[Referências do Episódio]

- Decrypted: BianLian Ransomware - https://decoded.avast.io/threatresearch/decrypted-bianlian-ransomware/

- Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps” - https://www.fortinet.com/blog/threat-research/supply-chain-attack-using-identical-pypi-packages-colorslib-httpslib-libhttps

- The Last of Us: cibercriminosos usam hype da nova série para roubar fãs - https://www.kaspersky.com.br/blog/the-last-of-us-cibercriminosos-usam-serie/20566/

- Earth Bogle: Campaigns Target the Middle East with Geopolitical Lures - https://www.trendmicro.com/en_us/research/23/a/earth-bogle-campaigns-target-middle-east-with-geopolitical-lures.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- CircleCI incident report for January 4, 2023 security incident - https://circleci.com/blog/jan-4-2023-incident-report/

- Racing bugs in Windows kernel - https://dannyodler.hashnode.dev/racing-bugs-in-windows-kernel

- Android TV box on Amazon came pre-installed with malware - https://www.bleepingcomputer.com/news/security/android-tv-box-on-amazon-came-pre-installed-with-malware/

- T95 AllWinner T616 Malware Analysis · Cleanup - https://github.com/DesktopECHO/T95-H616-Malware

- Hackers exploit Cacti critical bug to install malware, open reverse shells - https://www.bleepingcomputer.com/news/security/hackers-exploit-cacti-critical-bug-to-install-malware-open-reverse-shells/

- Exchange Server 2013 - https://learn.microsoft.com/en-us/lifecycle/products/exchange-server-2013

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Gootkit Loader Actively Targets The Australian Healthcare Industry - https://www.trendmicro.com/en_us/research/23/a/gootkit-loader-actively-targets-the-australian-healthcare-indust.html

- Noname0516 The Pro Russian Hackativist Group Targeting Nato - https://www.sentinelone.com/labs/noname05716-the-pro-russian-hacktivist-group-targeting-nato/

- MetaMask Address Poisoning Scams - https://metamask.zendesk.com/hc/en-us/articles/11967455819035-Address-poisoning-scams

- FortiOS SSL-VPN Incident - https://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd

- CentOS Web Panel vulnerability abuse - https://twitter.com/Shadowserver/status/1613113660817412099

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Dark Pink: New APT group targets governmental, military organizations in APAC, Europe - https://www.group-ib.com/media-center/press-releases/dark-pink-apt/

- SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices - https://cert-portal.siemens.com/productcert/html/ssa-482757.html

- CISA Adds Two Known Exploited Vulnerabilities to Catalog - https://www.cisa.gov/uscert/ncas/current-activity/2023/01/10/cisa-adds-two-known-exploited-vulnerabilities-catalog

- SCATTERED SPIDER Exploits Windows Security Deficiencies with Bring-Your-Own-Vulnerable-Driver Tactic in Attempt to Bypass Endpoint Security - https://www.crowdstrike.com/blog/scattered-spider-attempts-to-avoid-detection-with-bring-your-own-vulnerable-driver-tactic/

- NeedleDropper - https://decoded.avast.io/threatresearch/needledropper/

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Vulnerabilities - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Microsoft January 2023 Patch Tuesday fixes 98 flaws, 1 zero-day - https://www.bleepingcomputer.com/news/microsoft/microsoft-january-2023-patch-tuesday-fixes-98-flaws-1-zero-day/

- Security update available for Adobe Acrobat and Reader  | APSB23-01 - https://helpx.adobe.com/security/products/acrobat/apsb23-01.html

- Security Update Available for Adobe InCopy | APSB23-08 - https://helpx.adobe.com/security/products/incopy/apsb23-08.html

- Security updates available for Dimension | APSB23-10 - https://helpx.adobe.com/security/products/dimension/apsb23-10.html

- Security Update Available for Adobe InDesign | APSB23-07 - https://helpx.adobe.com/security/products/indesign/apsb23-07.html

- StrongPity espionage campaign targeting Android users - https://www.welivesecurity.com/2023/01/10/strongpity-espionage-campaign-targeting-android-users/

- SAP Patch Day - January 2023 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

