Cybersecurity News Byte with Jim Guckin: Recent Episodes
Jim Guckin
A weekly show that covers the important news stories in the Cybersecurity world with commentary by Jim Guckin
This week we talk about [0:36] how PowerSchool’s deleted data came back to haunt North Carolina schools, then [6:09] a massive IoT botnet that turned everyday devices into cybercriminal accomplices, then [11:13] a sneaky backdoor hidden in Magento extensions for over six years, and finally [15:50] how a government-endorsed Signal clone led to a national security headache.
Contents Commvault’s Zero-Day Drama. 2 Harrods Joins the Cyber Hit List 3 The Malware Love Story You Didn’t Swipe Right On. 4 When Your Router Turns Against You. 5 Links Commvault’s Zero-Day Drama Harrods Joins the Cyber Hit List The Malware Love Story You Didn’t Swipe Right On When Your Router Turns Against You Phish,...
Contents Cookie-Bite Attacks: Emerging Threat to Cloud and MFA Security. 2 Lazarus Strikes Before You Update. 3 Hackers Exploit Cloudflare Tunnels to Infiltrate Systems. 4 R00TK1T’s TikTok Takedown. 5 Links Cookie-Bite Attacks: Emerging Threat to Cloud and MFA Security Lazarus Strikes Before You Update Hackers Exploit Cloudflare Tunnels to Infiltrate Systems R00TK1T’s TikTok Takedown
From fake Chrome download pages spreading SpyNote malware to stealthy attacks on Fortinet devices and dangling DNS exploits, cyber criminals are getting creative. Meanwhile, Volt Typhoon shows China’s long game in infiltrating U.S. infrastructure. This episode dives into the hidden threats lurking behind legitimate facades.
From fake toll smishing attacks and job scam malware to tax-themed phishing and compromised npm packages, cybercriminals are pulling out all the psychological stops. This episode exposes how attackers prey on urgency, trust, and tax season chaos to deploy malware like BeaverTail, Tropidoor, and Remcos. Tune in to learn how to spot the tricks before they drain your data—or your crypto wallet.
This week we talk about [00:36] We talk about a new Remote Access Trojan (RAT) that uses Telegram as it's command and control server, then [07:56] we talk about how DigiCert made a mistake and needed to revoke certificates and the chaos that causes, but why it's needed, then [16:21] we talk about how criminals once again are utilizing CloudFlare's free tunnel service to once again get around security controls and compromise systems and finally [22:44] how the rise of fake profiles on LinkedIN are being used to gain information that could be used again you.
[00:36] Telegram-Controlled tRat Attacking Linux Systems [07:56] DigiCert Revoke 83,000 customer certificates [16:21] Criminals Abusing Cloudflare Tunnels (again) [22:44] LinkedIn Profiles Target Workers for Information Leakage
This week we talk about [00:36] how Citrix is warning its customers to be aware of this integrated third party tool, then [07:55] we finally learn the identity of the main member of LockBit, Then we talk about [14:04] Dell had one of their sites scraped and all it cost them was 49 million customers records and we round up this weeks discussion on [23:09] a wordpress plugin that is being actively exploited by hackers and how even if you don't use this plugin, you can protect yourself.
This week we talk about [00:36] how a major player in the website protection game, get's hacked, [09:13] A Russian hacker group is using vulnerabilites from December to gain access to your account, [16:20] Mastadon has a critical vulnerability, can the admins patch their servers in time and finally [22:50] A popular remote access tool had their systems breach, and you should reset your account anyway.
[00:36] Cloudflare Hacked [09:13] Russian Hackers using NTLM Relay Attacks [16:20] Critical vulnerability in Mastodon [22:50] AnyDesk breached, reset passwords
This week we talk about [00:36] an Outlook vulnebility that leaks a hashed password to places it shouldn't, then [06:32] The US government doesn't need warrants for your information they just pay data brokers, [13:58] The NoName Ransomware group take target at industries around the work, and finally [20:31] the Trello data breach that wasn't really a data breach and why that doesn't make us feel any better.
On my return for 2024, we talk about [00:36] how a Russia backed group hacked Microsoft's top leaders email account, [09:25] VMWare sounds the alarm about their latest critical vCenter vulnerability that's currently being used in attacks, [16:00] How a popular IT remote access tool is being exploited back hackers and what not to do, and finally [23:11] a long dormant group wakes back up and using email to create havoc.
