[Referências do Episódio]

- Outlook.com hit by outages as hacktivists claim DDoS attacks - https://www.bleepingcomputer.com/news/microsoft/outlookcom-hit-by-outages-as-hacktivists-claim-ddos-attacks/

- Anonymous Sudan: Threat Intelligence Report - https://files.truesec.com/hubfs/Reports/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf

- Malicious Actors Manipulating Photos and Videos to Create Explicit Content and Sextortion Schemes - https://www.ic3.gov/Media/Y2023/PSA230605

- Tens of Thousands of Compromised Android Apps Found by Bitdefender Anomaly Detection Technology - https://www.bitdefender.com/blog/labs/tens-of-thousands-of-compromised-android-apps-found-by-bitdefender-anomaly-detection-technology/

- Android Security Bulletin—June 2023 - https://source.android.com/docs/security/bulletin/2023-06-01?hl=en

- Stable Channel Update for Desktop - https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Thread da Microsoft sobre ataques explorando a CVE-2023-34362 no MOVEit Transfer - https://twitter.com/MsftSecIntel/status/1665537730946670595

- MOVEit Transfer Critical Vulnerability (May 2023) - https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023

- Announcing Windows 11 Insider Preview Build 25381 - https://blogs.windows.com/windows-insider/2023/06/02/announcing-windows-11-insider-preview-build-25381/

- KeePass 2.54 released - https://keepass.info/news/n230603_2.54.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media - https://media.defense.gov/2023/Jun/01/2003234055/-1/-1/0/JOINT_CSA_DPRK_SOCIAL_ENGINEERING.PDF

- North Korean Advanced Persistent Threat Focus: Kimsuky - https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-301a

- New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others - https://www.akamai.com/blog/security-research/new-magecart-hides-behind-legit-domains

- Como configurar autenticação baseada em certificados SSH - https://sidechannel.blog/como-configurar-autenticacao-baseada-em-certificados-ssh/

- MALWARE SPOTLIGHT: CAMARO DRAGON’S TINYNOTE BACKDOOR - https://research.checkpoint.com/2023/malware-spotlight-camaro-dragons-tinynote-backdoor/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Operation Triangulation: iOS devices targeted with previously unknown malware - https://securelist.com/operation-triangulation/109842/

- New Horabot campaign targets the Americas - https://blog.talosintelligence.com/new-horabot-targets-americas/

- When byte code bites: Who checks the contents of compiled Python files? - https://www.reversinglabs.com/blog/when-python-bytecode-bites-back-who-checks-the-contents-of-compiled-python-files 

- Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability - https://www.rapid7.com/blog/post/2023/06/01/rapid7-observed-exploitation-of-critical-moveit-transfer-vulnerability/

- MOVEit Transfer Critical Vulnerability (May 2023) - https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Tempest Vuln Watchlist - https://www.tempest.com.br/gerenciamento/threat-intelligence/vuln-watchlist/#contact

- SUPPLY CHAIN RISK FROM GIGABYTE APP CENTER BACKDOOR - https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/

- Dark Pink. Episode 2 - https://www.group-ib.com/blog/dark-pink-episode-2/

- CISA Adds One Known Exploited Vulnerability to Catalog - https://www.cisa.gov/news-events/alerts/2023/05/31/cisa-adds-one-known-exploited-vulnerability-catalog

- Reverse Engineering RokRAT: A Closer Look at APT37’s Onedrive-Based Attack Vector - https://threatmon.io/reverse-engineering-rokrat-a-closer-look-at-apt37s-onedrive-based-attack-vector/ 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector - https://blog.cyble.com/2023/05/30/pixbankbot-new-ats-based-malware-poses-threat-to-the-brazilian-banking-sector/

- New macOS vulnerability, Migraine, could bypass System Integrity Protection - https://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/

- Barracuda Email Security Gateway Appliance (ESG) Vulnerability - https://www.barracuda.com/company/legal/esg-vulnerability 

- Fog of war: how the Ukraine conflict transformed the cyber threat landscape - https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/

- Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals - https://www.trendmicro.com/en_us/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- GobRAT malware written in Go language targeting Linux routers - https://blogs.jpcert.or.jp/en/2023/05/gobrat.html

- DogeRAT: The Android Malware Campaign Targeting Users Across Multiple Industries - https://cloudsek.com/blog/dogerat-the-android-malware-campaign-targeting-users-across-multiple-industries

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- New Info Stealer Bandit Stealer Targets Browsers, Wallets - https://www.trendmicro.com/en_us/research/23/e/new-info-stealer-bandit-stealer-targets-browsers-wallets.html

- CISA adds recently patched Barracuda zero-day to its Known Exploited Vulnerabilities catalog - https://securityaffairs.com/146729/security/cisa-barracuda-0day-catalog.html

- Barracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) on May 19, 2023. - https://status.barracuda.com/incidents/34kx82j5n4q9

- Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware - https://blog.talosintelligence.com/mercenary-intellexa-predator/

- The Dark Frost Enigma: An Unexpectedly Prevalent Botnet Author Profile - https://www.akamai.com/blog/security-research/dark-frost-botnet-unexpected-author-profile 

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII - https://www.sentinelone.com/labs/operation-magalenha-long-running-campaign-pursues-portuguese-credentials-and-pii/

- Volt Typhoon targets US critical infrastructure with living-off-the-land techniques - https://www.microsoft.com/en-us/security/blog/2023/05/24/volt-typhoon-targets-us-critical-infrastructure-with-living-off-the-land-techniques/

- COSMICENERGY: New OT Malware Possibly Related To Russian Emergency Response Exercises - https://www.mandiant.com/resources/blog/cosmicenergy-ot-malware-russian-response

- Buhti: New Ransomware Operation Relies on Repurposed Payloads - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/buhti-ransomware

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Legion Update to attach SSH Servers - https://www.cadosecurity.com/updates-to-legion-a-cloud-credential-harvester-and-smtp-hijacker/

- Technical Analysis of Pikabot - https://www.zscaler.com/blogs/security-research/technical-analysis-pikabot

- Agrius Deploys Moneybird in attacks against israeli organizations - https://research.checkpoint.com/2023/agrius-deploys-moneybird-in-targeted-attacks-against-israeli-organizations/

- Attacks against Ukranian organization - https://thehackernews.com/2023/05/cyber-attacks-strike-ukraines-state.html e https://cert.gov.ua/article/4697016

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto