Technical

[Asyn]

New Mirai Variant Targeting Network Security Devices
https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/

[Asyn]

New Old Bugs in the Linux Kernel
https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html

[Asyn]

Now You See It, Now You Don’t: CopperStealer Performs Widespread Theft
https://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft

[Asyn]

Alert (AA21-077A) - Detecting Post-Compromise Threat Activity Using the CHIRP IOC Detection Tool
https://us-cert.cisa.gov/ncas/alerts/aa21-077a

[Asyn]

New macOS malware XcodeSpy Targets Xcode Developers with EggShell Backdoor
https://labs.sentinelone.com/new-macos-malware-xcodespy-targets-xcode-developers-with-eggshell-backdoor/

[Asyn]

The rise of ransomware as a service
https://blog.avast.com/ransomware-as-a-service-avast

[Asyn]

In-the-Wild Series: October 2020 0-day discovery
https://googleprojectzero.blogspot.com/2021/03/in-wild-series-october-2020-0-day.html

[Asyn]

Purple Fox Rootkit Now Propagates as a Worm
https://www.guardicore.com/labs/purple-fox-rootkit-now-propagates-as-a-worm/

[Asyn]

New Advanced Android Malware Posing as “System Update”
https://blog.zimperium.com/new-advanced-android-malware-posing-as-system-update/

[Asyn]

Universal “netmask” npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote file inclusion, local file inclusion, and more (CVE-2021-28918)
https://sick.codes/universal-netmask-npm-package-used-by-270000-projects-vulnerable-to-octal-input-data-server-side-request-forgery-remote-file-inclusion-local-file-inclusion-and-more-cve-2021-28918/

[Asyn]

BazarCall malware uses malicious call centers to infect victims
https://www.bleepingcomputer.com/news/security/bazarcall-malware-uses-malicious-call-centers-to-infect-victims/

[Asyn]

20 Million Miners: Finding Malicious Cryptojacking Images in Docker Hub
https://unit42.paloaltonetworks.com/malicious-cryptojacking-images/

[Asyn]

Android sends 20x more data to Google than iOS sends to Apple, study says
https://arstechnica.com/gadgets/2021/03/android-sends-20x-more-data-to-google-than-ios-sends-to-apple-study-says/
https://www.scss.tcd.ie/doug.leith/apple_google.pdf

[Asyn]

Cheating the cheater: How adversaries are using backdoored video game cheat engines and modding tools
https://blog.talosintelligence.com/2021/03/cheating-cheater-how-adversaries-are.html

[Asyn]

Fake jQuery files infect WordPress sites with malware
https://www.bleepingcomputer.com/news/security/fake-jquery-files-infect-wordpress-sites-with-malware/