[Referências do Episódio]

- Katie Nickels - Making Order out of Chaos: How to Deal with Threat Group Names | STAR Webcast - 

  https://www.youtube.com/watch?v=fV_9X9gnTIk

- Drokbk Malware Uses GitHub as Dead Drop Resolver - https://www.secureworks.com/blog/drokbk-malware-uses-github-as-dead-drop-resolver

- New MuddyWater Threat: Old Kitten; New Tricks - https://www.deepinstinct.com/blog/new-muddywater-threat-old-kitten-new-tricks

- Royal Ransomware Threat Takes Aim at U.S. Healthcare System - https://thehackernews.com/2022/12/royal-ransomware-threat-takes-aim-at-us.html

- Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow Vulnerability - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipp-oobwrite-8cMF5r7U

- Researchers Find 63 Zero-Day Bugs at Latest Pwn2Own - https://www.infosecurity-magazine.com/news/researchers-63-zeroday-bugs-latest/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Breaking the silence recent truebot activity - https://blog.talosintelligence.com/breaking-the-silence-recent-truebot-activity/

- Zombinder Ermac and Desktop Stelears - https://www.threatfabric.com/blogs/zombinder-ermac-and-desktop-stealers.html

- Vice Society Targets Education Sector- https://unit42.paloaltonetworks.com/vice-society-targets-education-sector/

- Mallox ransomware showing signs of increased activity- https://blog.cyble.com/2022/12/08/mallox-ransomware-showing-signs-of-increased-activity/

- A closer look at blackmagic ransomware- https://blog.cyble.com/2022/12/07/a-closer-look-at-blackmagic-ransomware/

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Internet Explorer 0-day exploited by North Korean actor APT37 - https://blog.google/threat-analysis-group/internet-explorer-0-day-exploited-by-north-korean-actor-apt37/

- Zerobot – New Go-Based Botnet Campaign Targets Multiple Vulnerabilities - https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities

- FortiOS & FortiProxy - SSH authentication bypass when RADIUS authentication is used - https://www.fortiguard.com/psirt/FG-IR-22-255

- Top 10 macOS Malware Discoveries in 2022 - https://www.sentinelone.com/blog/top-10-macos-malware-discoveries-in-2022/

- Defcon Skimming: A new batch of Web Skimming attacks - https://blog.jscrambler.com/defcon-skimming-a-new-batch-of-web-skimming-attacks

- Fantasy – a new Agrius wiper deployed through a supply‑chain attack - https://www.welivesecurity.com/2022/12/07/fantasy-new-agrius-wiper-supply-chain-attack/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets - https://blogs.blackberry.com/en/2022/12/mustang-panda-uses-the-russian-ukrainian-war-to-attack-europe-and-asia-pacific-targets

- KNOWN EXPLOITED VULNERABILITIES CATALOG - https://www.cisa.gov/known-exploited-vulnerabilities-catalog#top

- Cyber-Espionage in the Middle East: Investigating a New BackdoorDiplomacy Threat Actor Campaign - https://www.bitdefender.com/files/News/CaseStudies/study/426/Bitdefender-PR-Whitepaper-BackdoorDiplomacy-creat6507-en-EN.pdf

- DEV-0139 launches targeted attacks against the cryptocurrency industry - https://www.microsoft.com/en-us/security/blog/2022/12/06/dev-0139-launches-targeted-attacks-against-the-cryptocurrency-industry/

- Android Security Bulletin—December 2022 - https://source.android.com/docs/security/bulletin/2022-12-01?hl=en&utm_source=pocket_reader

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Morre aos 52 anos o advogado Danilo Doneda, especialista em proteção de dados - https://www.conjur.com.br/2022-dez-04/morre-advogado-danilo-doneda-especialista-protecao-dados

- CryWiper: fake ransomware - https://www.kaspersky.com/blog/crywiper-pseudo-ransomware/46480/

- Preparing for a Russian cyber offensive against Ukraine this winter - https://blogs.microsoft.com/on-the-issues/2022/12/03/preparing-russian-cyber-offensive-ukraine/

- Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential unauthorized database access - https://www.wiz.io/blog/hells-keychain-supply-chain-attack-in-ibm-cloud-databases-for-postgresql

