[Referências do Episódio]

- TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/

- RansomExx Upgrades to Rust - https://securityintelligence.com/posts/ransomexx-upgrades-rust/

- Nighthawk: An Up-and-Coming Pentest Tool Likely to Gain Threat Actor Notice - https://www.proofpoint.com/us/blog/threat-insight/nighthawk-and-coming-pentest-tool-likely-gain-threat-actor-notice

- CISA Releases Eight Industrial Control Systems Advisories - https://www.cisa.gov/uscert/ncas/current-activity/2022/11/22/cisa-releases-eight-industrial-control-systems-advisories

- Mind the Gap - https://googleprojectzero.blogspot.com/2022/11/mind-the-gap.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/

- Aurora: a rising stealer flying under the radar - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar/

- ViperSoftX: Hiding in System Logs and Spreading VenomSoftX - https://decoded.avast.io/janrubin/vipersoftx-hiding-in-system-logs-and-spreading-venomsoftx/

- Till REcollapse: Fuzzing the web for mysterious bugs - https://0xacb.com/2022/11/21/recollapse/

- Threat Assessment: Luna Moth Callback Phishing Campaign - https://unit42.paloaltonetworks.com/luna-moth-callback-phishing/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- TEMPEST ACADEMY CONFERENCE - https://www.even3.com.br/tempestacademyconference/

- Earth Preta Spear-Phishing Governments Worldwide - https://www.trendmicro.com/en_us/research/22/k/earth-preta-spear-phishing-governments-worldwide.html

- Google Search results poisoned with torrent sites via Data Studio - https://www.bleepingcomputer.com/news/security/google-search-results-poisoned-with-torrent-sites-via-data-studio/

- Alert (AA22-321A): #StopRansomware: Hive Ransomware - https://www.cisa.gov/uscert/ncas/alerts/aa22-321a

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- TrojanOrder Magento - https://sansec.io/research/trojanorder-magento

- Vulnerabilidades em dispositivos F5 - https://support.f5.com/csp/article/K97843387, https://support.f5.com/csp/article/K94221585 e https://support.f5.com/csp/article/K13325942

- Alerta da Microsoft para fim do suporte para o .NET Core 3.1- https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#2960 e 

https://docs.microsoft.com/dotnet/core/compatibility/6.0

- Vulnerabilidades no Cisco Identity Services Engine - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx#fsl

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- TEMPEST LOVELACE DAY 2022 - https://www.even3.com.br/lovelace-day-2022/

- A Comprehensive Look at Emotet’s Fall 2022 Return - https://www.proofpoint.com/us/blog/threat-insight/comprehensive-look-emotets-fall-2022-return

- CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures - https://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/?utm_source=pocket_saves

- Alert (AA22-320A): Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester - https://www.cisa.gov/uscert/ncas/alerts/aa22-320a

- Venus Ransomware | Zeoticus Spin-off Shows Sophistication Isn’t Necessary for Success - https://www.sentinelone.com/blog/venus-ransomware-zeoticus-spin-off-shows-sophistication-isnt-necessary-for-success/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Operation(Đường chín đoạn) typhoon：觊觎南海九段线的赛博海莲 - https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ

- Typhon Reborn With New Capabilities - https://unit42.paloaltonetworks.com/typhon-reborn-stealer/

- BumbleBee Zeros in on Meterpreter - https://thedfirreport.com/2022/11/14/bumblebee-zeros-in-on-meterpreter/

- DTrack activity targeting Europe and Latin America - https://securelist.com/dtrack-targeting-europe-latin-america/107798/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Golpe milionário tira Justiça do Trabalho do ar - https://obastidor.com.br/investigacao/golpe-milionario-tira-justica-do-trabalho-do-ar-4667

- Twitter chaos after wave of blue tick impersonations - https://www.bbc.com/news/technology-63599553?at_medium=RSS&at_campaign=KARANGA

- Lookout Discovers Long-running Surveillance Campaigns Targeting Uyghurs - https://www.lookout.com/blog/uyghur-surveillance-campaign-badbazaar-moonshine

- Exclusive: At least $1 billion of client funds missing at failed crypto firm FTX - https://www.reuters.com/markets/currencies/exclusive-least-1-billion-client-funds-missing-failed-crypto-firm-ftx-sources-2022-11-12/

- The Hunt for the FTX Thieves Has Begun - https://www.wired.com/story/ftx-hack-theft-crypto-tracing/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Man Charged for Participation in LockBit Global Ransomware Campaign - https://www.justice.gov/opa/pr/man-charged-participation-lockbit-global-ransomware-campaign

- Check Point CloudGuard Spectral exposes new obfuscation techniques for malicious packages on PyPI - https://research.checkpoint.com/2022/check-point-cloudguard-spectral-exposes-new-obfuscation-techniques-for-malicious-packages-on-pypi/

- Hack the Real Box: APT41’s New Subgroup Earth Longzhi - https://www.trendmicro.com/en_us/research/22/k/hack-the-real-box-apt41-new-subgroup-earth-longzhi.html

- PNG Steganography Hides Backdoor - https://decoded.avast.io/martinchlumecky/png-steganography/

- Accidental $70k Google PixelLock Screen Bypass - https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- APT29 Windows Credential Roaming- https://www.mandiant.com/resources/blog/apt29-windows-credential-roaming

- Vulnerabilidades críticas no VMware Workspace ONE Assist - https://www.vmware.com/security/advisories/VMSA-2022-0028.html

- New Updated IceXLoader CLaims Thousands of Victims Around The World- https://minerva-labs.com/blog/new-updated-icexloader-claims-thousands-of-victims-around-the-world/

- IPFS Abuse- https://blog.talosintelligence.com/ipfs-abuse/

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Mercadores da insegurança: conjuntura e riscos do hacking governamental no Brasil - https://ip.rec.br/wp-content/uploads/2022/11/Mercadores-da-inseguranca.pdf

- Microsoft Patch Tuesday novembro - https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2022-patch-tuesday-fixes-6-exploited-zero-days-68-flaws/

- Citrix Gateway and Citrix ADC Security Bulletin for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516 - https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

- DeimosC2: What SOC Analysts and Incident Responders Need to Know About This C&C Framework - https://www.trendmicro.com/en_us/research/22/k/deimosc2-what-soc-analysts-and-incident-responders-need-to-know.html

- LockBit 3.0 Being Distributed by Amadey Bot- https://asec.ahnlab.com/en/41450/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto