22 February 2021
This alert was created automatically by our award-winning intelligence product Silobreaker Online. Story selection is determined by an algorithm and based on a set of queries initially set by a Silobreaker user. Contact us here for more information.
Heat – Trending Malware and Threat Actors
| Name | Heat 1 | Heat 7 | Vol 1 | Vol 7 |
|---|---|---|---|---|
| Silver Sparrow Malware |  |
 |
9 | 21 |
| BANLOAD Trojan |  |
 |
1 | 1 |
| BitRAT | |
|
1 | 3 |
| Javali Trojan | |
|
1 | 4 |
| Kasablanka | |
|
1 | 2 |
| Anonymous Group | |
|
1 | 1 |
| APT1 Comment Crew | |
|
1 | 5 |
| MassLogger | |
|
2 | 32 |
| WatchDog Cryptominer | |
|
1 | 10 |
| APOMacroSploit | |
|
1 | 15 |
Data Breaches
Experian challenged over massive data leak in Brazil hxxps://www[.]zdnet[.]com/article/experian-challenged-over-massive-data-leak-in-brazil/?ftag=COS-05-10aaa0g&taid=60320f867bfe410001973309&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitterZDNet – Twitter – Feb 21 2021 07:45Experian challenged over massive data leak in Brazil…
Experian challenged over massive data leak in Brazil hxxps://www[.]zdnet[.]com/article/experian-challenged-over-massive-data-leak-in-brazil/?ftag=COS-05-10aaa0g&taid=60324b5918b9b20001c575d9&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitterZDNet – Twitter – Feb 21 2021 12:00Experian challenged over massive data leak in Brazil…
Experian challenged over massive data leak in Brazil hxxps://www[.]zdnet[.]com/article/experian-challenged-over-massive-data-leak-in-brazil/?ftag=COS-05-10aaa0g&taid=60328a9118b9b20001c576fa&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitterZDNet – Twitter – Feb 21 2021 16:30Experian challenged over massive data leak in Brazil…
Experian challenged over massive data leak in Brazil hxxps://www[.]zdnet[.]com/article/experian-challenged-over-massive-data-leak-in-brazil/?ftag=COS-05-10aaa0g&taid=603344e37bfe4100019736f9&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitterZDNet – Twitter – Feb 22 2021 05:45Experian challenged over massive data leak in Brazil…
Hacker Groups
YourAnonCentral is one of the longest nodes of operations for Anonymous since 2006.
Samples:
YourAnonCentral vs Israel 2014
hxxps://motherjones[.]com/politics/2014/07/anonymous-cyberattack-israel-gaza/
YourAnonCentral vs ISIS 2015
hxxps://cbsnews[.]com/news/anonymous-vs-isis-social-media-war/
YourAnonCentral vs Trump 2017
hxxps://nbcnews[.]com/tech/tech-news/anonymous-trump-you-will-regret-next-4-years-n708401
Guardian 2016: hxxps://twitter[.]com/YourAnonCentral/status/1363450594887876612/photo/1
YourAnonCentral – Twitter – Feb 21 2021 11:28YourAnonCentral is one of the longest nodes of operations for Anonymous since 2006.Samples:
YourAnonCentral vs Israel 2014
hxxps://motherjones[.]com/politics/2014/07/anonymous-cyberattack-israel-gaza/
YourAnonCentral vs ISIS 2015…
RT @AnonNews_Col: #OpMyanmar: Anonymous Brazil joins operations against the military regime. hxxps://twitter[.]com/AnonPressBrazil/status/1363614891555377160AnonymousSwizz – Twitter – Feb 21 2021 23:58RT @AnonNews_Col: #OpMyanmar: Anonymous Brazil joins operations against the military regime. hxxps://twitter[.]com/AnonPressBrazil/status/1363614891555377160
The Anonymous Indonesia News Daily is out! hxxps://paper[.]li/anon_indonesia/1435572762?edition_id=1d87ba00-74bc-11eb-ae29-002590a5ba2d Stories via @AnonymousSwizz #myanmar #whatshappeninginmyanmaranon_indonesia – Twitter – Feb 22 2021 03:14The Anonymous Indonesia News Daily is out! hxxps://paper[.]li/anon_indonesia/1435572762?edition_id=1d87ba00-74bc-11eb-ae29-002590a5ba2d Stories via @AnonymousSwizz #myanmar #whatshappeninginmyanmar
RT @Mandiant: Every industry has defining moments. The APT1 report that came out 8 years ago today is one of those moments for #infosec.
Watch the actual APT1 attacker sessions and intrusion activities in the video below.
▶️ Read the APT1 report: hxxp://feye[.]io/apt1 hxxps://twitter[.]com/Mandiant/status/1362853013518503936/video/1
opexxx – Twitter – Feb 21 2021 09:03RT @Mandiant: Every industry has defining moments. The APT1 report that came out 8 years ago today is one of those moments for #infosec.Watch the actual APT1 attacker sessions and intrusion activities in the video below.
