SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Warning: Did You Install the Play Store on Windows 11? Read This Now
https://www.howtogeek.com/797298/warning-did-you-install-the-play-store-on-windows-11-read-this-now/

That should teach folks a lesson.
Install from a reputable site like Microsoft when it comes to things like the Microsoft Store
which is part of Windows.
When you play with fire, you wind up getting burned.

[Asyn]

Critical flaw in Elementor WordPress plugin may affect 500k sites
https://www.bleepingcomputer.com/news/security/critical-flaw-in-elementor-wordpress-plugin-may-affect-500k-sites/
https://www.pluginvulnerabilities.com/2022/04/12/5-million-install-wordpress-plugin-elementor-contains-authenticated-remote-code-execution-rce-vulnerability/

[polonus]

More threats to php driven CMS like Word Press and Magento. CMS=Content Management Software).
A critical hole could infest: https://helpx.adobe.com/security/products/magento/apsb22-13.html
So scan your webshop website here: https://www.magereport.com/

Word Press websites can be hacked by mere Lets-Encrypt logs:
https://www.whitefirdesign.com/blog/2022/04/11/fresh-installs-of-wordpress-apparently-being-hacked-based-on-public-disclosure-from-lets-encrypt/
Maybe al CT logs could be involved, see: Various CT Logs: https://crt.sh/monitored-logs

polonus (volunteer 3rd party cold recon website security-analyst and website error-hunter)

[Asyn]

FBI: Payment app users targeted in social engineering attacks
https://www.bleepingcomputer.com/news/security/fbi-payment-app-users-targeted-in-social-engineering-attacks/

[Asyn]

Google Chrome emergency update fixes zero-day used in attacks
https://www.bleepingcomputer.com/news/security/google-chrome-emergency-update-fixes-zero-day-used-in-attacks/

[bob3160]

Weekly Security News Roundup w/e 4-15-2022

https://youtu.be/lJ7-itqEDlU
Security-related news thanks mostly to Avast Software.
I'm just a messenger. They do most of the challenging work and research.
https://www.avast.com/en-us/index#pc

[Asyn]

T-Mobile customers warned of unblockable SMS phishing attacks
https://www.bleepingcomputer.com/news/security/t-mobile-customers-warned-of-unblockable-sms-phishing-attacks/

[bob3160]

T-Mobile customers warned of unblockable SMS phishing attacks
https://www.bleepingcomputer.com/news/security/t-mobile-customers-warned-of-unblockable-sms-phishing-attacks/

Security News Flash - T-Mobile warning of unblockable SMS phishing attacks

https://youtu.be/ocaaaC0aJjM
The New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) issued
a warning after multiple customers have filed reports of being targeted by this
new SMS phishing (smishing) campaign. Read more at
https://www.bleepingcomputer.com/news/security/t-mobile-customers-warned-of-unblockable-sms-phishing-attacks/

[polonus]

Enemybot could develop from a Ddos-bot into ransomware malware.
Re: https://urlhaus.abuse.ch/browse.php?search=enemybot
Re: https://www.abuseipdb.com/check/198.12.116.254
and https://www.securonix.com/blog/detecting-the-enemybot-botnet-advisory/
Also this analysis: https://any.run/report/b0411b4c908566c6bdcb8c9fdd544d1c624103f32357c86350cdc157f1c1d6e8/7df4bece-43b2-4eab-9e59-31cc16d7d734
cracked software download here detected (by community reporting): https://www.virustotal.com/gui/url/a38345f1d6fa09755f147678f7ee0c248ad8d70a9c8c7a0bf51d1e48234ddfa4/community (reported as: Malicious chrome extension download from crack files).

polonus (volunteer cold recon website security-analyst and website error-hunter)

[Asyn]

Workaround for security issue in 7-Zip until it is fixed
https://www.ghacks.net/2022/04/18/workaround-for-security-issue-in-7-zip-until-it-is-fixed/

[bob3160]

Workaround for security issue in 7-Zip until it is fixed
https://www.ghacks.net/2022/04/18/workaround-for-security-issue-in-7-zip-until-it-is-fixed/

I personally don't like to delete files.
I simply renamed the 7-zip.chm file to 7-zip.mhc
The file remains but the program can no longer access the file.

[Asyn]

Workaround for security issue in 7-Zip until it is fixed
https://www.ghacks.net/2022/04/18/workaround-for-security-issue-in-7-zip-until-it-is-fixed/

I personally don't like to delete files.
I simply renamed the 7-zip.chm file to 7-zip.mhc
The file remains but the program can no longer access the file.

Well, I just deleted the help file, never read/needed it anyway.

[DavidR]

Workaround for security issue in 7-Zip until it is fixed
https://www.ghacks.net/2022/04/18/workaround-for-security-issue-in-7-zip-until-it-is-fixed/

I personally don't like to delete files.
I simply renamed the 7-zip.chm file to 7-zip.mhc
The file remains but the program can no longer access the file.

Well, I just deleted the help file, never read/needed it anyway.

I haven't used it either, but I have left it in place and renamed as bob3160 did.

[polonus]

Office fraud and phish @-office-1010-online.azurewebsites.net
Re: https://maltiverse.com/url/fba6686783dc3e37307905e468416f1a8f7489a1b4479ec7148c6977b8136f5b
8 security vendors detect: https://www.virustotal.com/gui/url/87b44887d59dbf2df065ef78cb0aa0277d5561c704f985a80b6eba013a57b187/details

polonus

[Asyn]

Unofficial Windows 11 upgrade installs info-stealing malware
https://www.bleepingcomputer.com/news/security/unofficial-windows-11-upgrade-installs-info-stealing-malware/