Technical

[Asyn]

I Now Own the Coinhive Domain. Here's How I'm Fighting Cryptojacking and Doing Good Things with Content Security Policies.
https://www.troyhunt.com/i-now-own-the-coinhive-domain-heres-how-im-fighting-cryptojacking-and-doing-good-things-with-content-security-policies/

[Asyn]

GitHub investigating crypto-mining campaign abusing its server infrastructure
https://therecord.media/github-investigating-crypto-mining-campaign-abusing-its-server-infrastructure/

[Asyn]

EtterSilent: the underground’s new favorite maldoc builder
https://intel471.com/blog/ettersilent-maldoc-builder-macro-trickbot-qbot/

[Asyn]

Vulnerability in FortiGate VPN servers is exploited in Cring ransomware attacks
https://ics-cert.kaspersky.com/reports/2021/04/07/vulnerability-in-fortigate-vpn-servers-is-exploited-in-cring-ransomware-attacks/

[Asyn]

Investigating a unique “form” of email delivery for IcedID malware
https://www.microsoft.com/security/blog/2021/04/09/investigating-a-unique-form-of-email-delivery-for-icedid-malware/

[Asyn]

Using Aviary to Analyze Post-Compromise Threat Activity in M365 Environments
https://us-cert.cisa.gov/ncas/current-activity/2021/04/08/using-aviary-to-analyze-post-compromise-threat-activity

[Asyn]

What goes around comes around: hackers leak other hackers’ data online
https://www.group-ib.com/media/swarmshop-breach/