▶️ Read the APT1 report:…
Malware
Researchers uncovered a new Malware Builder dubbed APOMacroSploitSecurity Affairs – Feb 22 2021 06:28Researchers spotted a new Office malware builder, tracked as APOMacroSploit, that was employed in a campaign targeting more than 80 customers worldwide. Researchers from security firm Check Point uncovered a new Office malware builder called…
Malware monsters target Apple’s M1 silicon with ‘Silver Sparrow’The Register – Security – Feb 22 2021 00:00Behaves like a legit software installer and phones home for instructions, but lacks a payload US security consultancy Red Canary says it’s found MacOS malware written specifically for the shiny new M1 silicon that Apple created to power its…
Malware monsters target Apple’s M1 silicon with ‘Silver Sparrow’ hxxps://go[.]theregister[.]com/feed/www.theregister.com/2021/02/22/silver_sparrow_malware_for_apple_m1_silicon/Dinosn – Twitter – Feb 22 2021 06:47Malware monsters target Apple’s M1 silicon with ‘Silver Sparrow’ hxxps://go[.]theregister[.]com/feed/www.theregister.com/2021/02/22/silver_sparrow_malware_for_apple_m1_silicon/
Silver Sparrow macOS malware with M1 compatibility hxxps://redcanary[.]com/blog/clipping-silver-sparrows-wings/Secnewsbytes – Twitter – Feb 22 2021 05:53Silver Sparrow macOS malware with M1 compatibility hxxps://redcanary[.]com/blog/clipping-silver-sparrows-wings/
Vulnerabilities
Popular SHAREit app is affected by severe flaws yet to be fixed #Cybersecurity #digital #security hxxps://securityaffairs[.]co/wordpress/114636/mobile-2/shareit-app-flaw.html?utm_source=dlvr.it&utm_medium=twitter&utm_campaign=shareit-app-flawcybersecboardrm – Twitter – Feb 22 2021 04:30Popular SHAREit app is affected by severe flaws yet to be fixed #Cybersecurity #digital #security hxxps://securityaffairs[.]co/wordpress/114636/mobile-2/shareit-app-flaw.html?utm_source=dlvr.it&utm_medium=twitter&utm_campaign=shareit-app-flaw
Telegram flaw could have allowed access to users secret chats #Cybersecurity #digital #security hxxps://securityaffairs[.]co/wordpress/114653/hacking/telegram-flaw-access-secret-chats.html?utm_source=dlvr.it&utm_medium=twitter&utm_campaign=telegram-flaw-access-secret-chatscybersecboardrm – Twitter – Feb 21 2021 07:52Telegram flaw could have allowed access to users secret chats #Cybersecurity #digital #security…
SHAREit Flaw Could Lead to Remote Code Execution : hxxps://www[.]trendmicro[.]com/en_us/research/21/b/shareit-flaw-could-lead-to-remote-code-execution.htmlbinitamshah – Twitter – Feb 21 2021 15:36SHAREit Flaw Could Lead to Remote Code Execution : hxxps://www[.]trendmicro[.]com/en_us/research/21/b/shareit-flaw-could-lead-to-remote-code-execution.html
Bug bounty hacker earned $5,000 reporting a Stored #XSS flaw in #iCloud[.]com
hxxps://securityaffairs[.]co/wordpress/114866/hacking/stored-xss-flaw-icloud-com.html
#securityaffairs #hackingsecurityaffairs – Twitter – Feb 21 2021 17:15Bug bounty hacker earned $5,000 reporting a Stored #XSS flaw in #iCloud[.]com
hxxps://securityaffairs[.]co/wordpress/114866/hacking/stored-xss-flaw-icloud-com.html
#securityaffairs #hacking
hxxps://securityaffairs[.]co/wordpress/114866/hacking/stored-xss-flaw-icloud-com.html
#securityaffairs #hackingsecurityaffairs – Twitter – Feb 21 2021 17:15Bug bounty hacker earned $5,000 reporting a Stored #XSS flaw in #iCloud[.]com
hxxps://securityaffairs[.]co/wordpress/114866/hacking/stored-xss-flaw-icloud-com.html
#securityaffairs #hacking
Ongoing Campaigns
FBI warns of the consequences of telephony denial-of-service (TDoS) attacksSecurity Affairs – Feb 21 2021 14:57The Federal Bureau of Investigation (FBI) has issued a warning about the risks of telephony denial-of-service (TDoS) attacks on call centers. The United States’ Federal Bureau of Investigation (FBI) is warning of the consequences of telephony…
Security Affairs newsletter Round 302Security Affairs – Feb 21 2021 10:02A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe …
The DoppelPaymer #ransomware gang claims credit for #Kia’s outage and demanded $20 million in the double-extortion attack.
hxxps://threatpost[.]com/kia-motors-ransomware-attack/164085/threatpost – Twitter – Feb 21 2021 14:00The DoppelPaymer #ransomware gang claims credit for #Kia’s outage and demanded $20 million in the double-extortion attack.
hxxps://threatpost[.]com/kia-motors-ransomware-attack/164085/
hxxps://threatpost[.]com/kia-motors-ransomware-attack/164085/threatpost – Twitter – Feb 21 2021 14:00The DoppelPaymer #ransomware gang claims credit for #Kia’s outage and demanded $20 million in the double-extortion attack.
hxxps://threatpost[.]com/kia-motors-ransomware-attack/164085/
#FBI warns of the consequences of telephony denial-of-service (#TDoS) attacks
hxxps://securityaffairs[.]co/wordpress/114856/cyber-crime/fbi-tdos-attacks-warning.html
#securityaffairs #hackingsecurityaffairs – Twitter – Feb 21 2021 14:59#FBI warns of the consequences of telephony denial-of-service (#TDoS) attacks
hxxps://securityaffairs[.]co/wordpress/114856/cyber-crime/fbi-tdos-attacks-warning.html
#securityaffairs #hacking
hxxps://securityaffairs[.]co/wordpress/114856/cyber-crime/fbi-tdos-attacks-warning.html
#securityaffairs #hackingsecurityaffairs – Twitter – Feb 21 2021 14:59#FBI warns of the consequences of telephony denial-of-service (#TDoS) attacks
hxxps://securityaffairs[.]co/wordpress/114856/cyber-crime/fbi-tdos-attacks-warning.html
#securityaffairs #hacking
Although Silobreaker has relied on what it regards as reliable sources while compiling the content herein, Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of such content and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content herein.
