Security Affairs newsletter Round 426 by Pierluigi Paganini – International edition

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

WordPress sites using the Ultimate Member plugin are under attack

LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC

Avast released a free decryptor for the Windows version of the Akira ransomware

Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor

miniOrange’s WordPress Social Login and Register plugin was affected by a critical auth bypass bug

North Korea-linked Andariel APT used a new malware named EarlyRat last year

The phone monitoring app LetMeSpy disclosed a data breach

Previously undetected ThirdEye malware appears in the threat landscape

Former Group-IB manager has been arrested in Kazahstan

Experts published PoC exploits for Arcserve UDP authentication bypass issue

Using Electromagnetic Fault Injection Attacks to take over drones

Experts warn of a spike in May and June of 8Base ransomware attacks

Critical SQL Injection flaws in Gentoo Soko can lead to Remote Code Execution

EncroChat dismantling led to 6,558 arrests and the seizure of $979M in criminal funds

Mockingjay process injection technique allows EDR bypass

Experts found hundreds of devices within federal networks having internet-exposed management interfaces

Schneider Electric and Siemens Energy are two more victims of a MOVEit attack

JOKERSPY used to target a cryptocurrency exchange in Japan

Citizen of Croatia charged with running the Monopoly Market drug marketplace

Energy company Suncor suffered a cyber attack and its company Petro-Canada gas reported problems at its gas stations in Canada

Internet Systems Consortium (ISC) fixed three DoS flaw in BIND

China-linked APT group VANGUARD PANDA uses a new tradecraft in recent attacks

Trojanized Super Mario Bros game spreads malware

Twitter hacker sentenced to five years in prison for cybercrime offenses

Cybercrime

Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet

Inside Threat Actors: Dark Web Forums vs. Illicit Telegram Communities

Dismantling of an encrypted network sends shockwaves through organised crime groups across Europe  

TSMC Says Supplier Hacked After Ransomware Group Claims Attack on Chip Giant  

Malware

Trojanized Super Mario Game Installer Spreads SupremeBot Malware

Initial research exposing JOKERSPY  

Who is 8BASE? A deep dive into the “newish” ransom gang

Ransomware review: June 2023      

New Fast-Developing ThirdEye Infostealer Pries Open System Information  

Linux version of Akira ransomware targets VMware ESXi servers

Decrypted: Akira Ransomware  

Hacking

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution     

Anonymous Sudan’s Attack of European Investment Bank: Money, Politics and PR

Flipper Zero hacking tool is a big hit  

Why ORMs and Prepared Statements Can’t (Always) Win   

Drone Security and Fault Injection Attacks | Gabriel Gonzalez  

CVE-2023-26258 – Remote Code Execution in ArcServe UDP Backup 

miniOrange Addresses Authentication Bypass Vulnerability in WordPress Social Login and Register WordPress Plugin

Hacking Campaign Actively Exploiting Ultimate Member Plugin  

Intelligence and Information Warfare

Business as Usual: Falcon Complete MDR Thwarts Novel VANGUARD PANDA (Volt Typhoon) Tradecraft 

Swiss intelligence report warns of Russian and Chinese espionage

Andariel’s silly mistakes and a new malware family  

Charming Kitten Updates POWERSTAR with an InterPlanetary Twist  

Cybersecurity

Identifying CISA BOD 23-02 Internet-Exposed Networked Management Interfaces with Censys   

Cyber Threat Report: UK Legal Sector  

BLUE BOOK  

LetMeSpy, a phone tracking app spying on thousands, says it was hacked   

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

The post Security Affairs newsletter Round 426 by Pierluigi Paganini – International edition appeared first on Security Affairs.