Technical

[Asyn]

CVE-2022-21449: Psychic Signatures in Java
https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/

[Asyn]

Shuckworm: Espionage Group Continues Intense Campaign Against Ukraine
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-intense-campaign-ukraine

[Asyn]

Russia’s War in Ukraine Has Complicated the Means Through Which Cybercriminals Launder Funds. Here’s How They’re Adapting
https://www.flashpoint-intel.com/blog/russias-ukraine-war-is-complicating-cybercriminal-money-laundering/

[Asyn]

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code
https://krebsonsecurity.com/2022/04/leaked-chats-show-lapsus-stole-t-mobile-source-code/

[Asyn]

Zero Tolerance: More Zero-Days Exploited in 2021 Than Ever Before
https://www.mandiant.com/resources/zero-days-exploited-2021

[Asyn]

LemonDuck Targets Docker for Cryptomining Operations
https://www.crowdstrike.com/blog/lemonduck-botnet-targets-docker-for-cryptomining-operations/

[Asyn]

Quantum Ransomware
https://thedfirreport.com/2022/04/25/quantum-ransomware/

[Asyn]

Prynt Stealer Spotted In the Wild
https://blog.cyble.com/2022/04/21/prynt-stealer-a-new-info-stealer-performing-clipper-and-keylogger-activities/

[Asyn]

Browser-in-the-browser attack: a new phishing technique
https://www.kaspersky.com/blog/browser-in-the-browser-attack/44163/

[Asyn]

Emotet malware now installs via PowerShell in Windows shortcut files
https://www.bleepingcomputer.com/news/security/emotet-malware-now-installs-via-powershell-in-windows-shortcut-files/

[Asyn]

How Emotet flooded Japanese inboxes
https://blog.avast.com/emotet-botnet-japan

[Asyn]

Remote Code Execution via VirusTotal Platform
https://www.cysrc.com/blog/virus-total-blog/

[Asyn]

Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn
https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

[Asyn]

EmoCheck now detects new 64-bit versions of Emotet malware
https://www.bleepingcomputer.com/news/security/emocheck-now-detects-new-64-bit-versions-of-emotet-malware/

[Asyn]

New Black Basta ransomware springs into action with a dozen breaches
https://www.bleepingcomputer.com/news/security/new-black-basta-ransomware-springs-into-action-with-a-dozen-breaches/