Conny Jäverdal

ex- IT-security Manager, retired - independent, threat analyst, malware research, , fly-fisher - salmon-fisher

[BleepingComputer @BleepinComputer]

CISA: Vendors must secure SOHO routers against Volt Typhoon attacks - @serghei
https://t.co/MdLSLVGBud

https://t.co/MdLSLVGBud

[Truls Meland @Still_Fast]

This Russian owned yacht named "Ragnar", was ransacked by the Norwegian Coast Guard, Police and Customs earlier today.
It's owned by former KGB officier Vladimir Strzhalkovsky ; who is an old friend of Vladimir Putin.
It looks like a boat used for cutting fiber cables. 1/3

[CISA Cyber @CISACyber]

VU#506989: Microsoft Windows 10 gives unprivileged user access to SAM, SYSTEM, and SECURITY files https://t.co/1jOM2wreA4

[The Hacker News @TheHackersNews]

🔥 #Microsoft has found a new critical zero-day RCE #vulnerability (CVE-2021-35211) affecting #SolarWinds Serv-U that is being actively exploited by hackers.

Details — https://t.co/sImkO0cDQq

#infosec #hacking #cyberattack #cybersecurity

[BleepingComputer @BleepinComputer]

Interpol urges police to unite against 'potential ransomware pandemic' - @serghei
https://t.co/oLaQ1CRQZb

[ESET Research @ESETresearch]

#ESETresearch detected a wave of malicious spam messages distributing #CobaltStrike Beacon mimicking #Kaseya VSA security updates. The current outbreak distributing “SecurityUpdates.exe” as attachment is most prevalent in 🇪🇸Spain, 🇺🇸 USA, 🇨🇦Canada, 🇹🇷Turkey and 🇬🇧UK. 1/5

[@mikko @mikko]

"Kaseya requires anti-malware software exclusions for its folders. Anything executed by the Kaseya Agent Monitor is therefore ignored because of those exclusions—which allowed REvil to deploy its dropper without scrutiny."

Good write-up by Sophos: https://t.co/GmAf7JdQIN

[CISA Cyber @CISACyber]

.@CISAgov and @FBI strongly recommend MSPs and #MSP customers affected by the Kaseya VSA supply-chain #ransomware attack take immediate action. See https://t.co/7Uk2euX7nh for recommendations. #Cybersecurity #InfoSec #Ransomware

[BleepingComputer @BleepinComputer]

Kaseya was fixing zero-day just as REvil ransomware sprung their attack - @LawrenceAbrams
https://t.co/GY3uuxajVw

[Threatpost @threatpost]

#Google says a bug in its #Chrome web #browser is actively under attack, and it’s urging users to upgrade. #cybersecurity #exploits https://t.co/LeF4m7WoeG

[briankrebs @briankrebs]

Feeling the heat, DarkSide ransomware group -- the one responsible for attacking Colonial Pipeline -- closes after its servers were seized and cryptocurrency holdings mysteriously disappeared. Closure comes as crime forums start banning ransomware threads https://t.co/aNkVt5wfnX

[abuse.ch @abuse_ch]

Apparently, Colonial Pipeline paid the threat actors behind DarkSide ransomware nearly $5 million in ransom💰💸

[@mikko @mikko]

’Finding Your Friends’ in online services means uploading your full contact list to somewhere. Please try to not do this. You are sharing private details of your friends, without asking them if it’s ok.

[BleepingComputer @BleepinComputer]

Microsoft: SolarWinds hackers downloaded Azure, Exchange source code - @LawrenceAbrams
https://t.co/49DD7gN6U6

[Europol @Europol]

Bye-bye botnets👋 Huge global operation brings down the world's most dangerous malware.

Investigators have taken control of the Emotet botnet, the most resilient malware in the wild.

Get the full story: https://t.co/NMrBqmhMIf

[BleepingComputer @BleepinComputer]

SolarLeaks site claims to sell data stolen in SolarWinds attacks - @LawrenceAbrams
https://t.co/2C4MOwGTWt

[Threatpost @threatpost]

On the heels of the EMA cyberattack, cybercriminals have now leaked #Pfizer and BioNTech #COVID19 vaccine data on the internet.
https://t.co/z4ZMGcaLWs

[briankrebs @briankrebs]

Ubiquiti, which makes a range of IoT gear (routers, locks, Web cams, NVRs) & has a cloud solution for managing those, just told customers to reset passwords/enable 2FA after discovering "unauthorized access to certain of our IT systems hosted by a third party cloud provider."

[BleepingComputer @BleepinComputer]

FireEye releases more tech details on SUNBURST trojan
https://t.co/x8zSTvvsOO

[Threatpost @threatpost]

Research shows that microphones on digital assistants are sensitive enough to record what someone is typing on a smartphone to steal PINs and other sensitive info.
https://t.co/mBoacGErh2