Internet Safety Week – Edition No. 113

In edition #113 of Internet Security Week, the Rio de Janeiro State Treasury Department is a victim of ransomware, an efficient and accessible solution against data leaks for companies, 6 YouTube channels about malware analysis, and much more.

News

Ransomware software announces Rio de Janeiro's Finance Department as a victim

The group operating the Lockbit ransomware has announced the Finance Secretariat of the State of Rio de Janeiro as one of its victims. On its leak site, the group reported having seized a total of 420GB of data from the Secretariat. The group's post adds that on April 25, 2022, at 8:00 AM (supposedly GMT), the data will begin to be published. The group does not disclose the content of the 2,338,476 files supposedly in its possession.

In CISO Advisor

McDonald's provides details about customer data breach in Brazil

McDonald's Brazil was the victim of a cybercriminal attack, which resulted in the exposure of some of its customers' personal data. The warning appears in an email that has been sent to affected consumers since at least the 17th, informing them about the incident and the possibility of phishing scams via email or instant messaging.

By Felipe Demartini on Canaltech

Anti-Ransomware Strategies

Ransomware attacks no longer dominate headlines—reports of new victims emerge daily. Therefore, it is more important than ever for companies to have a well-designed, multi-layered strategy to protect themselves against this threat.

By Hugh Aver in Kaspersky Daily

High-impact flaws discovered in Lenovo notebook UEFI

ESET researchers have discovered and analyzed three vulnerabilities affecting several Lenovo notebook models. The first two vulnerabilities – CVE-2021-3971 and CVE-2021-3972 – affect the UEFI firmware drivers, which were initially designed for use only during the manufacturing process of Lenovo consumer notebooks. Unfortunately, these machines were also mistakenly included in the production of BIOS ISO images without being properly disabled.

By Martin Smolár in We Live Security

The most efficient and affordable solution against data leaks in companies

Data breaches are a serious and current security incident that can be easily prevented. When companies take the right precautions and actions, this type of security incident can indeed be resolved.

By Kelvin Zimmer on Lumiun Blog

Cybercrime opens marketplace for trade secrets

There is a new underground market created by cybercriminals, exclusively for the sale of data and documents from companies whose networks and servers have been hacked: it's called Industrial Spy and it's located on the deep web with the address ".onion". The marketplace has such a large amount of material that it even allows it to offer some data for free to its members.

In CISO Advisor

Emotet virus gains new capabilities and increases its dissemination rate tenfold

The Emotet malware continues to challenge its position as one of the most widespread threats in the world, increasing its spread rate more than tenfold in March. During this period, more than 30,000 phishing emails containing the virus were sent, compared to just under 3,000 recorded in February 2022.

By Felipe Demartini on Canaltech

Fakecalls: Learn about the Trojan that imitates phone calls

Cybercriminals are constantly creating increasingly sophisticated malware. Last year, for example, an unusual banking Trojan called Fakecalls emerged. In addition to the usual espionage features, it has an interesting ability to "talk" to the victim disguised as a bank employee.

By Igor Golovin on Kaspersky Daily

Channels

Reverse engineering is a complex task that can be difficult to learn. The sheer number of software programs and tools available makes the process even more challenging. For this reason, we've compiled this list of seven YouTube channels created by ESET, which offer very interesting and useful materials and content on how to apply reverse engineering to analyze malware.