Som du ser är vår webbplats inte anpassad för äldre webbläsare. Vi rekommenderar att du uppgraderar till en nyare webbläsare.

Publicerad - Veckobrev

CERT-SE:s veckobrev v.17

Fortsatt mycket fokus kring Covid-19. Under veckan har det även rapporterats om indikationer om att banktrojanen Emotet uppdaterats, med syfte att försvåra detektion.

Nyheter i veckan

IT services giant Cognizant suffers Maze Ransomware cyber attack (18 apr)
https://www.bleepingcomputer.com/news/security/it-services-giant-cognizant-suffers-maze-ransomware-cyber-attack/

Emotet Activity Indicates Return (20 apr)
https://www.binarydefense.com/threat_watch/emotet-activity-indicates-return/
..
Emotet banking trojan possibly being prepped for a new attack (23 apr)
https://www.scmagazine.com/home/security-news/phishing/emotet-banking-trojan-possibly-being-prepped-for-a-new-attack/

MITRE Releases Results of Evaluations of 21 Cybersecurity Products (21 apr)
https://www.mitre.org/news/press-releases/mitre-releases-results-of-evaluations-of-21-cybersecurity-products

Multiple vulnerabilities discovered in smart home devices (22 apr)
https://www.helpnetsecurity.com/2020/04/22/vulnerabilities-smart-home/?web_view=true

Detect & Prevent Cyber Attackers from Exploiting Web Servers via Web Shell Malware (22 apr)
https://www.nsa.gov/News-Features/News-Stories/Article-View/Article/2159419/detect-prevent-cyber-attackers-from-exploiting-web-servers-via-web-shell-malware/

Zoom Hits Milestone on 90-Day Security Plan, Releases Zoom 5.0 (22 apr)
https://blog.zoom.us/wordpress/2020/04/22/zoom-hits-milestone-on-90-day-security-plan-releases-zoom-5-0/

ESET takes down VictoryGate cryptomining botnet (23 apr)
https://www.zdnet.com/article/eset-takes-down-victorygate-cryptomining-botnet/

A look at the ATM/PoS malware landscape from 2017-2019 (23 apr)
https://securelist.com/atm-pos-malware-landscape-2017-2019/96750/

Web shell malware continues to evade many security tools (23 apr)
https://www.helpnetsecurity.com/2020/04/23/web-shell-malware/

Detect and prevent web shell malware (23 apr)
https://www.cyber.gov.au/advice/detect-and-prevent-web-shell-malware

Corona-relaterat

Viral marketing - Counterfeits, substandard goods and intellectual property crime in the COVID-19 pandemic (17 apr)
https://www.europol.europa.eu/publications-documents/viral-marketing-counterfeits-substandard-goods-and-intellectual-property-crime-in-covid-19-pandemic

Säpos varning till vården: Främmande makt utnyttjar coronakrisen (19 apr)
https://www.aftonbladet.se/nyheter/a/GGLLAJ/sapos-varning-till-varden-frammande-makt-utnyttjar-coronakrisen

Remote Video Conferencing Themes in Credential Theft and Malware Threats (19 apr)
https://www.proofpoint.com/us/threat-insight/post/remote-video-conferencing-themes-credential-theft-and-malware-threats

Now More Than Ever You Need to Cover Phone And Laptop Cameras, Says Security Expert (19 apr)
https://www.sciencealert.com/you-need-to-cover-phone-and-laptop-cameras-now-more-than-ever-says-security-expert

COVID-19 Phishing Emails Mainly Contain TrickBot: Microsoft (20 apr)
https://www.bankinfosecurity.com/covid-19-phishing-emails-mainly-contain-trickbot-microsoft-a-14149

Threat update: COVID-19 malicious cyber activity (20 apr)
https://www.cyber.gov.au/threats/threat-update-covid-19-malicious-cyber-activity-20-apr-2020

Online Extortion Scams Increasing During The Covid-19 Crisis (20 apr)
https://www.ic3.gov/media/2020/200420.aspx

Cyberattacks in the healthcare sector during the first three months of the Covid-19 pandemic (20 apr)
https://www.foi.se/rapportsammanfattning?reportNo=FOI%20Memo%207062

2,000 coronavirus scammers taken offline in major phishing crackdown (21 apr)
https://www.zdnet.com/article/2000-coronavirus-scammers-taken-offline-in-major-phishing-crackdown/

Studying How Cybercriminals Prey on the COVID-19 Pandemic (22 apr)
https://unit42.paloaltonetworks.com/how-cybercriminals-prey-on-the-covid-19-pandemic/

Informationssäkerhet och blandat

46% of SMBs have been targeted by ransomware, 73% have paid the ransom (21 apr)
https://www.helpnetsecurity.com/2020/04/21/paying-ransom/

Zoom-Bombing Attack Targets U.S. Government Meeting (21 apr)
https://hotforsecurity.bitdefender.com/blog/zoom-bombing-attack-targets-u-s-government-meeting-23030.html

Choosing the right video conferencing tool for the job (23 apr)
https://freedom.press/training/blog/videoconferencing-tools/

Kvinna på socialtjänsten kollade upp nya pojkvännens dotter – åtalas för dataintrång (23 apr)
https://www.sydsvenskan.se/2020-04-23/kvinna-pa-socialtjansten-kollade-upp-nya-pojkvannens-dotter

CERT-SE i veckan

Sårbarhet i iOS Mail
https://www.cert.se/2020/04/sarbarhet-i-ios-mail

Kritiska sårbarheter i IBM-produkter
https://www.cert.se/2020/04/kritiska-sarbarheter-i-ibm-produkter