[Referências do Episódio]

- Vaga Analista de Threat Intelligence 1 (junior) - https://tempest.gupy.io/job/eyJzb3VyY2UiOiJndXB5X3B1YmxpY19wYWdlIiwiam9iSWQiOjMyMDA5MzZ9?jobBoardSource=gupy_public_page

- Tempest Talks 2022 - https://www.tempest.com.br/tempest_talk/tempest-talks-2022/

- Exbyte: BlackByte Ransomware Attackers Deploy New Exfiltration Tool - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/blackbyte-exbyte-ransomware

- Heimdal®’s XDR Team Links Recent CEO Fraud Attempt to Notorious Turkish Threat Group - https://heimdalsecurity.com/blog/heimdals-xdr-turkish-threat-group/

- How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub - https://arxiv.org/pdf/2210.08374.pdf

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Gremlins’ prey, secrets, and dirty tricks: the ransomware gang OldGremlin set new records - https://www.group-ib.com/media-center/press-releases/oldgremlin-2022/

- Damaged cable leaves Shetland cut off from mainland - https://www.bbc.com/news/uk-scotland-north-east-orkney-shetland-63326102

- European cable cut may impact transoceanic routes - https://trust.zscaler.com/zscloud.net/posts/12256

- Black Basta and the Unnoticed Delivery - https://research.checkpoint.com/2022/black-basta-and-the-unnoticed-delivery/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

PF prende brasileiro suspeito de integrar organização criminosa internacional -  https://www.gov.br/pf/pt-br/assuntos/noticias/2022/10/pf-prende-brasileiro-suspeito-de-integrar-organizacao-criminosa-internacional

New fully undetectable powershell backdoor - https://www.safebreach.com/resources/blog/safebreach-labs-researchers-uncover-new-fully-undetectable-powershell-backdoor/

NAS under threat-  https://blog.group-ib.com/nas-under-threat

A New Attack Surface on MS Exchange Part 4 ProxyRelay -  https://devco.re/blog/2022/10/19/a-new-attack-surface-on-MS-exchange-part-4-ProxyRelay/?utm_campaign=social-alert&utm_medium=email&utm_source=newslit

An In Depth Look At Russian Threat Actor Killnet - https://www.avertium.com/resources/threat-reports/an-in-depth-look-at-russian-threat-actor-killnet?utm_source=pocket_mylist

[Ficha técnica]

Apresentação: Daniel Venzi

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Spyder Loader: Malware Seen in Recent Campaign Targeting Organizations in Hong Kong - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/spyder-loader-cuckoobees-hong-kong

- 31 arrested for stealing cars by hacking keyless tech - https://www.europol.europa.eu/media-press/newsroom/news/31-arrested-for-stealing-cars-hacking-keyless-tech

- I feel a draft. Opening the doors and windows 0-click RCE on the Tesla Model3. https://www.synacktiv.com/sites/default/files/2022-10/tesla_hexacon.pdf?utm_source=pocket_mylist

- Out Of Band Update: Cobalt Strike 4.7.2 - https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/

- Oracle Critical Patch Update Advisory - October 2022 - https://www.oracle.com/security-alerts/cpuoct2022.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- CVE-2022-42889 Text4Shell : une vulnérabilité de type exécution de code à distance qui affecte le logiciel Apache Commons Text - https://cyberwatch.fr/cve/cve-2022-42889-text4shell-comment-detecter-et-corriger-cette-vulnerabilite-sur-apache-commons-text/

- New UEFI rootkit Black Lotus offered for sale at $5,000 - https://securityaffairs.co/wordpress/137252/malware/black-lotus-uefi-rootkit.html

- Tweet de Germán Fernández sobre o SystemBC - https://twitter.com/1ZRR4H/status/1582068501036273665

- Free Micropatches For Bypassing "Mark of the Web" on Unzipped Files (0day) - https://blog.0patch.com/2022/10/free-micropatches-for-bypassing-mark-of.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Ransom Cartel Ransomware: A Possible Connection With REvil - https://unit42.paloaltonetworks.com/ransom-cartel-ransomware/?web_view=true

- New “Prestige” ransomware impacts organizations in Ukraine and Poland - https://www.microsoft.com/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/

- RedEye - Red Team C2 Log Visualization - https://github.com/cisagov/RedEye/

- INTERPOL arrests ‘Black Axe’ cybercrime syndicate members - https://www.bleepingcomputer.com/news/security/interpol-arrests-black-axe-cybercrime-syndicate-members/

- Nederlandse gedupeerden geholpen in unieke ransomware-actie - https://www.politie.nl/nieuws/2022/oktober/14/09-nederlandse-gedupeerde-geholpen-in-unieke-ransomware-actie.html

- Microsoft Office 365 Message Encryption Insecure Mode of Operation - https://labs.withsecure.com/advisories/microsoft-office-365-message-encryption-insecure-mode-of-operation

- Over 45,000 VMware ESXi servers just reached end-of-life - https://www.bleepingcomputer.com/news/security/over-45-000-vmware-esxi-servers-just-reached-end-of-life/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Alchimist: A new attack framework in Chinese for Mac, Linux and Windows - https://blog.talosintelligence.com/2022/10/alchimist-offensive-framework.html

- Budworm: Espionage Group Returns to Targeting U.S. Organizations - https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/budworm-espionage-us-state

- Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates - https://threatresearch.ext.hp.com/magniber-ransomware-switches-to-javascript-targeting-home-users-with-fake-software-updates/

- Black Basta Ransomware Gang Infiltrates networks via QAKBOT, Brute Ratel, and Cobalt Strike - https://www.trendmicro.com/en_us/research/22/j/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba.html

- Curso Mastering Malware Analysis do Mente Binária - https://www.sympla.com.br/evento/mastering-malware-analysis/1749545?d=CMC10

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- TEMPEST TALKS 2022 - https://www.tempest.com.br/tempest_talk/tempest-talks-2022

- October 2022 Microsoft Patch Tuesday - https://isc.sans.edu/forums/diary/October%202022%20Microsoft%20Patch%20Tuesday/29138/

- SAP Security Patch Day –October 2022 - https://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10

- Aruba Product Security Advisory - Advisory ID: ARUBA-PSA-2022-015 - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt?utm_source=pocket_mylist

- Security updates available for Adobe ColdFusion | APSB22-44 - https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html

- Security update available for Adobe Acrobat and Reader  | APSB22-46 - https://helpx.adobe.com/security/products/acrobat/apsb22-46.html

- Security update available for Adobe Commerce | APSB22-48 - https://helpx.adobe.com/security/products/magento/apsb22-48.html

- Security updates available for Dimension | APSB22-57 - https://helpx.adobe.com/security/products/dimension/apsb22-57.html

- Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys - https://thehackernews.com/2022/10/critical-bug-in-siemens-simatic-plcs.html

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

[Referências do Episódio]

- Intel confirms leaked Alder Lake BIOS Source Code is authentic - https://www.bleepingcomputer.com/news/security/intel-confirms-leaked-alder-lake-bios-source-code-is-authentic/

- US airports' sites taken down in DDoS attacks by pro-Russian hackers - https://www.bleepingcomputer.com/news/security/us-airports-sites-taken-down-in-ddos-attacks-by-pro-russian-hackers/

- Iran State-Run TV’s Live Transmission Hacked by Edalate Ali Hackers - https://www.hackread.com/iran-state-run-tv-hacked-edalate-ali-hackers/

- New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks - https://thehackernews.com/2022/10/new-report-uncovers-emotets-delivery.html

- FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface - https://www.fortiguard.com/psirt/FG-IR-22-377

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto

- Fortinet warns admins to patch critical auth bypass bug immediately - https://www.bleepingcomputer.com/news/security/fortinet-warns-admins-to-patch-critical-auth-bypass-bug-immediately/

- LOFYGANG – SOFTWARE SUPPLY CHAIN ATTACKERS; ORGANIZED, PERSISTENT, AND OPERATING FOR OVER A YEAR - https://checkmarx.com/blog/lofygang-software-supply-chain-attackers-organized-persistent-and-operating-for-over-a-year/

- Record tem suspeita de ataque hacker e paralisa programação ao vivo - https://f5.folha.uol.com.br/televisao/2022/10/record-tem-suspeita-de-ataque-hacker-e-paralisa-programacao-ao-vivo.shtml

- Protecting People From Malicious Account Compromise Apps - https://about.fb.com/news/2022/10/protecting-people-from-malicious-account-compromise-apps/

[Ficha técnica]

Apresentação: Carlos Cabral

Roteiro: Carlos Cabral e Daniel Venzi

Edição de áudio: Paulo Arruzzo

Narração de encerramento: Bianca Garcia

Projeto gráfico: Julian Prieto