All posts in Uncategorized

■■□□□ Backdoor slipped into popular code library, drains ~$155k from digital wallets. https://arstechnica.com/information-technology/2024/12/backdoor-slips-into-popular-code-library-drains-155k-from-digital-wallets/ https://t.me/cKure/14997

■□□□□ USB-C cable CT scan reveals sinister active electronics — O.MG pen testing cable contains a hidden antenna and another die embedded in the microcontroller. https://www.tomshardware.com/tech-industry/cyber-security/o-mg-usb-c-cable-ct-scan-reveals-sinister-active-electronics-contains-a-hidden-antenna-and-another-die-embedded-in-the-microcontroller https://t.me/cKure/14996

■■■■□ Disinformation: Romania has declassified and made public intelligence on illegal funding, technological amplification of information campaigns, and cyber attacks targeting the Romanian presidential election. https://x.com/lukOlejnik/status/1864693537628913913 https://t.me/cKure/14995

■■■■□ Encrypted Chat Service Seized, 2.3M+ Messages Deciphered Authorities read encrypted messages on Matrix in real-time, detailing money laundering, arms trafficking, and drug trafficking schemes. https://me.pcmag.com/en/security/27330/encrypted-chat-service-seized-23m-messages-deciphered https://t.me/cKure/14994

■■■■■ Internal Google documents reveal concerns about its cloud contract with Israel. This comes amid International Criminal Court called jewlet state of committing genocide against the native population. https://www.nytimes.com/2024/12/03/technology/google-israel-contract-project-nimbus.html https://www.theverge.com/2024/12/3/24311951/google-project-nimbus-internal-documents. https://t.me/cKure/14993

■■■□□ Isreali NSO Group’s Pegasus Spyware Detected in New Mobile Devices. https://cybersecuritynews.com/pegasus-spyware-detected-in-new-mobile-devices/ https://t.me/cKure/14992

■□□□□ Deloitte Hacked – Brain Cipher Ransomware Group Allegedly Stolen 1 TB of Data. https://cybersecuritynews.com/deloitte-hacked/ https://t.me/cKure/14991

■■■■□ SafeLine: Open-source web application firewall (WAF). https://www.helpnetsecurity.com/2024/12/04/safeline-open-source-web-application-firewall-waf/ https://t.me/cKure/14990

The Russian APT group #Turla has gained access to the Pakistani APT group #Sidecopy + #TransparentTribe (Storm-0156)’s C2 server and used it to attack operators in Afghanistan and Pakistan. Snowblind: The Invisible Hand of Secret Blizzard https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/ IoCs: https://github.com/blacklotuslabs/IOCs/blob/main/Secret_Blizzard_IoCs.txt https://t.me/cKure/14986

■■■■□ A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections. https://www.wired.com/story/iverify-spyware-detection-tool-nso-group-pegasus/ https://iverify.io/blog/iverify-mobile-threat-investigation-uncovers-new-pegasus-samples https://t.me/cKure/14985