Technical

[Asyn]

Russian RSocks botnet disrupted after hacking millions of devices
https://www.bleepingcomputer.com/news/security/russian-rsocks-botnet-disrupted-after-hacking-millions-of-devices/
https://www.justice.gov/usao-sdca/pr/russian-botnet-disrupted-international-cyber-operation

RSocks criminal botnet taken down
https://blog.avast.com/rsocks-criminal-botnet

[Asyn]

Does Acrobat Reader Unload Injection of Security Products?
https://blog.minerva-labs.com/does-acrobat-reader-unload-injection-of-security-products

Avast Dev-Info: Definitely not blocking scanning, they are blocking only some user-mode hooking by preventing injection of aswHook.dll. Only behavior shield depends on this functionality and only marginally.

[Asyn]

APT ToddyCat
https://securelist.com/toddycat/106799/

[Asyn]

Defending Ukraine: Early Lessons from the Cyber War
https://blogs.microsoft.com/on-the-issues/2022/06/22/defending-ukraine-early-lessons-from-the-cyber-war/

[Asyn]

Spyware vendor targets users in Italy and Kazakhstan
https://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/

[Asyn]

MEGA: Malleable Encryption Goes Awry
https://mega-awry.io/
https://mega-awry.io/pdf/mega-malleable-encryption-goes-awry.pdf

[Asyn]

Hacking into the worldwide Jacuzzi SmartTub network
https://eaton-works.com/2022/06/20/hacking-into-the-worldwide-jacuzzi-smarttub-network/

[Asyn]

Chinese actor takes aim, armed with Nim Language and Bizarro AES
https://research.checkpoint.com/2022/chinese-actor-takes-aim-armed-with-nim-language-and-bizarro-aes/

[Asyn]

Dark Web Price Index 2022
https://www.privacyaffairs.com/dark-web-price-index-2022/

[Asyn]

Hacking Some More Secure USB Flash Drives (Part II)
https://blog.syss.com/posts/hacking-usb-flash-drives-part-2/

[Asyn]

The Call Is Coming from Inside the House: CrowdStrike Identifies Novel Exploit in VOIP Appliance
https://www.crowdstrike.com/blog/novel-exploit-detected-in-mitel-voip-appliance/

[Asyn]

Python packages upload your AWS keys, env vars, secrets to the web
https://blog.sonatype.com/python-packages-upload-your-aws-keys-env-vars-secrets-to-web

[Asyn]

Malware-as-a-service is spreading among teens
https://blog.avast.com/discord-minors-ransomware

[bob3160]

Malware-as-a-service is spreading among teens
https://blog.avast.com/discord-minors-ransomware

Malware-as-a-service is spreading among teens

https://youtu.be/k4Ds2nVcqZs
As the Avast team spent more time in the community, observing their behavior and vocabulary,
they realized something surprising: most of the members were minors between the ages of 11 and 16.
To read more on this topic please see the full article by Emma McGowan at the link listed: https://bit.ly/3A9cEFD
If you have children or grandchildren, please keep an eye on their online activity and always
guide them in the right direction.

[Asyn]

LockBit Ransomware Disguised as Copyright Claim E-mail Being Distributed
https://asec.ahnlab.com/en/35822/