Technical

[Asyn]

US indicts Russian GRU 'Sandworm' hackers for NotPetya, worldwide attacks
https://www.bleepingcomputer.com/news/security/us-indicts-russian-gru-sandworm-hackers-for-notpetya-worldwide-attacks/

[Asyn]

Attacks Aimed at Disrupting the Trickbot Botnet
https://krebsonsecurity.com/2020/10/attacks-aimed-at-disrupting-the-trickbot-botnet/
https://blogs.microsoft.com/on-the-issues/2020/10/12/trickbot-ransomware-cyberthreat-us-elections/
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/trickbot-botnet-ransomware-disruption
https://www.welivesecurity.com/2020/10/12/eset-takes-part-global-operation-disrupt-trickbot/

An update on disruption of Trickbot
https://blogs.microsoft.com/on-the-issues/2020/10/20/trickbot-ransomware-disruption-update/

[Asyn]

"Front Door" into BazarBackdoor: Stealthy Cybercrime Weapon
https://www.advanced-intel.com/post/front-door-into-bazarbackdoor-stealthy-cybercrime-weapon

[Asyn]

Plug'nPwn - Connect to Jailbreak
https://blog.t8012.dev/plug-n-pwn/

[Asyn]

Multiple Address Bar Spoofing Vulnerabilities In Mobile Browsers
https://www.rafaybaloch.com/2020/10/multiple-address-bar-spoofing-vulnerabilities.html

[Asyn]

Are You Still Running End-of-Life Windows Servers?
https://blog.rapid7.com/2020/10/19/are-you-still-running-end-of-life-windows-servers/

[Asyn]

LockBit uses automated attack tools to identify tasty targets
https://news.sophos.com/en-us/2020/10/21/lockbit-attackers-uses-automated-attack-tools-to-identify-tasty-targets/

[Asyn]

Data exfiltration via IPv6
https://blog.avast.com/data-exfiltration-via-ipv6-avast

[Asyn]

Maze ransomware is shutting down its cybercrime operation
https://www.bleepingcomputer.com/news/security/maze-ransomware-is-shutting-down-its-cybercrime-operation/

[Asyn]

Apple notarizes new Mac malware… again
https://www.intego.com/mac-security-blog/apple-notarizes-new-mac-malware-again/

[Asyn]

New RAT malware gets commands via Discord, has ransomware feature
https://www.bleepingcomputer.com/news/security/new-rat-malware-gets-commands-via-discord-has-ransomware-feature/

[Asyn]

Turla uses HyperStack, Carbon, and Kazuar to compromise government entity
https://www.accenture.com/us-en/blogs/cyber-defense/turla-belugasturgeon-compromises-government-entity

[Asyn]

Maze ransomware is shutting down its cybercrime operation
https://www.bleepingcomputer.com/news/security/maze-ransomware-is-shutting-down-its-cybercrime-operation/

Maze ransomware shuts down operations, denies creating cartel
https://www.bleepingcomputer.com/news/security/maze-ransomware-shuts-down-operations-denies-creating-cartel/

[Asyn]

Malware Analysis Report (AR20-303A) - MAR-10310246-2.v1 – PowerShell Script: ComRAT
https://us-cert.cisa.gov/ncas/analysis-reports/ar20-303a

[Asyn]

In a first, researchers extract secret key used to encrypt Intel CPU code
https://arstechnica.com/gadgets/2020/10/in-a-first-researchers-extract-secret-key-used-to-encrypt-intel-cpu-code/