[Referências do Episódio]

- Nice Try Tonto Team - https://www.group-ib.com/blog/tonto-team/

- About the security content of iOS 16.3.1 and iPadOS 16.3.1 - https://support.apple.com/en-us/HT213635

- Patch Now: Apple's iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw - https://thehackernews.com/2023/02/patch-now-apples-ios-ipados-macos-and.html

- Iranian State TV Hacked During President’s Speech on Revolution Day - https://www.hackread.com/iran-tv-hacked-revolution-day/

- Has a Sanctioned Bitcoin Mixer Been Resurrected to Aid North Korea’s Lazarus Group? - https://hub.elliptic.co/8613

- Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack - https://blog.cloudflare.com/cloudflare-mitigates-record-breaking-71-million-request-per-second-ddos-attack/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Uncle Sow: Dark Caracal in Latin America - https://www.eff.org/deeplinks/2023/02/uncle-sow-dark-caracal-latin-america

- Clop ransomware claims it breached 130 orgs using GoAnywhere zero-day - https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-it-breached-130-orgs-using-goanywhere-zero-day/

- We had a security incident. Here’s what we know. - https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/

- Хинштейн заявил, что действующих в интересах РФ хакеров надо освободить от ответственности - https://tass.ru/obschestvo/17021313

- メール配信サービス「SendGrid」がハッキングされ大手ドメイン登録サービス名義の詐欺メールが大量送信される - https://gigazine.net/news/20230213-namecheap-phishing-email/

- Hardcoded API Keys of Email Marketing Services Puts 54M+ Mobile App Users at Risk - https://cloudsek.com/whitepapers-reports/hardcoded-api-keys-of-email-marketing-services-puts-54m-mobile-app-users-at-risk

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Cloud Credentials Phishing Malicious Google Ads Target AWS Logins - https://www.sentinelone.com/blog/cloud-credentials-phishing-malicious-google-ads-target-aws-logins/

- GootLoader SEO Poisoning - https://www.cybereason.com/blog/threat-alert-gootloader-seo-poisoning-and-large-payloads-leading-to-compromise

- ESXiArgs new Cypher Method - https://www.bleepingcomputer.com/news/security/new-esxiargs-ransomware-version-prevents-vmware-esxi-recovery/

- Unknown Actor Targeting Pakistan - https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool

-  NewsPenguin campaign- https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Cybercriminals Bypass ChatGPT Restrictions to Generate Malicious Content - https://blog.checkpoint.com/2023/02/07/cybercriminals-bypass-chatgpt-restrictions-to-generate-malicious-content/

- Nodaria Ukraine Infostealer - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/nodaria-ukraine-infostealer

- Remcos being Used Against Ukraine- https://thehackernews.com/2023/02/cert-ua-alerts-ukrainian-state.html e https://cert.gov.ua/article/3804703

- CISA Releases Decryptor for Victms of ESXiArgs ransomware - https://www.bleepingcomputer.com/news/security/cisa-releases-recovery-script-for-esxiargs-ransomware-victims/ e https://github.com/cisagov/ESXiArgs-Recover

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- GoAnywhere MFT vuln correction and PoC - https://www.bleepingcomputer.com/news/security/actively-exploited-goanywhere-mft-zero-day-gets-emergency-patch/, https://www.bleepingcomputer.com/news/security/exploit-released-for-actively-exploited-goanywhere-mft-zero-day/, https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html E https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml

- Cl0p ransomware targets linux systems with flawed encryptiont - https://www.sentinelone.com/labs/cl0p-ransomware-targets-linux-systems-with-flawed-encryption-decryptor-available/

- Sunlogin active campaigns - https://asec.ahnlab.com/en/47088/

- ChatGPT is Used by Cybercriminals to Write Better Phishing Emails - https://www.ghacks.net/2023/02/04/chatgpt-is-used-by-cybercriminals-to-write-better-phishing-emails/

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- QakBot OneNote Attacks - https://news.sophos.com/en-us/2023/02/06/qakbot-onenote-attacks/

- Collect Exfiltrate Sleep Repeat - https://thedfirreport.com/2023/02/06/collect-exfiltrate-sleep-repeat/

- OpenSSH Vulnerability- https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946, https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig, https://www.openwall.com/lists/oss-security/2023/02/02/2 e https://bugzilla.mindrot.org/show_bug.cgi?id=3522

- DTAC Charlie Hebdo Hack Iran NEPTUNIUM - https://blogs.microsoft.com/on-the-issues/2023/02/03/dtac-charlie-hebdo-hack-iran-neptunium/

- VMware ESXi ransomware campaign hits Latin America - https://twitter.com/dimitribest/status/1622563161931915275

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Active ransomware campaign targeting ESXi servers- https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/, https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/ E https://www.bleepingcomputer.com/news/security/massive-esxiargs-ransomware-attack-targets-vmware-esxi-servers-worldwide/

- Pixpirate banking trojan- https://www.cleafy.com/cleafy-labs/pixpirate-a-new-brazilian-banking-trojan

- No Macro No Worries VSTO Being Weaponized bt Threat Actors- https://www.deepinstinct.com/blog/no-macro-no-worries-vsto-being-weaponized-by-threat-actors

- Malvirt Net Virtualization Thrives in Malvertising Attacks - https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/

- New APT34 Malware Targets the Middle East -

https://www.trendmicro.com/en_us/research/23/b/new-apt34-malware-targets-the-middle-east.html

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- No Pineapple DPRK Targeting of Medical Research and Technology Sector - https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector

- InTheBox Web Injects Targeting Android Banking Applications - https://blog.cyble.com/2023/01/31/inthebox-web-injects-targeting-android-banking-applications-worldwide/

- HeadCrab Attacks Servers Worldwide With Novel State of Art Redis Malware - https://blog.aquasec.com/headcrab-attacks-servers-worldwide-with-novel-state-of-art-redis-malware

- Cisco Vulnerabilityt- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL

- Gamaredon Campaigns Against Ukraine -

https://thehackernews.com/2023/02/new-russian-backed-gamaredons-spyware.html e

https://scpc.gov.ua/article/22964

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro e apresentação: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Fraudulent Cryptorom Trading Apps Sneak Into Apple and Google App Stores - https://news.sophos.com/en-us/2023/02/01/fraudulent-cryptorom-trading-apps-sneak-into-apple-and-google-app-stores/

- Sh1mmer Exploit - https://www.bleepingcomputer.com/news/security/new-sh1mmer-chromebook-exploit-unenrolls-managed-devices/

- Operation IceBreaker - https://www.securityjoes.com/post/operation-ice-breaker-targets-the-gam-bl-ing-industry-right-before-it-s-biggest-gathering

- Passion Russian Botnet- https://www.radware.com/security/ddos-threats-attacks/passion-russian-botnet/

- LockBit Green -

https://twitter.com/vxunderground/status/1618885718839001091

https://twitter.com/vxunderground/status/1620129967874134017

https://twitter.com/vxunderground/status/1620787009957822464

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Sandworm NikoWiper - https://www.welivesecurity.com/wp-content/uploads/2023/01/eset_apt_activity_report_t32022.pdf

- Prilex Modification Now Targeting Contacles Credit Card Transactions - https://securelist.com/prilex-modification-now-targeting-contactless-credit-card-transactions/108569/

- 6 Year Old Packer Being Actively Used By Several Malwara Families - https://research.checkpoint.com/2023/following-the-scent-of-trickgate-6-year-old-packer-used-to-deploy-the-most-wanted-malware/

- Malicious OAuth Applications seen in BEC Campaigns- https://msrc-blog.microsoft.com/2023/01/31/threat-actor-consent-phishing-campaign-abusing-the-verified-publisher-process/ e https://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher

- Action Needed for GitHub Desktop and Atom Users  -

https://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro e apresentação: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto