority. About Yneos : Yneos is a startup specializing in developing software solutions for cybersecurity professionals. Our mission is to free up time for what's essential by enabling cybersecurity experts to quickly access critical elements of malware while eliminating repetitive tasks. #Cybersecurity #MalwareAnalysis #IncidentResponse #ThreatIntelligence #Malware #Maldoc

14

2 komentáře