This week we talk about [00:36] ownCloud let's it users know it's found 3 critical vulnerabilites in some of it's software, [06:57] A school app based in India was leaking personal student data due to misconfiguration, [12:15] Microsoft takes a sucessful attack again it's Windows Hello service to break into computers and [18:49] BlackCat is back at it again, by claiming to hack a fortune 500 company.
This week we talk about [00:36] We talk about how some security researchers were able to extract a RSA key from signing errors, [07:27] How a now defunt shadowy hack-for-hire group was behind a bunch of attacks, [15:11] Vulnerabilities in some AL and ML tools should they give you something to think about, [22:59] and an old tactic being used to extract money from those who care and reminder how it's the season for social engineering.
This week we talk about [00:36] The Lace Tempest group seen exploiting a vulnerability in a popular IT Support Software, [06:46] Then we talk about how a company suffered a compromise, paid the attacker and the data was still leaked, [13:38] We talk about the new vulnerability that CISA is warning about, and finally [17:34] Sumo Logic urges it's users to change their credentials.
This week we talk about [00:36] A zero-day in a popular webmail client that can be exploited without interaction, then [06:38] How Octo Tempest gang's new addition to social engineering is a little scary, [14:12] The Lockbit gang has claimed to have hacked Boeing, but is it true and finally [18:57] A social engineering tactic being used on LinkedIN to spread malware.
This week we talk about [00:36] a new advertising campaign that is targeting Notepad++ to spread malware, then [00:36] a new cheaper malware avaialbe to cybercriminals that you need to be aware of, [00:36] a IT company's misconfiguration exposes 820,000 customers data, and Cisco has a new zero-day that's as severe as can be.
This week we talk about [00:36] How the blockchain is being utilized to help the spread of malware, [08:18] How the ToddyCat malware is being improved upon and how it's being utilized for compromising exchange servers, [14:47] How ALPHV has stolen data from a hosptial and how their extortion techniques are getting worse, and [21:03] DarkGate malware is making a come-back and how it changed it's money making model.
This week we talk about [00:36] how buying cheap android products on popular ecommerce sites may come preloaded with malware, then [07:16] we talk about how the curl library and command has 2 security patches that you need to make sure you update this week, [11:11] a popular DNA testing company has their data leaked on the internet and why that should concern you, and [16:25] Sony confirms another breach linked to the MoveIT vulernability.
This week we talk about how a new attack, is actually just hackers using the tools that security testers are using against us, Then we talk about how Apple has a new 0-day vulnerability that needs patching, and then to be fair we talk about the new Android vulnerability that is also being actively exploited, then we wrap it all up with a discussion about the Chinese hacker who gets access to Microsoft's encryption key and use it to breach the US government.
We talk about a new exploit that abuses a computer search component that hopes to trick your users into clicking malware, Then a new malware with an older tactic, using ads for popular technology software to get you to download and install it, Then we talk about a new report that explains why the education sector is a high value hacker target and we round off the week talking about how a hacker forum, known to selling breach data, is having its data sold after a breach.
Today's episode we talk about the recetly uncovered 2 year old botnet called AVrecon, Then talk about how criminals are making their own AI called WormGPT, How a recently busted cyber fraud market website annoucned a new owner coming and finally we just back and give updates on SwingVPN and JumpCloud.
[00:36] AVrecon infects 70,000 routers
[09:56] WormGPT for clever phishing
[15:51] Genesis Market sold despite FBI disruption
[20:58] Story Updates, not update updates
On this week’s show we talk about [00:36] Android security update patches 3 exploits that are being actively used, [08:05] A new technique that allows the successful tricking of voice authentication, [15:20] JumpCloud security incident that causes the reset of their APIs and [21:52] TeamPhisher tool exploits Microsoft Teams.
This weeks show, we talk about a security researches discovery about Swing VPN, then the US Military is warning it's staff beware of unexpected smart watches, followed by the latest Mirai botnet campaign targeting IoT devices and finish the episode off with how a self propregrating malware found it's way to a healthcare network.
[00:36] Popular Swing VPN Android App as DDoS Botnet
[08:44] US Military warns of unexpected smart watches
[13:46] Latest Mirai Campaign Leveraging Multiple IoT Exploits
[19:09] Self-Propagating Malware Inadvertently Affects Networked Storage Devices
On this week's show, we talk about the new threat group that is targetting SSH servers, Barracuda announces get rid of impacted appliances after a Zero-Day attack on their equipment, GravityRAT pretends to be messaging application to go after your WhatsApp backups, and MOVEit Transfer in the news again for a third vulnerability in a few weeks.
[00:36] New Threat Group Targets SSH Servers
[06:23] Barracuda Zero-Day Attacks
[11:55] GravityRAT goes after WhatsApp backups
[14:55] Third MOVEit Bug Discovered
I talk about the [00:36] new easily exploitable Microsoft Visual Studio bug, [08:38] A new report that puts CyberSecurity awareness center stage, [19:15] A new “Picture in Picture” technique used in a new deceptive phishing attack, and [24:24] a security company releasing a PoC for Windows Win32k bug exploited in attacks, patch now!
Bullet points of key topics + chapter markers [00:36] New Backdoor Malware for Intelligence Gathering [00:36] New Ransomware Exhibit Striking Similarities with an older name [00:36] Discord Admins hit with malicious Bookmark [00:36] MOVEit Transfer zero-day mass-exploited in data theft attacks
Bullet points of key topics + chapter markers [00:36] Entering the Summer Caution Season [12:02] Size doesn’t matter when it comes to cyberattacks [21:43] Hot Pixels: checks CPU temp, power changes to steal data [29:44] Enhanced Legion Credential Harvester Targets SSH Servers and AWS Credentials
Bullet points of key topics + chapter markers [00:36] Cybersecurity firm Dragos discloses security incident and extortion attempt [00:36] DarkBERT [00:36] BrutePrint, vulnerability to Brute Force Fingerprint Locks [00:36] Voice Cloning-as-a-Service
Date: May 15, 2023 Episode title and number: 56 - May 15, 2023
Bullet points of key topics + chapter markers [00:36] Car location data of 2 million customers exposed for ten years [06:54] Millions of mobile phones come pre-infected with malware [12:25] Phishing Campaign Distributes SmokeLoader via Fake Invoice [16:00] Crooks are Using Malicious QR Codes to Steal Your Money
Bullet points of key topics + chapter markers
[00:36] Pentagon Document Leak [11:49] NCR was the victim of BlackCat ransomware gang [18:16] Free Movie Sites are a bad idea [24:14] Vice Society Ransomware Using Stealthy PowerShell Exfiltration
Bullet points of key topics + chapter markers [00:36] Impersonating Ransomware Gangs for Extorsion [08:39] DISH slapped with multiple lawsuits after ransomware cyber attack. [15:20] Lazarus Group Linked to 3CX Supply Chain Hack [22:05] Ukrainian Hacktivists Trick Russian Military Wives for Personal Info
Bullet points of key topics + chapter markers [00:36] Instagram scam uses fake SHEIN gift cards as lure [00:36] Linus Tech Tips Hacked [00:36] Another one bites the dust [00:36] Fake IRS tax email delivers Emotet malware
Bullet points of key topics + chapter markers [00:36] Google Pixel flaw allowed recovery of redacted, cropped images. [05:39] Actively Exploited Microsoft Outlook Vulnerability Imperils Microsoft 365 Apps [10:43] Emotet malware now distributed in Microsoft OneNote files to evade defenses [15:56] Hackers Use AI-Generated YouTube Videos to Spread Info-stealers
Bullet points of key topics + chapter markers [00:36] Batloader uses Google Ads [06:02] Crypto: Pay to Earn Scam [13:21] Akamai has mitigated the largest DDoS...So Far [19:01] Xenomorph Android Banking Trojan Returns
Bullet points of key topics + chapter markers [00:36] Popular fintech apps expose exploitable secrets [07:16] Microsoft Word RCE PoC is public [11:26] Phishing Campaign Targets Job Seekers, Employers [18:14] Old Vulnerabilities haunt organizations
Bullet points of key topics + chapter markers
[00:36] New CrySIS/Dharma Ransomware Variants [07:45] No Fly List Uncovered [17:12] Riot Games Hacked [22:23] MailChimp discloses new breach
Bullet points of key topics + chapter markers
[00:36] Medical Imaging Firm Faces 2 Class Actions [10:32] Hackers disrupt virtual esports event [17:49] Security Things to Remember as People Return to Work [23:43] PoC for critical bugs in popular WordPress plugins
Bullet points of key topics + chapter markers
[00:36] Hackers go after PII the most [09:35] InfoSec Community Target in Phishing Campaign [16:09] Harder to Detect Phishing Technique [23:47] Ransomware Victims Pay for Data Deletion
Cisco Warns of Many Old Vulnerabilities Being Exploited in Attacks, Glupteba botnet is back after Google disrupted it, 85% of attacks now use encrypted channels, InfraGard Hacked/Hacker Halts Sale of FBI’s High-Profile InfraGard Database
[00:36] Sequoia Discloses a Data Breach [09:56] Health Dept warns of Royal Ransomware [16:35] Hackers earn $989,750 for 63 zero-days exploited at Pwn2Own Toronto [23:17] Cisco discloses high-severity IP phone zero-day
How not to handle vulnerabilites, HHS warns use of pixel tracking tech without BAA violates HIPAA, Trustcor dropped as root certificate authority, Hyundai app bugs allowed hackers to remotely unlock, start cars
Tis the Season for Cyber Security, 487 Million WhatsApp Users Numbers for Sale, Hospitality company confirms Data Breach, SocGholish finds success through novel email techniques
Bullet points of key topics + chapter markers
[00:36] Amazon RDS Instances Leaking Users' Personal Data
[04:24] Dangerous BatLoader Malware Dropper
[10:44] Samba Vulnerability Can Lead to DoS or RCE
[15:23] RapperBot Targets Game Servers with Modified Brute-Force and DDoS Attacks
Bullet points of key topics + chapter markers
[00:36] Companies who pay ransomware become targets
[10:50] Yanluowang Group Hacked
[19:55] Hackers Are Publishing Stolen Abortion Records on the Dark Web
[25:06] Fake financial regulators
Bullet points of key topics + chapter markers
[00:36] Hack of IT firm may include health records
[09:03] FBI: Hacktivist DDoS attacks had minor impact on critical orgs
[15:05] AstraZeneca password lapse exposed patient data
[21:26] Hijacker replaces crypto addresses with lookalikes
[00:36] Data Wiper Frame Security Researchers
[08:12] Chrome Urgent Update
[12:09] LinkedIN Phishing Campaign Bypass Protections
[17:13] Cranefly’s Stealthy Techniques
Bullet points of key topics + chapter markers
[00:36] Emotet learns a new trick
[06:16] Are Open-Source Repositories Safe?
[12:34] Text4Shell Concern
[18:18] 16 Apps Pulled Due to Malware
Bullet points of key topics + chapter markers
[00:36] Emotet’s Current Tactics
[06:33] Zimbra’s Unpatched RCE Flaw
[11:15] Toyota Customers prepare for Phishing
[17:04] City of Tucson discloses data breach
Bullet points of key topics + chapter markers
[00:36] Patreon Lays Off Its Entire Security Team
[13:17] Uber Hacked
[22:59] Rockstar Hacked
[30:51] TikTok can record what you type
Bullet points of key topics + chapter markers
[00:36] Patreon Lays Off Its Entire Security Team
[13:17] Uber Hacked
[22:59] Rockstar Hacked
[30:51] TikTok can record what you type
Bullet points of key topics + chapter markers
[00:36] Magecart’s New JavaScript Skimmer Targets Magento Websites
[06:59] Hackers adopt Sliver toolkit as a Cobalt Strike alternative
[14:53] Google Chrome emergency update fixes new zero-day used in attacks
[23:13] Was TikTok Breached?
Bullet points of key topics + chapter markers
[00:36] Magecart’s New JavaScript Skimmer Targets Magento Websites
[06:59] Hackers adopt Sliver toolkit as a Cobalt Strike alternative
[14:53] Google Chrome emergency update fixes new zero-day used in attacks
[23:13] Was TikTok Breached?
Bullet points of key topics + chapter markers
[00:36] LastPass Developer System Breached
[08:29] Nelnet Servicing breach exposes data of 2.5M student loan accounts
[15:30] Malware delays coinminer install to evade detection
[24:47] LockBit ransomware gang tries triple-extortion tactic
[01:31] iPhone Users Update Now to Patch 2 Zero-Days
[08:30] Lazarus Group Targets Engineers with Malware
[15:44] Hackers Stole from Bitcoin ATMs using Zero-Day
[23:25] TA558 Group Targets Hospitality, Hotel and Travel
Bullet points of key topics + chapter markers
[00:28] Flaws Found in Siemens' Industrial Network Management System
[07:12] Researchers Uncover 'Hermit' Android Spyware Used in Kazakhstan, Syria, and Italy
[15:21] Facebook Messenger Scam Duped Millions
[21:01] Linux Malware Deemed ‘Nearly Impossible’ to Detect
Bullet points of key topics + chapter markers
[00:28] Flaws Found in Siemens' Industrial Network Management System
[07:12] Researchers Uncover 'Hermit' Android Spyware
[15:21] Facebook Messenger Scam Duped Millions
[21:01] Linux Malware Deemed ‘Nearly Impossible’ to Detect
HelloXD Ransomware Installing Backdoor on Targeted Windows and Linux Systems, Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks, Chinese Hackers Distribute Backdoored Wallets for iOS and Android Users, New Botnets Target Critical Vulnerability in Confluence Servers
Bullet points of key topics + chapter markers
[00:36] State-Backed Hackers Exploit 'Follina' to Target Entities in Europe and U.S
[06:06] Global Law Enforcement Operation Shuts Down FluBot
[11:16] SideWinder APT Launched More than 1,000 Attacks in Two Years
[17:50] Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones
[00:36] Ransomware demands acts of kindness to get your files back
[09:05] Microsoft Office zero-day leaves researchers scrambling
[13:46] Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely
[18:32] Experts Warn of Rising ChromeLoader Malware Hijacking Users' Browsers
Malware Campaign Targets InfoSec Community, Vulnerabilities found in Bluetooth gives hackers access to numerous devices, Hackers Gain Fileless Persistence SQL Servers Using a Built-in Utility, Bank refuses to pay ransom to hackers, sends spicy pics instead
Bullet points of key topics + chapter markers
[00:36] US college forced to close after cyberattack
[06:39] Conti Ransomware Attack Spurs State of Emergency in Costa Rica
[12:19] 7 to rent DCRat to backdoor your network
[18:55] ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks
Bullet points of key topics + chapter markers
[00:32] Researchers Develop Exploit for the Latest F5 BIG-IP Vulnerability
[04:11] USB-based Wormable Malware Targets Windows Installer
[10:25] Attackers Use Event Logs to Hide Fileless Malware
[17:26] Unpatched DNS Bug Puts Millions of Routers, IoT Devices at Risk
[00:29] New Malware Loader 'Bumblebee' in the Wild
[07:31] Hackers Exploit Critical Vulnerability in VMware to Install Malware
[11:32] Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector
[15:56] Emotet is back with some new tricks
Bullet points of key topics + chapter markers
[00:37] Hackers Sneak 'More_Eggs' Malware Into Resumes Sent to Corporate Hiring Managers
[04:38] Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug
[08:34] Successful first round of DHS bug bounty program
[13:12] Bluetooth vulnerability in smart COVID test patched
[00:35] Apple Rushes Out Patches for 0-Days in MacOS, iOS
[05:59] QNAP Customers Waiting on Fix for OpenSSL Bug among others
[12:39] GitLab Releases Patch for Critical Vulnerability That Could Let Attackers Hijack Accounts
[16:45] Chinese Hackers Target VMware Horizon Servers with Log4Shell
Bullet points of key topics + chapter markers
[00:43] Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines
[06:09] New "B1txor20" Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw
[09:45] German Government Warns Against Using Russia's Kaspersky Antivirus Software
[15:05] New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access
Bullet points of key topics + chapter markers
[00:37] Hackers Abuse Mitel Devices to Amplify DDoS Attacks
[06:54] Critical Bugs Could Let Attackers Damage APC Smart-UPS Devices
[11:29] New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices
[14:23] SharkBot Banking Malware Spreading via Fake Android Antivirus
Date: March 06, 2022
Episode title and number: 10 - March 06, 2022
CISA and FBI warn of potential data wiping attacks spillover, TeaBot Trojan Haunts Google Play Store, Again, New Mozilla Firefox 0-Day Bugs Under Active Attack, New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container
Bullet points of key topics + chapter markers
[00:13] CISA and FBI warn of potential data wiping attacks spillover
[06:35] TeaBot Trojan Haunts Google Play Store
[10:55] Again, New Mozilla Firefox 0-Day Bugs Under Active Attack
[11:21] New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container
Bullet points of key topics + chapter markers
[00:35] Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store
[04:05] New Flaws Discovered in Cisco's Network Operating System for Switches
[07:38] 9-Year-Old Unpatched Email Hacking Bug Uncovered in Horde Webmail Software
[10:37] Hackers Attack Unpatched Microsoft SQL Database Servers
Bullet points of key topics + chapter markers
[00:30] TrickBot getting a new upgrade and targeting high-end sites
[06:59] Emotet Now Spreading Through Malicious Excel Files
[13:09] Critical vulnerabilities in Zabbix Web Frontend
[17:36] Users tricked into allowing device access due to overload of push notifications
A Ransomware Groups’ New Tactic, PHP Everywhere WordPress Plugin Vulnerability, Hackers Planted Fake Digital Evidence on Devices, DOJ Arrests Two and Seizes $3.6 Billion Stolen Cryptocurrency, The Pirate Bay Clones Target Millions of Users Every Month
Argo CD Security Bug Opens Kubernetes to Attackers, Critical Vulnerabilities Discovered in Airspan Networks Mimosa, Hackers Exploit 0-Day Vulnerability in Zimbra, Dozens of Security Flaws Discovered in UEFI Firmware, Samba Bug Allows Remote Attackers to Execute Code as Root
Segway Hit by Magecart Attack, Work at Home sees a Surge in Insider Threats, Newly Discovered Critical Linux Vulnerability, New Standard Aims To Protect Against Deepfakes, Hackers use Windows Update to deploy malware
Bullet points of key topics + chapter markers [00:33] Segway Hit by Magecart Attack [04:45] Work at Home sees a Surge in Insider Threats [10:12] Newly Discovered Critical Linux Vulnerability [13:22] New Standard Aims To Protect Against Deepfakes [17:14] Hackers use Windows Update to deploy malware
Date: January 23, 2022 Episode title and number: 04 - January 23 2022 McAfee has patched two high-severity bugs in its Agent component, 20K WordPress Sites Exposed by Insecure Plugin, 2FA Bypassed in $34.6M Crypto.com Heist, Cybercriminals Actively Target VMware vSphere with Cryptominers, Two-Fifths of Ransomware Victims Still Paying Up Bullet points of key topics + chapter markers [00:32] McAfee has patched two high-severity bugs in its Agent component [02:48] 20K WordPress Sites Exposed by Insecure Plugin [05:34] 2FA Bypassed in $34.6M Crypto.com Heist [10:21] Cybercriminals Actively Target VMware vSphere with Cryptominers [12:35] Two-Fifths of Ransomware Victims Still Paying Up
Date: January 16, 2022 Episode number: 03 Router Flaw impacts millions of devices, Cloud Apps Replace Web as Source for Most Malware Downloads, Ransomware targets Edge users, Chrome will limit access to private networks, citing security reasons, Russia Rounds Up 14 REvil Ransomware Affiliates
[00:07] Introduction [00:33] Router Flaw impacts millions of devices [03:22] Cloud Apps Replace Web as Source for Most Malware Downloads [07:57] Ransomware targets Edge users [12:59] Chrome will limit access to private networks, citing security reasons [15:37] Russia Rounds Up 14 REvil Ransomware Affiliates
Date: January 09, 2022 Episode Number: 02 Dridex Phishing Email taunt victims of Covid hoax phish with funeral helpline, New warning over abuse of Google services, Norton360 comes with a Cryptominer, Thousands of Schools Impacted after provider hit with ransomware
Bullet points of key topics + chapter markers [00:34] Dridex Phishing Email Taunts [02:34] Warning about abuse of Google Services [04:41] Norton360 Cryptominer [07:35] Thousands of schools impacted by provider ransomware
Date: January 02, 2022 Episode title and number: 01 - January 02 2022 Initial launch of the podcast, discussion about the new malware targeting MSBuild and how to protect yourself, Why malicious actors are not 'aging' their domain name to attack your network, iLoBleed Rootkit targeting HP Servers, Apple AirTags being used to track people, and a phishing network bringing in 80 million a month.
[00:07] Introduction [01:27] Microsoft Build Engine Exploit [03:53] Domain Aging Tactic [06:45] ILoBleed Rootkit [09:42] Apple AirTags Are Being Used to Track People and Cars [12:23] Scam Phishing Network Costs Victims $80m Per Month