Technical

[Asyn]

LemonDuck Targets Docker for Cryptomining Operations
https://www.crowdstrike.com/blog/lemonduck-botnet-targets-docker-for-cryptomining-operations/

[Asyn]

Quantum Ransomware
https://thedfirreport.com/2022/04/25/quantum-ransomware/

[Asyn]

Prynt Stealer Spotted In the Wild
https://blog.cyble.com/2022/04/21/prynt-stealer-a-new-info-stealer-performing-clipper-and-keylogger-activities/

[Asyn]

Browser-in-the-browser attack: a new phishing technique
https://www.kaspersky.com/blog/browser-in-the-browser-attack/44163/

[Asyn]

Emotet malware now installs via PowerShell in Windows shortcut files
https://www.bleepingcomputer.com/news/security/emotet-malware-now-installs-via-powershell-in-windows-shortcut-files/

[Asyn]

How Emotet flooded Japanese inboxes
https://blog.avast.com/emotet-botnet-japan

[Asyn]

Remote Code Execution via VirusTotal Platform
https://www.cysrc.com/blog/virus-total-blog/

[Asyn]

Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn
https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

[Asyn]

EmoCheck now detects new 64-bit versions of Emotet malware
https://www.bleepingcomputer.com/news/security/emocheck-now-detects-new-64-bit-versions-of-emotet-malware/

[Asyn]

New Black Basta ransomware springs into action with a dozen breaches
https://www.bleepingcomputer.com/news/security/new-black-basta-ransomware-springs-into-action-with-a-dozen-breaches/

[Asyn]

New Core Impact Backdoor Delivered Via VMWare Vulnerability
https://blog.morphisec.com/vmware-identity-manager-attack-backdoor

[Asyn]

Facebook Doesn’t Know What It Does With Your Data, Or Where It Goes: Leaked Document
https://www.vice.com/en/article/akvmke/facebook-doesnt-know-what-it-does-with-your-data-or-where-it-goes

[bob3160]

@Asyn post:4050

New Black Basta ransomware springs into action with a dozen breaches
https://www.bleepingcomputer.com/news/security/new-black-basta-ransomware-springs-into-action-with-a-dozen-breaches/

Breaking Security News Flash - Black Basta -Ransomware Gang

https://d1ka0itfguscri.cloudfront.net/Lh/2022/04/30/14/22/c3fv23VYCty/preview.jpg

[b]https://youtu.be/omRohBCJePM[/b]
New or maybe just re-branded. They steal and encrypt your data.
If you don’t pay, they leak your data.
See BleepingComputer for the full story. https://bit.ly/3s3ZIvP

[Asyn]

The hybrid war in Ukraine
https://blogs.microsoft.com/on-the-issues/2022/04/27/hybrid-war-ukraine-russia-cyberattacks/
https://aka.ms/ukrainespecialreport

[Asyn]

The ink-stained trail of GOLDBACKDOOR
https://stairwell.com/wp-content/uploads/2022/04/Stairwell-threat-report-The-ink-stained-trail-of-GOLDBACKDOOR.pdf

[Asyn]

Alert (AA22-117A) - 2021 Top Routinely Exploited Vulnerabilities
https://www.cisa.gov/uscert/ncas/alerts/aa22-117a

[Asyn]

REvil ransomware returns: New malware sample confirms gang is back
https://www.bleepingcomputer.com/news/security/revil-ransomware-returns-new-malware-sample-confirms-gang-is-back/

[bob3160]

@Asyn post:4057

REvil ransomware returns: New malware sample confirms gang is back
https://www.bleepingcomputer.com/news/security/revil-ransomware-returns-new-malware-sample-confirms-gang-is-back/

You can’t keep a good man down… (OOPS)

[Asyn]

RedLine Stealer Resurfaces in Fresh RIG Exploit Kit Campaign
https://www.bitdefender.com/blog/labs/redline-stealer-resurfaces-in-fresh-rig-exploit-kit-campaign/
https://www.bitdefender.com/files/News/CaseStudies/study/415/Bitdefender-PR-Whitepaper-RedLine-creat6109-en-EN.pdf

[Asyn]

BRONZE PRESIDENT Targets Russian Speakers with Updated PlugX
https://www.secureworks.com/blog/bronze-president-targets-russian-speakers-with-updated-plugx