Technical

[Asyn]

World’s most dangerous malware EMOTET disrupted through global action
https://www.europol.europa.eu/newsroom/news/world%E2%80%99s-most-dangerous-malware-emotet-disrupted-through-global-action
https://www.politie.nl/themas/controleer-of-mijn-inloggegevens-zijn-gestolen.html#english

[Asyn]

DNSpooq: Cache Poisoning and RCE in Popular DNS Forwarder dnsmasq
https://www.jsof-tech.com/disclosures/dnspooq/
https://www.jsof-tech.com/wp-content/uploads/2021/01/DNSpooq-Technical-WP.pdf

List of DNSpooq vulnerability advisories, patches, and updates
https://www.bleepingcomputer.com/news/security/list-of-dnspooq-vulnerability-advisories-patches-and-updates/

[Asyn]

Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/

[Asyn]

Cyber Criminals Leave Stolen Phishing Credentials in Plain Sight
https://blog.checkpoint.com/2021/01/21/cyber-criminals-leave-stolen-phishing-credentials-in-plain-sight/

[Asyn]

New campaign targeting security researchers
https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

[Asyn]

TeamTNT delivers malware with new detection evasion tool
https://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool

[Asyn]

New campaign targeting security researchers
https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

ZINC attacks against security researchers
https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/

[Asyn]

Avast Hacker Archives Episode 2: Katie Moussouris
https://blog.avast.com/avast-hacker-archives-episode-2-katie-moussouris-avast

[bob3160]

Avast Hacker Archives Episode 2: Katie Moussouris
https://blog.avast.com/avast-hacker-archives-episode-2-katie-moussouris-avast

An excellent way to spend 40 minutes.

[Asyn]

‘Lebanese Cedar’ APT
https://www.clearskysec.com/cedar/
https://www.clearskysec.com/wp-content/uploads/2021/01/Lebanese-Cedar-APT.pdf

[Asyn]

New Fonix ransomware decryptor can recover victim's files for free
https://www.bleepingcomputer.com/news/security/new-fonix-ransomware-decryptor-can-recover-victims-files-for-free/

[Asyn]

Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests
https://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-malicious-traffic-in-analytics-requests/

[Asyn]

World’s most dangerous malware EMOTET disrupted through global action
https://www.europol.europa.eu/newsroom/news/world%E2%80%99s-most-dangerous-malware-emotet-disrupted-through-global-action
https://www.politie.nl/themas/controleer-of-mijn-inloggegevens-zijn-gestolen.html#english

Cleaning up after Emotet: the law enforcement file
https://blog.malwarebytes.com/threat-analysis/2021/01/cleaning-up-after-emotet-the-law-enforcement-file/

[Asyn]

Vovalex is likely the first ransomware written in D
https://www.bleepingcomputer.com/news/security/vovalex-is-likely-the-first-ransomware-written-in-d/

[Asyn]

Pro-Ocean: Rocke Group’s New Cryptojacking Malware
https://unit42.paloaltonetworks.com/pro-ocean-rocke-groups-new-cryptojacking-malware/