[Referências do Episódio]

- Redis Miner Leverages Command Line File Hosting Service - https://www.cadosecurity.com/redis-miner-leverages-command-line-file-hosting-service

- FACT SHEET: Biden-⁠Harris Administration Announces National Cybersecurity Strategy - https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/

- PyPI Packages Used to Deliver Python Remote Access Tools - https://www.kroll.com/en/insights/publications/cyber/pypi-packages-deliver-python-remote-access-tools

- MQsTTang: Mustang Panda’s latest backdoor treads new ground with Qt and MQTT - https://www.welivesecurity.com/2023/03/02/mqsttang-mustang-panda-latest-backdoor-treads-new-ground-qt-mqtt/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- IronTiger SysUpdate - https://www.trendmicro.com/en_us/research/23/c/iron-tiger-sysupdate-adds-linux-targeting.html

- Parallax RAT Infiltration - https://www.uptycs.com/blog/cryptocurrency-entities-at-risk-threat-actor-uses-parallax-rat-for-infiltration

- BlackLotus UEFI Bootkit Myth Confirmed- https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/

- Cisco Phones Vulnerabilities- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Blind Eagle Deploys Fake UUE Files and Fsociety to Target Colombia's Judiciary, Financial, Public, and Law Enforcement Entities - https://blogs.blackberry.com/en/2023/02/blind-eagle-apt-c-36-targets-colombia

- Incident 2 – Additional details of the attack - https://support.lastpass.com/help/incident-2-additional-details-of-the-attack

- Can You See It Now? An Emerging LockBit Campaign - https://www.fortinet.com/blog/threat-research/emerging-lockbit-campaign

- Blackfly: Espionage Group Targets Materials Technology - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/blackfly-espionage-materials

- Bitdefender Releases Decryptor for MortalKombat Ransomware - https://www.bitdefender.com/blog/labs/bitdefender-releases-decryptor-for-mortalkombat-ransomware/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- RIG Exploit Kit: In-Depth Analysis - https://www.prodaft.com/m/reports/RIG___TLP_CLEAR-1.pdf

- PureCrypter targets government entities through Discord - https://www.menlosecurity.com/blog/purecrypter-targets-government-entities-through-discord/

- TA569: SocGholish and Beyond - https://www.proofpoint.com/us/blog/threat-insight/ta569-socgholish-and-beyond

- Exfiltrator-22: An Emerging Post-Exploitation Framework - https://www.cyfirma.com/outofband/exfiltrator-22-an-emerging-post-exploitation-framework/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Investigating the PlugX Trojan Disguised as a Legitimate Windows Debugger Tool - https://www.trendmicro.com/en_us/research/23/b/investigating-the-plugx-trojan-disguised-as-a-legitimate-windows.html

- Ukraine says Russian hackers backdoored govt websites in 2021 - https://www.bleepingcomputer.com/news/security/ukraine-says-russian-hackers-backdoored-govt-websites-in-2021/

- Post do Marcus Murray sobre o takedown dos servidores do Anonymous Sudan - https://www.linkedin.com/posts/marcusmurrayse_threatintel-ddos-falseflag-activity-7034511549331353601-tkvZ/

- Anonymous Sudan: Threat Intelligence Report - https://files.truesec.com/hubfs/Reports/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- WinorDLL64: A backdoor from the vast Lazarus arsenal? - https://www.welivesecurity.com/2023/02/23/winordll64-backdoor-vast-lazarus-arsenal/

- How I Broke Into a Bank Account With an AI-Generated Voice - https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-bank-account-with-an-ai-generated-voice

- Clasiopa: New Group Targets Materials Research - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/clasiopa-materials-research

- Russian Malware Developer Arrested And Extradited To The United States - https://www.justice.gov/usao-mdfl/pr/russian-malware-developer-arrested-and-extradited-united-states

- Stable Channel Desktop Update - https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html

