The Oh No! news.

Oh No! News is Good

News.

TAGS: Oh No, News, Threat analysis, InfoSec, Google

Dynamic Search Ads

Threat analysis;

your attack surface.

Source: Former

NHS secretary found guilty of illegally accessing medical

records

A former NHS employee has been found guilty and fined for illegally

accessing the medical records of over 150 people.

Loretta Alborghetti, from Redditch, worked as a medical secretary

within the Ophthalmology department at Worcestershire Acute Hospitals

NHS Trust when she illegally accessed the records.

Supporting Source: Open

Street Map link to Redditch Worcestershire.

Source: NetSupport

RAT Infections on the Rise. Targeting Government and Business

Sectors

While NetSupport Manager started off as a legitimate remote

administration tool for technical assistance and support, malicious

actors have misappropriated the tool to their own advantage, using it as

a beachhead for subsequent attacks.

Source: Beware:

Malicious Google Ads Trick WinSCP Users into Installing

Malware

The threat actors are believed to leverage Google's Dynamic Search

Ads (DSAs), which automatically generates ads based on a site's content

to serve the malicious ads that take the victims to the infected

site.

Source: Trojanized

PyCharm Software Version Delivered via Google Search Ads.

Victims who clicked on the ad were taken to a hacked web page with a

link to download the application, which turned out to install over a

dozen different pieces of malware instead.

InfoSec; the language

of security.

Source: Why

Defenders Should Embrace a Hacker Mindset

Additional Information.

What is a "Data

Breach"? A data breach is a security violation, in which sensitive,

protected or confidential data is copied, transmitted, viewed, stolen,

altered or used by an individual unauthorized to do so.

What is "Malware"?

Malware (a portmanteau for

malicious software) is any software intentionally designed to cause

disruption to a computer, server, client, or computer network, leak

private information, gain unauthorized access to information or systems,

deprive access to information, or which unknowingly interferes with the

user's computer security and privacy.

What is a "Payload"?

In the context of a computer virus or worm, the payload is the portion

of the ma