Internet Security Week - Edition No. 103

In Edition No. 103 of Internet Security Week , blows simulating official government emails, Puma is hit by ransomware attack, Qbot needs 30 minutes to steal his data and more.

News

Learn how to protect yourself from blows that come simulating official government emails

Paying attention to email senders is often a common indication when it comes to prevention against phishing attacks. But this measure may not be fully effective when the blows come from emails that simulate the officers or, even worse, start from the real addresses themselves. This is what happened last week with the Gov.br domain, used by the federal government.

By Felipe Demartini in Canaltech

Hackers take off the Portuguese Correio and Portuguese Group websites

A hacker attack took off the website of the Portuguese newspaper Correio da Manhã, as well as the Sitesde all the Information Bodies of the Confina Group, owner of the newspaper, such as Saturday Magazine, Jornal de Negócios and CMTV.

In Ciso Advisor

Puma is hit by data violation after ransomware attack Kronos

Sports clothing manufacturer Puma was hit by data violation after the ransomware attack that hit Kronos, one of its US working team management services providers in December 2021.

By Sergiu Gatlan in Bleeping Computer

The Specter vulnerability: 4 years after its discovery

Four years have passed since the first publication of the Spectre and Meltdown survey, hardware vulnerabilities in modern processors. Since then, researchers have discovered several similar flaws, which can be potentially used to leak confidential data.

By Enoch Root in Kaspersky Daily

Malware detections for Android increased 428% in the last year, reports report

The new edition of the ESET threat report also highlights the attacks directed at the Log4J Library, which became the fifth most common external intrusion vector in 2021.

By Roman Kovac in We Live Security

Qbot needs only 30 minutes to steal their credentials and emails

Generalized malware known as QBOT (also known as QAKBOT or QUAKBOT) recently returned to light attack attacks and, according to analysts, only takes about 30 minutes to steal confidential data after initial infection.

By Bill Toulas in Bleeping Computer

CIBERATAQUE Ao Caixa involves 3,700 credit cards and R $ 137 million to loss

On Tuesday (8), the Federal Police arrested, as part of Operation Striker, a suspect of involvement in invasions of the internal network of Caixa Econômica Federal. The coup is being investigated since the last semester, after the diversion of money from account holders of the institution and improper registration of cards, generating a loss of about $ 137 million.

By Dácio Castelo Branco in Canaltech

Hacker Gamardon Group launches mass attack on Ukraine

Gamardon group hackers, which Ukraine Security Service (SSU) claims to be led by five Russian Federal Security Service officers (FSB), used the employment search service to attack a Ukrainian government agency. The discovery was made by researchers at Palo Alto Networks Unit 42 who, when monitoring this activity, observed an attempt to reach a government entity from Ukraine. The attack was done on January 19.

In Ciso Advisor