Technical

[Asyn]

Gravity RAT Malware Returns as A Chat Application
https://blog.cyble.com/2021/11/11/gravity-rat-malware-returns-as-a-chat-application/

[Asyn]

Microsoft will now snitch on you at work like never before
https://www.zdnet.com/article/microsoft-will-now-snitch-on-you-at-work-like-never-before/

[bob3160]

Microsoft will now snitch on you at work like never before
https://www.zdnet.com/article/microsoft-will-now-snitch-on-you-at-work-like-never-before/

Amazing how headlines always attempt ot mislead.
Does anyone really assume that when they work for someone else that the employer
doesn't have a right to know what you're doing on behalf of the employer's company?
How many insider hacks have just been in the news?

[Asyn]

TA505 exploits SolarWinds Serv-U vulnerability (CVE-2021-35211) for initial access
https://research.nccgroup.com/2021/11/08/ta505-exploits-solarwinds-serv-u-vulnerability-cve-2021-35211-for-initial-access/

[Asyn]

Threat Spotlight: Bait attacks
https://blog.barracuda.com/2021/11/10/threat-spotlight-bait-attacks/

[Asyn]

THREAT ANALYSIS REPORT: From Shathak Emails to the Conti Ransomware
https://www.cybereason.com/blog/threat-analysis-report-from-shatak-emails-to-the-conti-ransomware

[Asyn]

PhoneSpy: The App-Based Cyberattack Snooping South Korean Citizens
https://blog.zimperium.com/phonespy-the-app-based-cyberattack-snooping-south-korean-citizens/

[Asyn]

DirtyMoe: Deployment
https://decoded.avast.io/martinchlumecky/dirtymoe-4/

https://decoded.avast.io/martinchlumecky/dirtymoe-3/
https://decoded.avast.io/martinchlumecky/dirtymoe-rootkit-driver/
https://decoded.avast.io/martinchlumecky/dirtymoe-1/

[Asyn]

Avast Threat Labs releases Q3 2021 Threat Report
https://blog.avast.com/avast-threat-labs-q3-report-avast
https://decoded.avast.io/threatresearch/avast-q321-threat-report/

[Asyn]

The Invisible JavaScript Backdoor
https://certitude.consulting/blog/en/invisible-backdoor/

[Asyn]

BazarLoader ‘call me back’ attack abuses Windows 10 Apps mechanism
https://news.sophos.com/en-us/2021/11/11/bazarloader-call-me-back-attack-abuses-windows-10-apps-mechanism/

[Asyn]

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits
https://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits

[bob3160]

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits
https://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits

The important thing to notice is that Avast is one of the 6 Security companies that
detects this vulnerability.

[Asyn]

QAKBOT Loader Returns With New Techniques and Tools
https://www.trendmicro.com/en_us/research/21/k/qakbot-loader-returns-with-new-techniques-and-tools.html

[Asyn]

A Peek into Top-Level Domains and Cybercrime
https://unit42.paloaltonetworks.com/top-level-domains-cybercrime/