Top News

• Russia denies Cyber Attacks on COVID 19 Vaccine Research Labs

"As soon as the UK and its allies-USA and Canada started to accuse Russia for launching cyberattacks on their research labs to steal data related to Corona Virus medicine/vaccine, Russia has denied the allegations readily by stating that it never asked any hacker or hackers group to steal data till date."

Link

TLP¹ : Green

• 7 No-Logs VPN Providers Exposed Personal Data & Logs Of Millions Of Users Online

"A group of seven Hong-Kong-based VPN (virtual private network) apps were reportedly found exposing Personally Identifiable Information (PII) of potentially over 20 million VPN users on their servers without any password protection or authentication."

Link

TLP¹ : Green

• Ghost Squad Hackers defaced a second European Space Agency (ESA) site in a week

"A group of hacktivists that goes online with the name Ghost Squad Hackers has defaced for the second time in a week a site of the European Space Agency (ESA)."

Link

TLP¹ : Green

Cybersecurity State: Surveillance, Cyberwarfare, Cybercriminality and Hacktivism

• Spain: Intelligence Uses NSO Group Malware To Target Catalan Leaders, Federal Judge Refuses To Dismiss WhatsApp Suit – OpEd

"NSO’s client, of course, did employ its Pegasus malware to hack the staff member’s phone.  Despite the fact that Citizen Lab did a forensic examination of the phone showing it was hacked by a nation-state, the court ruled that Amnesty had failed to prove that NSO or one of its customers was responsible for the hack."

Link

TLP¹ : Green

• Australia among countries most targeted by ‘significant’ cyber attacks, as cybercrime costs global economy US$6 trillion

"The prevalence and severity of cyber attacks are increasing at an alarming rate every year, so much so, that statistics estimate that cybercrime will cost the global economy a colossal $6 trillion per year by 2021 - with Australia among the countries most targeted by significant cyber attacks, according to analysis by one software firm."

Link

TLP¹ : Green

• Our Underwater World Is Full Of Cables… That Are Sometimes Attacked By Sharks

"In the search for new subsea oil fields, geologists use large vessels to tow several heavy-duty cables (called streamer cables) to collect seismic data."

Link

TLP¹ : Green

Breaches: Data Breaches and Hacks

• 142 Million Visitors: Hackers Try to Promote MGM Grand Knowledge Dump for Cryptocurrency

"Final year the large resort agency MGM Grand was hacked and the cybercriminals ostensibly obtained a large dump of names, addresses, cellphone numbers, and dates of beginning."

Link

TLP¹ : Green

Vulnerabilities: Vulnerability Advisories, Zero-Days,Patches and Exploits

• Emerging Mac Malware ThiefQuest Attacks macOS Devices, Encrypts Files, and Installs Keyloggers

"The malware known to be spreading through pirated versions of popular mac software shared on popular torrent sites. It was first spotted in the wild by Dinesh Devadoss, security research for K7 Lab."

Link

TLP¹ : Green

• Crypto.com Unveils Anti-Phishing Code For Exchange Users

"Hong Kong-based cryptocurrency platform Crypto.com announced on Friday it has rolled out its new anti-phishing email feature to help protect exchange users against phishing attempts."

Link

TLP¹ : Green

Incident Response: Infrastructure, Training, SIEM and Incident Handling

• IRS Warns Against ‘Dirty Dozen’ Scam Tactics | #coronavirus | #scams | #covid19

"The Internal Revenue Service released the annual “Dirty Dozen” list of tax scams last week, which took on a new significance during the coronavirus pandemic."

Link

TLP¹ : Green

Technical Articles: Forensics, Reverse Engineering, Malware, Phishing, Pentesting, Software Security and Cryptography

• Bramble - A Hacking Open Source Suite

"Bramble software has been designed for the bramble project. It incorporates many features of pentesting and IT Security. It's easy to use and completely editable. It allows beginners to learn hacking and gives more experienced users a customisable plug and play hacking tools so they can add their own code quickly."

Link

TLP¹ : Green

• Keylogger - Get Keyboard, Mouse, ScreenShot, Microphone Inputs From Target Computer And Send To Your Mail

"Get Keyboard,Mouse,ScreenShot,Microphone Inputs and Send to your Mail. Purpose of the project is testing the security of information systems"

Link

TLP¹ : Green

¹Traffic Light Protocol (TLP) [1] for information sharing:

• Red:Not for disclosure, restricted to participants only.
• Amber: Limited disclosure, restricted to participants organizations.
• Green: Limited disclosure, restricted to the community.

[1]https://www.first.org/tlp