Technical

[Asyn]

Looking for vulnerabilities in MediaTek audio DSP
https://research.checkpoint.com/2021/looking-for-vulnerabilities-in-mediatek-audio-dsp/

[Asyn]

CronRAT malware hides behind February 31st
https://sansec.io/research/cronrat

[Asyn]

Babadeda Crypter targeting crypto, NFT, and DeFi communities
https://blog.morphisec.com/the-babadeda-crypter-targeting-crypto-nft-defi-communities

[Asyn]

TrickBot phishing checks screen resolution to evade researchers
https://www.bleepingcomputer.com/news/security/trickbot-phishing-checks-screen-resolution-to-evade-researchers/

[Asyn]

ScarCruft surveilling North Korean defectors and human rights activists
https://securelist.com/scarcruft-surveilling-north-korean-defectors-and-human-rights-activists/105074/

[Asyn]

Doctor Web discovered vulnerabilities in children’s smart watches
https://news.drweb.com/show/?i=14350&lng=en

[Asyn]

The King is Dead, Long Live MyKings! (Part 1 of 2)
https://decoded.avast.io/janrubin/the-king-is-dead-long-live-mykings/

CoinHelper hides in repackaged installers of software, Windows 11, games, and antivirus
https://blog.avast.com/coinhelper-research-avast
https://decoded.avast.io/janrubin/toss-a-coin-to-your-helper/

[Asyn]

Deceive the Heavens to Cross the sea
https://threatfabric.com/blogs/deceive-the-heavens-to-cross-the-sea.html

[Asyn]

Russian internet watchdog announces ban of six more VPN products
https://www.bleepingcomputer.com/news/legal/russian-internet-watchdog-announces-ban-of-six-more-vpn-products/

[Asyn]

Yanluowang: Further Insights on New Ransomware Threat
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/yanluowang-ransomware-attacks-continue

[Asyn]

Banking Trojan Targets Banking Users in Malaysia
https://blog.cyble.com/2021/12/01/banking-trojan-targets-banking-users-in-malaysia/

[Asyn]

ProxyShell exploitation leads to BlackByte ransomware
https://redcanary.com/blog/blackbyte-ransomware/

[Asyn]

Nine WiFi routers used by millions were vulnerable to 226 flaws
https://www.bleepingcomputer.com/news/security/nine-wifi-routers-used-by-millions-were-vulnerable-to-226-flaws/
https://www.iot-inspector.com/blog/router-security-check-2021/

[Asyn]

Injection is the New Black: Novel RTF Template Inject Technique Poised for Widespread Adoption Beyond APT Actors
https://www.proofpoint.com/us/blog/threat-insight/injection-new-black-novel-rtf-template-inject-technique-poised-widespread

[Asyn]

Top 2021 threats include ransomware, pandemic-related scams, and fleeceware
https://blog.avast.com/2021-year-in-review-avast