Technical

[Asyn]

Bizarro banking Trojan expands its attacks to Europe
https://securelist.com/bizarro-banking-trojan-expands-its-attacks-to-europe/102258/

[Asyn]

Attributing CryptoCore Attacks Against Crypto Exchanges to LAZARUS (North Korea)
https://www.clearskysec.com/cryptocore-lazarus-attribution/
https://www.clearskysec.com/wp-content/uploads/2021/05/CryptoCore-Lazarus-Clearsky.pdf

[Asyn]

Try This One Weird Trick Russian Hackers Hate
https://krebsonsecurity.com/2021/05/try-this-one-weird-trick-russian-hackers-hate/

[Asyn]

Pwned Passwords, Open Source in the .NET Foundation and Working with the FBI
https://www.troyhunt.com/pwned-passwords-open-source-in-the-dot-net-foundation-and-working-with-the-fbi/

[Asyn]

BazaFlix: BazaLoader Fakes Movie Streaming Service
https://www.proofpoint.com/us/blog/threat-insight/bazaflix-bazaloader-fakes-movie-streaming-service

[Asyn]

Introducing Half-Double: New hammering technique for DRAM Rowhammer bug
https://security.googleblog.com/2021/05/introducing-half-double-new-hammering.html

[Asyn]

Another Nobelium Cyberattack
https://blogs.microsoft.com/on-the-issues/2021/05/27/nobelium-cyberattack-nativezone-solarwinds/
https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/

[Asyn]

A new ransomware enters the fray: Epsilon Red
https://news.sophos.com/en-us/2021/05/28/epsilonred/

[Asyn]

Another Nobelium Cyberattack
https://blogs.microsoft.com/on-the-issues/2021/05/27/nobelium-cyberattack-nativezone-solarwinds/
https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/

Breaking down NOBELIUM’s latest early-stage toolset
https://www.microsoft.com/security/blog/2021/05/28/breaking-down-nobeliums-latest-early-stage-toolset/

[Asyn]

A not so Fancy game. Exploring the new “SkinnyBoy” Bear’s backdoor
https://cluster25.io/2021/06/03/a-not-so-fancy-game-apt28-skinnyboy/
https://cluster25.io/wp-content/uploads/2021/05/2021-05_FancyBear.pdf

[Asyn]

Necro Python bot adds new exploits and Tezos mining to its bag of tricks
https://blog.talosintelligence.com/2021/06/necro-python-bot-adds-new-tricks.html

[Asyn]

The June 2021 Security Update Review
https://www.zerodayinitiative.com/blog/2021/6/8/the-june-2021-security-update-review

[Asyn]

Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments
https://unit42.paloaltonetworks.com/siloscape/

[Asyn]

PuzzleMaker attacks with Chrome zero-day exploit chain
https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/

[Asyn]

800 criminals arrested in biggest ever law enforcement operation against encrypted communication
https://www.europol.europa.eu/newsroom/news/800-criminals-arrested-in-biggest-ever-law-enforcement-operation-against-encrypted-communication