SECURITY WARNINGS & Notices - Please post them here

[Simion]

Black Ruby Ransomware

https://www.bleepingcomputer.com/news/security/black-ruby-ransomware-skips-victims-in-iran-and-adds-a-miner-for-good-measure/

[polonus]

Be warned, new TCP DOS vector disclosed, called TCP Starvation:
https://github.com/Eplox/TCP-Starvation  (source:  9bd6ea1)

polonus

This critical flaw of TCP has been known since 2008, and more secure protocols, like RDP, were not much used

[polonus]

Olympic Destroyer, malware that was directed at the critical systems of the Olypic Wintergames,
now being analyzed:

http://blog.talosintelligence.com/2018/02/olympic-destroyer.html

polonus

[Be Secure]

Rapid Ransomware Being Spread Using Fake IRS Malspam
https://www.bleepingcomputer.com/news/security/rapid-ransomware-being-spread-using-fake-irs-malspam/

[Be Secure]

JavaScript Cryptomining Scripts Discovered in 19 Google Play Apps
https://www.bleepingcomputer.com/news/security/javascript-cryptomining-scripts-discovered-in-19-google-play-apps/

[Be Secure]

Telegram 0-Day Used to Spread Monero and Zcash Mining Malware
https://www.bleepingcomputer.com/news/security/telegram-0-day-used-to-spread-monero-and-zcash-mining-malware/

[polonus]

A mitigation with policy editor of an attack recently directed at Telegram users:
https://www.ipa.go.jp/security/english/virus/press/201110/E_PR201110.html

About the attack: https://securelist.com/zero-day-vulnerability-in-telegram/83800/

polonus

[Be Secure]

Bingo, Amigo! Jackpotting: ATM malware from Latin America to the World
https://securelist.com/atm-malware-from-latin-america-to-the-world/83836/

[Pondus]

February Patch Tuesday Is a Bouquet of Fixes for Privilege Escalation Vulnerabilities
https://blog.trendmicro.com/trendlabs-security-intelligence/february-patch-tuesday-bouquet-fixes-privilege-escalation-vulnerabilities/

[Be Secure]

UK Formally Accuses Russian Military of NotPetya Ransomware Outbreak
https://www.bleepingcomputer.com/news/security/uk-formally-accuses-russian-military-of-notpetya-ransomware-outbreak/

[Pondus]

Six top US intelligence chiefs caution against buying Huawei phones
https://www.cnbc.com/2018/02/13/chinas-hauwei-top-us-intelligence-chiefs-caution-americans-away.html

[bob3160]

Six top US intelligence chiefs caution against buying Huawei phones
https://www.cnbc.com/2018/02/13/chinas-hauwei-top-us-intelligence-chiefs-caution-americans-away.html

If it's from Russia, China or North Korea and you live in the US, the warning will always be "Don't use the product or service."

[DavidR]

Six top US intelligence chiefs caution against buying Huawei phones
https://www.cnbc.com/2018/02/13/chinas-hauwei-top-us-intelligence-chiefs-caution-americans-away.html

If it's from Russia, China or North Korea and you live in the US, the warning will always be "Don't use the product or service."

Interesting, since Google used 'Huawei' for the Google Nexus 6P and I have had mine for almost two years

[bob3160]

Six top US intelligence chiefs caution against buying Huawei phones
https://www.cnbc.com/2018/02/13/chinas-hauwei-top-us-intelligence-chiefs-caution-americans-away.html

If it's from Russia, China or North Korea and you live in the US, the warning will always be "Don't use the product or service."

Interesting, since Google used 'Huawei' for the Google Nexus 6P and I have had mine for almost two years

What's important is to always be "Politically Correct".

[Pondus]

Six top US intelligence chiefs caution against buying Huawei phones
https://www.cnbc.com/2018/02/13/chinas-hauwei-top-us-intelligence-chiefs-caution-americans-away.html

If it's from Russia, China or North Korea and you live in the US, the warning will always be "Don't use the product or service."

Does North Korea produce anything sold in US / Europe  ?     Do they make anything at all we want .... rice maybe