Som du ser är vår webbplats inte anpassad för äldre webbläsare. Vi rekommenderar att du uppgraderar till en nyare webbläsare.

Uppdaterad | Publicerad - Veckobrev

CERT-SE:s veckobrev v.09

Veckan är slut och CERT-SE förstärker ditt helgmys med några minnesvärda och icke bandbreddskrävande länkar att reflektera över.

Trevlig helg!

Veckans länkkompott

Memcrashed - Major amplification attacks from UDP port 11211
https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/

Memcrashed from the Victims perspective - February 28th DDoS Incident Report
https://githubengineering.com/ddos-incident-report/

UDP-Based Amplification Attacks
https://www.us-cert.gov/ncas/alerts/TA14-017A

Germany confirms hack of government computers, says incident under control
https://in.reuters.com/article/germany-cyber-ministry/germany-confirms-hack-of-government-computers-says-incident-under-control-idINKCN1GC2OC

How to protect your computer from malicious cryptomining
https://blog.malwarebytes.com/101/2018/02/how-to-protect-your-computer-from-malicious-cryptomining/

Apple Moves iCloud Data and Encryption Keys for Chinese Users to China
https://thehackernews.com/2018/02/icloud-data-china.html

23,000 Digital Certificates Revoked in DigiCert-Trustico Spat
https://www.securityweek.com/23000-digital-certificates-revoked-digicert-trustico-spat

Trustico - Add remote-code execution hole to mass-revocation drama
https://www.theregister.co.uk/2018/03/01/trustico_website_offline/

Equifax finds ANOTHER 2.4 million Americans hit by breach
https://nakedsecurity.sophos.com/2018/03/01/equifax-finds-another-2-4-million-americans-hit-by-breach/

Malware from Space
https://www.schneier.com/blog/archives/2018/03/malware_from_sp.html

Ad Network Uses DGA Algorithm to Bypass Ad Blockers and Deploy In-Browser Miners
https://www.bleepingcomputer.com/news/security/ad-network-uses-dga-algorithm-to-bypass-ad-blockers-and-deploy-in-browser-miners/

RIG malvertising campaign uses cryptocurrency theme as decoy
https://blog.malwarebytes.com/threat-analysis/2018/02/new-rig-malvertising-campaign-uses-cryptocurrency-theme-decoy/

CERT-SE i veckan

Ny DDoS attack - Memcached