- Schoolyard Bully Trojan Facebook Credential Stealer - https://www.zimperium.com/blog/schoolyard-bully-trojan-facebook-credential-stealer/

- Alert (AA22-335A) - #StopRansomware: Cuba Ransomware - https://www.cisa.gov/uscert/ncas/alerts/aa22-335a

- Issue 100: Platform certificates used to sign malware - https://bugs.chromium.org/p/apvi/issues/detail?id=100

- Samsung, LG, Mediatek certificates compromised to sign Android malware - https://www.bleepingcomputer.com/news/security/samsung-lg-mediatek-certificates-compromised-to-sign-android-malware/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- DuckLogs New Malware Strain Spotted in the Wild - https://blog.cyble.com/2022/12/01/ducklogs-new-malware-strain-spotted-in-the-wild/

- Redigo Redis Backdoor Malware - https://blog.aquasec.com/redigo-redis-backdoor-malware

- Localhost Attack Against Quarkus Developers Contrast Security - https://www.contrastsecurity.com/security-influencers/localhost-attack-against-quarkus-developers-contrast-security

- KmsdBot Part Two Crashing a Botnet- https://www.akamai.com/blog/security-research/kmsdbot-part-two-crashing-a-botnet

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- New Details on Commercial Spyware Vendor Variston - https://blog.google/threat-analysis-group/new-details-on-commercial-spyware-vendor-variston/

- Dolphin backdoor - https://www.welivesecurity.com/2022/11/30/whos-swimming-south-korean-waters-meet-scarcrufts-dolphin/

- LockBit 3.0 Wormable Tools - https://news.sophos.com/en-us/2022/11/30/lockbit-3-0-black-attacks-and-leaks-reveal-wormable-capabilities-and-tooling/

- Tenable Log4Shell- https://www.techtarget.com/searchsecurity/news/252527814/Tenable-72-of-organizations-remain-vulnerable-to-Log4Shell e https://www.tenable.com/log4j

- Invisible NPM Malware Evading Security Checks with Crafterd Versions- https://jfrog.com/blog/invisible-npm-malware-evading-security-checks-with-crafted-versions/

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- MIT Technology Review - The Cyber Defense Index 2022/23 - https://mittrinsights.s3.amazonaws.com/CDIreport.pdf 

- KNOWN EXPLOITED VULNERABILITIES CATALOG - https://www.cisa.gov/known-exploited-vulnerabilities-catalog

- ATTACKER USES A POPULAR TIKTOK CHALLENGE TO LURE USERS INTO INSTALLING MALICIOUS PACKAGE - https://checkmarx.com/blog/attacker-uses-a-popular-tiktok-challenge-to-lure-users-into-installing-malicious-package/

- Hackers Exploit RCE Vulnerability in Windows Internet Key Exchange

   - https://cyware.com/news/hackers-exploit-rce-vulnerability-in-windows-internet-key-exchange-ce908a01/?web_view=true

- Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs - https://www.hackread.com/authentication-bypass-flaw-fortinet-products/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Thread da ESET sobre malware com a temática da Copa do Mundo - https://twitter.com/ESETresearch/status/1596222232384401408

- Russia-based RansomBoggs Ransomware Targeted Several Ukrainian Organizations - https://thehackernews.com/2022/11/russia-based-ransomboggs-ransomware.html

- Stable Channel Update for Desktop - Thursday, November 24, 2022 - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html

- Cyber-enabled financial crime: USD 130 million intercepted in global INTERPOL police operation - https://www.interpol.int/News-and-Events/News/2022/Cyber-enabled-financial-crime-USD-130-million-intercepted-in-global-INTERPOL-police-operation

- Emotet Strikes Again – Lnk File Leads to Domain Wide Ransomware - https://thedfirreport.com/2022/11/28/emotet-strikes-again-lnk-file-leads-to-domain-wide-ransomware/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Professional Stealer - https://www.group-ib.com/media-center/press-releases/professional-stealers/

- Incidentes no servidor web Boa - https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/

- Campanha do Qakbot e Black Basta - https://www.cybereason.com/blog/threat-alert-aggressive-qakbot-campaign-and-the-black-basta-ransomware-group-targeting-u.s.-companies

- Problema no Windows Remote Desktop- https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22h2#connections-may-fail-when-using-remote-desktop-connection-brokers

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto