Russian snoops add OAuth abuse to targeted phishing campaigns
Google is tracking three distinct suspected Russian cyber-spy groups that are targeting individuals in academia, aerospace, defense, government agencies, and think tanks across Europe and the US. The UNC (unclassified) groups, as Google calls them, have been orchestrating these highly targeted campaigns since at least last year, and they remain ongoing. Some of the phishing and OAuth-abuse operations used in the attack took place this month. READ MORE...
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. MalwareHunterTeam observed this unusual technique in July in an attack that used shortcut files (.LNK) and FTP server banners as dead-drop resolvers (DDR) to retrieve commands. FTP banners are text strings the server uses as a greeting message for connecting hosts before they log in. READ MORE...
N-able Bug Exposes Password Vault Master Keys
Unwise design choices from a specialty password manager allowed any malicious website to obtain complete, persistent access to customers' vaults. "Passportal" is a credential management product from N-able, formerly SolarWinds MSP, a now-independent and nearly billion-dollar public company. N-able markets its products primarily to managed service providers (MSPs) and IT services providers. READ MORE...
- ...in 1858, the first of the historical debates between Illinois Senate candidates Abraham Lincoln and Stephen Douglas is held in Ottawa, IL.
- ...in 1911, The Mona Lisa is stolen by an employee of the Louvre. It would not be recovered until two years later.
- ...in 1959, Hawaii becomes the 50th state.
- ...in 1966, The Beatles played at Crosley Field in Cincinnati, with a set list comprised of only 11 songs and lasting 35 minutes. Tickets were $5.
