In issue #129 of Internet Security Week , a free internet security test, we cover hacker use shortcut file to break in, tips for protecting your new computer, an FBI warning about ransomware attacks, and much more.
News
Google and Microsoft services are being used to host cryptocurrency scams.
Criminals are using legitimate hosting services and reviews on equally authentic websites to amplify the reach of fraudulent pages, which are later used in cryptocurrency scams.
By Felipe Demartini on Canaltech
Hacker now uses shortcut file to hack into corporate PC.
Cybercriminals spreading malware variants are switching to shortcut files (LNKs) to hack corporate PCs, according to a report by HP Wolf Security. The company's research indicates that shortcuts are gradually replacing the use of Office macros—which are beginning to be blocked by default by Microsoft—allowing attackers to establish themselves on networks and trick users into installing malware on their PCs.
In CISO Advisor
The number of hacked corporate network accesses is still high.
Statistics collected by the cybersecurity intelligence firm KELA during the second quarter of this year show that markets selling initial access to corporate networks have grown.
By Bill Toulas on Bleeping Computer
The criminals don't stop: rootkit in a new version.
Our researchers examined a new version of the CosmicStrand rootkit, which they found in the firmware MOD IFIED UEFI (Extensible Firmware Interface) – the code that loads first and initiates the operating system boot process when the computer is turned on.
By Julia Glazova in Kaspersky Daily
Tips for protecting your new computer against cyber threats.
We've put together a list of best practices and security measures to consider when thinking about protecting a newly purchased computer against digital threats.
By Phil Muncaster in We Live Security
Mexican cartels begin operating on the dark web.
Analysts at DarkOwl, a company specializing in dark web searches, have discovered several escrow-enabled marketplaces on the dark web that claim to be affiliated with the Sinaloa Cartel. One of them, named simply "Cartel de Sinaloa," is directly associated with this cartel and the Los Chapitos cartel. The site uses the same logo (a red and black skull with the phrase "Cartel de Sinaloa") as a Facebook group page with the same name.
In CISO Advisor
Scammers use remote access to steal money via Pix.
A retiree from Rio de Janeiro (RJ) had R$ 60,000 stolen from his account after falling victim to a new type of scam that uses social engineering and remote access applications to make transfers via Pix.
By Felipe Demartini on Canaltech
FBI warns: ransomware can encrypt devices multiple times in attacks.
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) today warned U.S. organizations that attackers deploying Zeppelin ransomware can encrypt their files multiple times. The two federal agencies also shared tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help security professionals detect and block attacks using this ransomware variant.
By Sergiu Gatlan on Bleeping Computer
New malicious campaign hunts for Discord tokens and credit card information.
Open source code is a boon for the IT industry—it helps programmers save time and create products more quickly and efficiently by eliminating the need to write repetitive, common code. To facilitate this sharing of knowledge, there are repositories—open platforms where any developer can publish their own packages with their code to streamline the development process for others.
By Elizaveta Shulyndina in Kaspersky Daily
Tool
Test Your Internet Security
- Do you know if your employees, students, or family are protected against phishing websites, malware, pornography, racist or terrorist content? Take the test now and find out!
- Free
Not yet subscribed to our newsletter to receive this content weekly in your email? Then sign up using the link below:
https://br.lumiun.com/semana-da-seguranca-na-internet
Share the link with your colleagues and friends.
