Technical

[Asyn]

Russian hackers perform reconnaissance against Austria, Estonia
https://www.bleepingcomputer.com/news/security/russian-hackers-perform-reconnaissance-against-austria-estonia/
https://blog.sekoia.io/turla-new-phishing-campaign-eastern-europe/

[Asyn]

Why You Should Stop Using Nulled WordPress Plugins and Themes
https://kinsta.com/blog/nulled-wordpress-plugins-themes/

[Asyn]

New 'pymafka' malicious package drops Cobalt Strike on macOS, Windows, Linux
https://blog.sonatype.com/new-pymafka-malicious-package-drops-cobalt-strike-on-macos-windows-linux

[bob3160]

New 'pymafka' malicious package drops Cobalt Strike on macOS, Windows, Linux
https://blog.sonatype.com/new-pymafka-malicious-package-drops-cobalt-strike-on-macos-windows-linux

The good news is that both Avast and AVG detect this and protect us from this infection.

[Asyn]

FTC fines Twitter $150M for using 2FA info for targeted advertising
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

[Asyn]

Malware Campaign Targets InfoSec Community: Threat Actor Uses Fake Proof of Concept to Deliver Cobalt-Strike Beacon
https://blog.cyble.com/2022/05/20/malware-campaign-targets-infosec-community-threat-actor-uses-fake-proof-of-concept-to-deliver-cobalt-strike-beacon

[bob3160]

FTC fines Twitter $150M for using 2FA info for targeted advertising
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

FTC fines Twitter $150M for using 2FA info
for targeted advertising

https://youtu.be/1bQVsUtFcb8
Twitter asked over 140 million users for this information to protect their accounts starting in 2013, but it failed to inform them that the data would also be used to allow advertisers to target them with ads. Read the whole story at BleepingComputer.
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

[Asyn]

Microsoft research reveals the changing face of skimming
https://blog.avast.com/microsoft-research-skimming
https://www.microsoft.com/security/blog/2022/05/23/beneath-the-surface-uncovering-the-shift-in-web-skimming/

[DavidR]

FTC fines Twitter $150M for using 2FA info for targeted advertising
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

For this gross breach of trust - using what is meant to be a security function to trach a user - even worse when it is also a "direct violation of the FTC Act."  I think $150m is a let off, I just wonder if the EU could/would also fine them as well.

I have never trusted social networking from day one and wouldn't trust them as far as I can throw them, hard when it isn't a physical thing.  I still haven't signed up to any social networking services.

[bob3160]

FTC fines Twitter $150M for using 2FA info for targeted advertising
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

For this gross breach of trust - using what is meant to be a security function to trach a user - even worse when it is also a "direct violation of the FTC Act."  I think $150m is a let off, I just wonder if the EU could/would also fine them as well.

I have never trusted social networking from day one and wouldn't trust them as far as I can throw them, hard when it isn't a physical thing.  I still haven't signed up to any social networking services.

They are a tool and for our (Meadow Lake Parks Area Assn.) non-profit, it's a way to communicate with our members and keep them updated with our ongoing activities. Trust is a totally different thing.

[DavidR]

FTC fines Twitter $150M for using 2FA info for targeted advertising
https://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/

For this gross breach of trust - using what is meant to be a security function to trach a user - even worse when it is also a "direct violation of the FTC Act."  I think $150m is a let off, I just wonder if the EU could/would also fine them as well.

I have never trusted social networking from day one and wouldn't trust them as far as I can throw them, hard when it isn't a physical thing.  I still haven't signed up to any social networking services.

They are a tool and for our (Meadow Lake Parks Area Assn.) non-profit, it's a way to communicate with our members and keep them updated with our ongoing activities. Trust is a totally different thing.

My concerns are with the big players in social networking (not local not for profit organisations) as the drive for making money seems to override everything else.

[Asyn]

PDF Malware Is Not Yet Dead
https://threatresearch.ext.hp.com/pdf-malware-is-not-yet-dead/

[Asyn]

The New RansomHouse on The Block
https://cyberint.com/blog/research/ransomhouse/

[Asyn]

PyPI package 'ctx' and PHP library 'phpass' compromised to steal environment variables
https://blog.sonatype.com/pypi-package-ctx-compromised-are-you-at-risk

[Asyn]

Android apps with millions of downloads exposed to high-severity vulnerabilities
https://www.microsoft.com/security/blog/2022/05/27/android-apps-with-millions-of-downloads-exposed-to-high-severity-vulnerabilities/