- THREAT ANALYSIS: From IcedID to Domain Compromise - https://www.cybereason.com/blog/threat-analysis-from-icedid-to-domain-compromise

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Malware Targeting Crypto Wallets Detected In Crypto Trading Forum - https://www.safeguardcyber.com/hubfs/Threat%20Intel%20Reports/Threat%20Report_Echelon%20Malware%20-%20SafeGuard%20Cyber.pdf

- Unwrapping Ursnifs Gifts - https://thedfirreport.com/2023/01/09/unwrapping-ursnifs-gifts/

- 警惕：魔改后的CIA攻击套件Hive进入黑灰产领域 - https://blog.netlab.360.com/warning-hive-variant-xdr33-is-coming_cn/

- CIA's HIVE project - https://wikileaks.org/vault7/#Hive

- Disclosing a New Vulnerability in JWT Secret Poisoning (CVE-2022-23529) - https://unit42.paloaltonetworks.com/jsonwebtoken-vulnerability-cve-2022-23529/?utm_source=pocket_reader

- Microsoft ends Windows 7 extended security updates on Tuesday - https://www.bleepingcomputer.com/news/microsoft/microsoft-ends-windows-7-extended-security-updates-on-tuesday/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Dridex Returns, Targets MacOS Using New Entry Method - https://www.trendmicro.com/en_us/research/23/a/-dridex-targets-macos-using-new-entry-method.html

- Bitdefender Partnership with Law Enforcement Yields MegaCortex Decryptor - https://www.bitdefender.com/blog/labs/bitdefender-partnership-with-law-enforcement-yields-megacortex-decryptor/

- Unraveling the techniques of Mac ransomware - https://www.microsoft.com/en-us/security/blog/2023/01/05/unraveling-the-techniques-of-mac-ransomware/

- PurpleUrchin Bypasses CAPTCHA and Steals Cloud Platform Resources - https://unit42.paloaltonetworks.com/purpleurchin-steals-cloud-resources/

- Ransomware Roundup – Monti, BlackHunt, and Putin Ransomware - https://www.fortinet.com/blog/threat-research/ransomware-roundup-monti-blackhunt-and-more

- Qualcomm January 2023 Security Bulletin - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2023-bulletin.html

- Can You Trust Your VSCode Extensions? - https://blog.aquasec.com/can-you-trust-your-vscode-extensions

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Bluebottle: Campaign Hits Banks in French-speaking Countries in Africa - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/bluebottle-banks-targeted-africa

- BLINDEAGLE TARGETING ECUADOR WITH SHARPENED TOOLS - https://research.checkpoint.com/2023/blindeagle-targeting-ecuador-with-sharpened-tools/

- More Brazil malspam pushing Astaroth (Guildma) in January 2023 - https://isc.sans.edu/diary/More%20Brazil%20malspam%20pushing%20Astaroth%20(Guildma)%20in%20January%202023/29404

- SpyNote: Spyware with RAT capabilities targeting Financial Institutions - https://www.threatfabric.com/blogs/spynote-rat-targeting-financial-institutions.html

- Turla: A Galaxy of Opportunity - https://www.mandiant.com/resources/blog/turla-galaxy-opportunity

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- CircleCI security alert: Rotate any secrets stored in CircleCI - https://circleci.com/blog/january-4-2023-security-alert/

- Shc Linux Malware Installing CoinMiner - https://asec.ahnlab.com/en/45182/

- FG-IR-22-061 - FortiADC - command injection in web interface - https://www.fortiguard.com/psirt/FG-IR-22-061

- FG-IR-22-274 - FortiTester - Multiple command injection vulnerabilities in GUI and API - https://www.fortiguard.com/psirt/FG-IR-22-274

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- EURASIA GROUP'S TOP RISKS FOR 2023 - https://www.eurasiagroup.net/issues/top-risks-2023

- BitRAT Now Sharing Sensitive Bank Data as a Lure - https://blog.qualys.com/vulnerabilities-threat-research/2023/01/03/bitrat-now-sharing-sensitive-bank-data-as-a-lure

- Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More - https://samcurry.net/web-hackers-vs-the-auto-industry/

- Flipper Zero phishing campaign - https://twitter.com/AlvieriD/status/1609945425871609858

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto