News – July 2021


  • Malware Makers Using ‘Exotic’ Programming Languages

    July 26, 2021

    Malware authors are increasingly using rarely spotted programming languages such as Go, Rust, Nim and DLang in order to create new tools and to hinder analysis, researchers have found. Use of those four languages is escalating in the number of malware families being identified, according to a report published on Monday by BlackBerry Research and Intelligence ...

  • WhatsApp chief claims government officials among 1,400 WhatsApp users targeted in 2019 attack

    July 24, 2021

    Senior government officials around the world – including individuals in high national security positions who are “allies of the US” – were targeted by governments with NSO Group spyware in a 2019 attack against 1,400 WhatsApp users, according to the messaging app’s chief executive. Will Cathcart disclosed the new details about individuals who were targeted in ...

  • New PetitPotam attack allows take over of Windows domains

    July 23, 2021

    A new NTLM relay attack called PetitPotam has been discovered that allows threat actors to take over a domain controller, and thus an entire Windows domain. Many organizations utilize Microsoft Active Directory Certificate Services, which is a public key infrastructure (PKI) server that can be used to authenticate users, services, and machines on a Windows domain. Read ...

  • FIN7’s Liquor Lure Compromises Law Firm with Backdoor

    July 23, 2021

    Financial cybercrime gang FIN7 has rebounded after the jailing of some key members, launching a campaign that uses as a lure a legal complaint involving the liquor company that owns Jack Daniels whiskey. The gambit successfully compromised at least one law firm, giving them a shot of the JSSLoader remote-access trojan (RAT), researchers said. According to ...

  • Even after Emotet takedown, Office docs deliver 43% of all malware downloads now

    July 23, 2021

    Malware delivered over the cloud increased by 68% in Q2, according to data from cybersecurity firm Netskope. The company released the fifth edition of its Cloud and Threat Report that covers the cloud data risks, threats and trends they see throughout the quarter. The report noted that cloud storage apps account for more than 66% of cloud ...

  • Gun owners’ fears after Guntrader.uk data breach

    July 23, 2021

    Thousands of names and addresses belonging to UK customers of a leading website for buying and selling shotguns and rifles have been published to the dark web following a “security breach”. Guntrader.uk told the BBC it learned of the breach on Monday and had notified the Information Commissioner’s Office. Police, including the National Crime Agency, are investigating. Read ...

  • Updated XCSSET Malware Targets Telegram, Other Apps

    July 22, 2021

    In the last update on the XCSSET campaign, security researchers at Trend Micro updated some of its features targeting latest macOS 11 (Big Sur). Since then, the campaign added more features to its toolset, which we have continually monitored. We have also discovered the mechanism used to steal information from various apps, a behavior that ...

  • Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day

    July 22, 2021

    iPhone users, drop what you’re doing and update now: Apple has issued a warning about a ream of code-execution vulnerabilities – some of which are remotely exploitable – and experts are emphatically recommending an ASAP update to version 14.7 of iOS and iPadOS. Unfortunately, you aren’t getting a fix for the flaw that makes your iPhones ...

  • Major websites hit by global outage

    July 22, 2021

    Visitors attempting to reach some sites received DNS errors, meaning their requests could not reach the websites. Affected services included Airbnb, UPS, HSBC bank, British Airways and the PlayStation network used for online games. One popular DNS provider, Akamai, reported “an emerging issue” with its Edge DNS service. Read more… Source: BBC News  

  • Mastermind Summit & Competition: connecting with the brightest minds of startup ecosystem worldwide

    July 22, 2021

    As part of a new edition of ICT Spring (September 14th and 15th), the renowned global tech conference organized since 2010, Mastermind Summit & Competition will take place on September 15th at the European Conference Center Luxembourg. This event – dedicated to the startup ecosystem – aims to promote and spread best practices, foster emulation ...

  • Industrial Networks Exposed Through Cloud-Based Operational Tech

    July 22, 2021

    The benefits of using a cloud-based management platform to monitor and configure industrial control systems (ICS) devices are obvious — efficiency, cost-savings and better diagnostics just for starters. But new research found critical vulnerabilities in these platforms that could be used to paralyze operations if left unmitigated. An analysis by Claroty’s newly branded Team82 research team ...

  • Kaseya obtains universal decryptor for REvil ransomware victims

    July 22, 2021

    Kaseya received a universal decryptor that allows victims of the July 2nd REvil ransomware attack to recover their files for free. On July 2nd, the REvil ransomware operation launched a massive attack by exploiting a zero-day vulnerability in the Kaseya VSA remote management application to encrypt approximately sixty managed service providers and an estimated 1,500 businesses. Read ...

  • Attacks on critical infrastructure are dangerous. Soon they could turn deadly, warn analysts

    July 22, 2021

    Tech analyst firm Gartner reckons that hackers will have turned computer systems into weapons to the point that they could injure or kill humans by 2025, and that beyond the human tragedy it will cost businesses $50 billion to remediate across IT systems, litigation and compensation. Past malware attacks, such as Stuxnet, which is believed to ...

  • NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

    July 21, 2021

    A credentials-stealing code bomb that uses legitimate password-recovery tools in Google’s Chrome web browser was found lurking in the npm open-source code repository, waiting to be planted within the sprawling galaxy of apps that pull code from that source. Researchers caught the malware filching credentials from Chrome on Windows systems. The password-stealer is multifunctional: It also ...

  • MacOS Being Picked Apart by $49 XLoader Data Stealer

    July 21, 2021

    There’s a new version of the old FormBook form-stealer and keylogger that’s added Mac users to its hit list, and it’s selling like hotcakes on underground markets for as low as $49. It’s not only cheap; it’s easy. The data stealer is distributed in the form of malware-as-a-service (MaaS) and stands out from competing malware by ...