World’s most dangerous malware EMOTET disrupted through global action
https://www.europol.europa.eu/newsroom/news/world’s-most-dangerous-malware-emotet-disrupted-through-global-action
https://www.politie.nl/themas/controleer-of-mijn-inloggegevens-zijn-gestolen.html#english
List of DNSpooq vulnerability advisories, patches, and updates
https://www.bleepingcomputer.com/news/security/list-of-dnspooq-vulnerability-advisories-patches-and-updates/
Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/
Cyber Criminals Leave Stolen Phishing Credentials in Plain Sight
https://blog.checkpoint.com/2021/01/21/cyber-criminals-leave-stolen-phishing-credentials-in-plain-sight/
New campaign targeting security researchers
https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/
TeamTNT delivers malware with new detection evasion tool
https://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool
ZINC attacks against security researchers
https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/
Avast Hacker Archives Episode 2: Katie Moussouris
https://blog.avast.com/avast-hacker-archives-episode-2-katie-moussouris-avast
An excellent way to spend 40 minutes.
‘Lebanese Cedar’ APT
https://www.clearskysec.com/cedar/
https://www.clearskysec.com/wp-content/uploads/2021/01/Lebanese-Cedar-APT.pdf
New Fonix ransomware decryptor can recover victim’s files for free
https://www.bleepingcomputer.com/news/security/new-fonix-ransomware-decryptor-can-recover-victims-files-for-free/
Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests
https://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-malicious-traffic-in-analytics-requests/
Cleaning up after Emotet: the law enforcement file
https://blog.malwarebytes.com/threat-analysis/2021/01/cleaning-up-after-emotet-the-law-enforcement-file/
Vovalex is likely the first ransomware written in D
https://www.bleepingcomputer.com/news/security/vovalex-is-likely-the-first-ransomware-written-in-d/
Pro-Ocean: Rocke Group’s New Cryptojacking Malware
https://unit42.paloaltonetworks.com/pro-ocean-rocke-groups-new-cryptojacking-malware/
Operation NightScout: Supply‑chain attack targets online gaming in Asia
https://www.welivesecurity.com/2021/02/01/operation-nightscout-supply-chain-attack-online-gaming-asia/
Understanding the circle of digital certificate trust
https://blog.avast.com/understanding-digital-certificates-avast
https://www.zdnet.com/article/google-bans-another-misbehaving-ca-from-chrome/
Emsisoft releases new decryptor for Ziggy ransomware
https://blog.emsisoft.com/en/37722/emsisoft-releases-new-decryptor-for-ziggy-ransomware/
https://www.emsisoft.com/ransomware-decryption-tools/ziggy
Avast joins the Coalition Against Stalkerware
https://blog.avast.com/coalition-against-stalkerware-avast
https://stopstalkerware.org/
Barcode Scanner app on Google Play infects 10 million users with one update
https://blog.malwarebytes.com/android/2021/02/barcode-scanner-app-on-google-play-infects-10-million-users-with-one-update/