Jorge Laurel
Friday Wrap Up

Friday Wrap Up: 20 December 2024

Jorge Laurel · ·3 min read ·Issue #55

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

Staying informed about the latest cybersecurity threats and data breaches is essential for businesses and individuals alike.

  • 🛑 Malicious ads spread Lumma Stealer via fake CAPTCHA pages, tricking users into running PowerShell commands. (Published on 12/16/2024, BleepingComputer). Read More

  • 🐘 Glutton malware exploits popular PHP frameworks like Laravel and ThinkPHP, targeting multiple countries. (Published on 12/16/2024, The Hacker News). Read More

  • 📞 Microsoft Teams vishing spreads DarkGate RAT, leveraging new delivery methods like instant messaging hijacking. (Published on 12/16/2024, Dark Reading). Read More

  • 🚨 Hackers leak partial Cisco data from 4.5TB of exposed records. Another troubling breach for the tech giant. (Published on 12/17/2024, Hackread). Read More

  • 🚔 BeyondTrust confirms hackers breached its Remote Support SaaS instances in a December attack. (Published on 12/19/2024, BleepingComputer). Read More

  • ⚙️ UAC-0125 uses Cloudflare Workers to distribute malware disguised as Ukraine’s Army+ app. (Published on 12/19/2024, The Hacker News). Read More

Understanding recent cybercrimes and legal repercussions helps to stay vigilant.

  • ⚖️ Man sentenced to 69 months for SQL injection hacking but released due to pretrial detention since 2019. (Published on 12/17/2024, SecurityWeek). Read More

  • 💰 Hackers demand ransom after breaching Rhode Island’s health system, exposing residents’ sensitive data. (Published on 12/17/2024, Hackread). Read More

  • 🍩 Krispy Kreme targeted by Play ransomware gang, disrupting operations in November. (Published on 12/20/2024, BleepingComputer). Read More

National Security and Policy

Key updates on government actions and their implications for cybersecurity.

  • 🇺🇸 The U.S. considers banning TP-Link routers over potential cybersecurity risks linked to national security. (Published on 12/18/2024, BleepingComputer). Read More

  • 🌌 Midnight Blizzard uses phishing and rogue RDP servers in attacks, complicating detection. (Published on 12/18/2024, Dark Reading). Read More

Cyber Awareness and Advocacy

Raising awareness about evolving scams and preventive measures.

  • 💔 INTERPOL advocates replacing “pig butchering” with “romance baiting” to describe online cryptocurrency scams. (Published on 12/18/2024, The Hacker News). Read More

  • 📄 Mobile phishing campaigns target executives with fake DocuSign links in sophisticated attacks. (Published on 12/19/2024, Hackread). Read More

Industry Actions Against Cybercrime

Collaborative efforts in tackling cybercrime show progress.

  • 📺 ACE shuts down a massive sports piracy network with over 812M visits per year. (Published on 12/20/2024, BleepingComputer). Read More

Noteworthy Threat Actors

Insights into advanced persistent threat groups targeting critical industries.

  • 🔬 North Korea’s Lazarus Group targets nuclear engineers with CookiePlus malware in sophisticated attacks. (Published on 12/20/2024, The Hacker News). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!