- Technical Advisory: Various Threat Actors Targeting ManageEngine Exploit CVE-2022-47966 - https://businessinsights.bitdefender.com/tech-advisory-manageengine-cve-2022-47966

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- About the security content of macOS Ventura 13.2 - https://support.apple.com/en-gu/HT213605

- Trellix Advanced Research Center Discovers a New Privilege Escalation Bug Class on macOS and iOS - https://www.trellix.com/en-us/about/newsroom/stories/research/trellix-advanced-research-center-discovers-a-new-privilege-escalation-bug-class-on-macos-and-ios.html

- Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs - https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/

- Hydrochasma: Previously Unknown Group Targets Medical and Shipping Organizations in Asia - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/hydrochasma-asia-medical-shipping-intelligence-gathering

- VMSA-2023-0004 - https://www.vmware.com/security/advisories/VMSA-2023-0004.html

- Weblogic-CVE-2023-21839 exploit - https://github.com/DXask88MA/Weblogic-CVE-2023-21839

- S1deload Stealer – Exploring the Economics of Social Network Account Hijacking - https://www.bitdefender.com/files/News/CaseStudies/study/428/Bitdefender-PR-Whitepaper-S1deloadStealer-creat6669-en-EN.pdf

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Frebniis: New Malware Abuses Microsoft IIS Feature to Establish Backdoor - https://symantec-enterprise-blogs.security.com/threat-intelligence/frebniis-malware-iis

- OPERATION SILENT WATCH: DESKTOP SURVEILLANCE IN AZERBAIJAN AND ARMENIA - https://research.checkpoint.com/2023/operation-silent-watch-desktop-surveillance-in-azerbaijan-and-armenia/

- Citrix Workspace app for Windows Security Bulletin for CVE-2023-24484 & CVE-2023-24485 - https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485

- Citrix Virtual Apps and Desktops Security Bulletin for CVE-2023-24483 - https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483

- Citrix Workspace app for Linux Security Bulletin for CVE-2023-24486 - https://support.citrix.com/article/CTX477618/citrix-workspace-app-for-linux-security-bulletin-for-cve202324486

- Havoc Across the Cyberspace - https://www.zscaler.com/blogs/security-research/havoc-across-cyberspace

- WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks - https://www.sentinelone.com/labs/wip26-espionage-threat-actors-abuse-cloud-infrastructure-in-targeted-telco-attacks/

- ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023 - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy

- Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software - https://thehackernews.com/2023/02/critical-rce-vulnerability-discovered.html

- Fog of war: how the Ukraine conflict transformed the cyber threat landscape - https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Google Ads e SEO Poisoning: como os adversários empregam malvertising em campanhas de disseminação de malware - https://sidechannel.blog/google-ads-e-seo-poisoning/

- 스테가노그래피 기법 사용한 한글(HWP) 악성코드 : RedEyes(ScarCruft) - https://asec.ahnlab.com/ko/47622/

- Molted skin: APT SideWinder 2021 campaign that targeted over 60 companies in the Asia-Pacific - https://www.group-ib.com/media-center/press-releases/sidewinder-apt-report/

- Exchange Server 2013 End of Support Approaching Fast - https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-2013-end-of-support-approaching-fast/ba-p/3741491

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaign - https://blog.talosintelligence.com/new-mortalkombat-ransomware-and-laplas-clipper-malware-threats/

- Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws - https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2023-patch-tuesday-fixes-3-exploited-zero-days-77-flaws/

- Check Point CloudGuard Spectral detects malicious crypto-mining packages on NPM – The leading registry for JavaScript Open-Source packages - https://blog.checkpoint.com/2023/02/14/check-point-cloudguard-spectral-detects-malicious-crypto-mining-packages-on-npm-the-leading-registry-for-javascript-open-source-packages/

- Tweets da Microsoft sobre ataques do DEV-0147 - https://twitter.com/MsftSecIntel/status/1625181255754039318

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto