[Referências do Episódio]

Malvertisers zoom in on cryptocurrencies and initial access - https://www.malwarebytes.com/blog/threat-intelligence/2023/12/malvertisers-zoom-in-on-cryptocurrencies-and-initial-access

 BazarCall Attack Leverages Google Forms to Increase Perceived Credibility - https://abnormalsecurity.com/blog/bazarcall-attack-leverages-google-forms

Hackers are exploiting critical Apache Struts flaw using public PoC - https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-apache-struts-flaw-using-public-poc/

New Underground Market Comes Online Just inTime for the Holidays - https://www.zerofox.com/blog/new-underground-market-comes-online-just-intime-for-the-holidays/

Roteiro e apresentação: Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Atualizações de Segurança de dezembro de 2023 - https://msrc.microsoft.com/update-guide/releaseNote/2023-Dec 

 Speculative Leaks Security Notice - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7007.html 

Threat actors misuse OAuth applications to automate financially driven attacks - https://www.microsoft.com/en-us/security/blog/2023/12/12/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks/ 

Sophos backports RCE fix after attacks on unsupported firewalls - https://www.bleepingcomputer.com/news/security/sophos-backports-rce-fix-after-attacks-on-unsupported-firewalls/

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

China’s cyber army is invading critical U.S. services - https://www.washingtonpost.com/technology/2023/12/11/china-hacking-hawaii-pacific-taiwan-conflict/ 

Sandman APT | China-Based Adversaries Embrace Lua - https://www.sentinelone.com/labs/sandman-apt-china-based-adversaries-embrace-lua/

Making Order out of Chaos: How to Deal with Threat Group Names - Katie Nickels - https://www.youtube.com/watch?v=fV_9X9gnTIk

APPLE RELEASED IOS 17.2 TO ADDRESS A DOZEN OF SECURITY FLAWS - https://securityaffairs.com/155669/security/apple-released-ios-17-2.html 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Star Blizzard increases sophistication and evasion in ongoing attacks - https://www.microsoft.com/en-us/security/blog/2023/12/07/star-blizzard-increases-sophistication-and-evasion-in-ongoing-attacks/ 

Hi, My Name Is Keyboard - https://github.com/skysafe/reblog/tree/main/cve-2023-45866 

Spoofing DNS Records by Abusing DHCP DNS Dynamic Updates - https://www.akamai.com/blog/security-research/2023/dec/spoofing-dns-by-abusing-dhcp 

CUIDADO! ANDROID14 LOCKSCREEN BYPASS, VULNERABLES TUS FOTOS, TU HISTORIAL WEB, TODA TU CUENTA GOOGLE - https://www.youtube.com/watch?v=SKefEUqIxrg 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Curse of the Krasue: New Linux Remote Access Trojan targets Thailand - https://www.group-ib.com/blog/krasue-rat/

By the same token: How adversaries infiltrate AWS cloud accounts - https://redcanary.com/blog/aws-sts/

Getting gooey with GULOADER: deobfuscating the downloader - https://www.elastic.co/security-labs/getting-gooey-with-guloader-downloader 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-339a

TA422’s Dedicated Exploitation Loop—the Same Week After Week - https://www.proofpoint.com/us/blog/threat-insight/ta422s-dedicated-exploitation-loop-same-week-after-week 

Beware of predatory fin(tech): Loan sharks use Android apps to reach new depths - https://www.welivesecurity.com/en/eset-research/beware-predatory-fintech-loan-sharks-use-android-apps-reach-new-depths/ 

December 2023: Security Advisories Overview - https://confluence.atlassian.com/security/december-2023-security-advisories-overview-1318892103.html 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

P2Pinfect - New Variant Targets MIPS Devices - https://www.cadosecurity.com/p2pinfect-new-variant-targets-mips-devices/ 

Boletim de segurança do Android – dezembro de 2023 - https://source.android.com/docs/security/bulletin/2023-12-01?hl=pt 

POL Cyber Command has observed malicious activity against Microsoft Exchange servers - https://www.wojsko-polskie.pl/woc/articles/aktualnosci-w/detecting-malicious-activity-against-microsoft-exchange-servers/

Guidance for investigating attacks using CVE-2023-23397 - https://www.microsoft.com/en-us/security/blog/2023/03/24/guidance-for-investigating-attacks-using-cve-2023-23397/ 

New Threat Actor 'AeroBlade' Emerges in Espionage Attack on U.S. Aerospace - https://thehackernews.com/2023/12/new-threat-actor-aeroblade-emerges-in.html 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

New Tool Set Found Used Against Organizations in the Middle East, Africa and the US - https://unit42.paloaltonetworks.com/new-toolset-targets-middle-east-africa-usa/ 

Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware - https://thehackernews.com/2023/12/microsoft-warns-of-malvertising-scheme.html 

HUMAN Satori Threat Intelligence Alert: Account Takeover Attacks Use ScrubCrypt to Deploy RedLine Stealer Malware - https://www.humansecurity.com/learn/blog/human-satori-threat-intelligence-alert-account-takeover-attacks-use-scrubcrypt-to-deploy-redline-stealer-malware

Promon discovers new Android banking malware, “FjordPhantom” - https://promon.co/security-news/fjordphantom-android-malware/ 

EXPERT WARNS OF TURTLE MACOS RANSOMWARE - https://securityaffairs.com/155075/security/turtleransom-macos-ransomware.html 

Roteiro e apresentação: Carlos Cabral

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

About the security content of iOS 17.1.2 and iPadOS 17.1.2 - https://support.apple.com/en-us/HT214031 

Zyxel security advisory for authentication bypass and command injection vulnerabilities in NAS products - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-authentication-bypass-and-command-injection-vulnerabilities-in-nas-products 

New SugarGh0st RAT targets Uzbekistan government and South Korea - https://blog.talosintelligence.com/new-sugargh0st-rat/ 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

[Referências do Episódio]

Treasury Sanctions Mixer Used by the DPRK to Launder Stolen Virtual Currency - https://home.treasury.gov/news/press-releases/jy1933 

Zoom Vulnerability Allowed Hackers to Take Over Meetings, Steal Data - https://www.hackread.com/zoom-vulnerability-hackers-hijack-meetings-data/ 

New BLUFFS attack lets attackers hijack Bluetooth connections - https://www.bleepingcomputer.com/news/security/new-bluffs-attack-lets-attackers-hijack-bluetooth-connections/ 

DJVU Ransomware's Latest Variant 'Xaro' Disguised as Cracked Software - https://thehackernews.com/2023/11/djvu-ransomwares-latest-variant-xaro.html 

Black Basta Ransomware Has Extracted Over $100 Million From its Victims - https://www.corvusinsurance.com/blog/black-basta-ransomware-has-extracted-over-100-million-from-its-victims 

Roteiro e apresentação: Carlos Cabral e Bianca Oliveira

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia