A week in security (August 19 – 25)

August 26, 2019 admin a week in security, AhMyth, APT, awis, Bitcoin sextortion, Bolik banking Trojan, crypomining, DEF CON 27, Facebook, facebook hoax, Fortnite, google, Hong Kong, Instagram hoax, Key Negotiation of Bluetooth, KNOB attack, Magecart, misinformation, NordVPN, ransomware, recap, Security Service of Ukraine, Sodinokibi, spyware, Syrk ransomware, Twitter, Valve Corporation, Week in security, weekly blog roundup, Youtube, Yuzhnoukrainsk

Credit to Author: Malwarebytes Labs| Date: Mon, 26 Aug 2019 15:38:39 +0000

Last week on Malwarebytes Labs, we reported on the presence of Magecart on a type of poker software; outlined how the Key Negotiation of Bluetooth (KNOB) attack works; followed the money on a Bitcoin sextortion campaign; looked back at DEF CON 27; and reported on continuing ransomware attacks on several US cities.

Other cybersecurity news

After turning away two vulnerability reports brought about by the same independent security researcher, Valve Corporation, the company behind the Steam video gaming platform admitted its mistake and updated its policies. (Source: Ars Technica)
The Security Service of Ukraine (SBU) arrested power plant operators after finding cryptominers in Ukraine’s Yuzhnoukrainsk nuclear power plant, which compromised its security. (Source: Coin Telegraph)
A couple of spyware apps built based on an open-sourced espionage tool called AhMyth were found in the Google Play Store. The company has since removed these apps. (Source: ESET’s WeLiveSecurity Blog)
Google is the latest company to join Twitter and Facebook to clean up their backyard of hundreds of YouTube channels spreading misinformation about protests in Hong Kong. (Source: CNBC)
According to a report, Facebook phishing attacks surged in Q2 of this year, and Microsoft remained the most phished brand for five consecutive quarters. (Source: Help Net Security)
NordVPN, a popular VPN service, was found to be one of the many brands cloned by cybercriminals in a malware campaign to spread the Bolik banking Trojan. (Source: HackRead)
State-sponsored espionage teams from China, Russia, and Vietnam are now targeting medical research, report says. (Source: Dark Reading)
Syrk ransomware found to be masquerading as an “aimbot” targeted Fortnite players. (Source: Cyren Blog)
A fresh Facebook hoax about making private content public flooded the social platform. (Source: Sophos’s Naked Security Blog)
On the above vein, an old Instagram hoax became known and fooled several celebrities and politicians. (Source: WIRED)

Stay safe!

The post A week in security (August 19 – 25) appeared first on Malwarebytes Labs.

https://blog.malwarebytes.com/feed/