Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- Entra En Vigencia La Nueva Normativa Que Obliga A Las Organizaciones Públicas A Reportar Incidentes De Ciberseguridad | CronUp Ciberseguridad
- Nadie Está A Salvo: ¿cómo Es Que Las Grandes Compañías De Tecnología Han Caído En La Red De La Ciberdelincuencia? | CronUp Ciberseguridad
- Judge Orders U.S. Lawyer in Russian Botnet Case to Pay Google – Krebs on Security
- CISA Adds One Known Exploited Vulnerability to Catalog | CISA
- Resecurity – "In The Box" – Mobile Malware Webinjects Marketplace
- Florida Dark Web Drugs Vendor Sentenced to Prison | Darknetlive
- Cyber Safety Review Board to Conduct Second Review on Lapsus$ | Homeland Security (dhs.gov)
- SiriusXM Vulnerability Lets Hackers Remotely Unlock and Start Connected Cars (thehackernews.com)
Ciberataques e Incidentes
- French hospital complex suspends operations, transfers patients after ransomware attack – The Record by Recorded Future
- CommonSpirit Health Provides Cyberattack Update and Notification of Data Breach Involving Virginia Mason Franciscan Health in Washington state (databreaches.net)
- Safdarjung Hospital reports cyberattack but not ransomware; AIIMS server down for 11th day | Delhi News – Times of India (indiatimes.com)
- Nieuwe app Forum lek: privégegevens alle 92.000 (oud-)leden op straat | RTL Nieuws
- Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware (thehackernews.com)
Vulnerabilidades
- CISA Adds One Known Exploited Vulnerability to Catalog | CISA
- CVE-2022-41974, CVE-2022-41973, CVE-2022-3328 Exploit Detection: Three Linux Vulnerabilities Chained to Gain Full Root Privileges – SOC Prime
- Ping bug potentially allows remote hack of FreeBSD systemsSecurity Affairs
Malware
- Android malware apps with 2 million installs spotted on Google Play (bleepingcomputer.com)
- ₿uyer ₿eware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware | Volexity
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenaza |
|---|---|---|
| 2022-12-05 | prinovaglobal.com | lockbit3 |
| 2022-12-05 | littleswitzerland.com | lockbit3 |
| 2022-12-05 | Glutz | vicesociety |
| 2022-12-05 | Bonn Nutrients Pvt | bianlian |
| 2022-12-05 | Restaurant | bianlian |
| 2022-12-05 | Ability Commerce | bianlian |
| 2022-12-05 | CROWN TECHNOLOGY Ltd | bianlian |
| 2022-12-05 | IM Group | bianlian |
| 2022-12-05 | School | bianlian |
| 2022-12-05 | AV Solutions | bianlian |
| 2022-12-05 | Technologies | bianlian |
| 2022-12-05 | LJ Hooker Palm Beach | alphv |
| 2022-12-05 | moruga it | alphv |
| 2022-12-04 | sentenia.net | lockbit3 |
| 2022-12-04 | handrhealthcare.com | lockbit3 |
| 2022-12-04 | brunoy.fr | lockbit3 |
| 2022-12-04 | https://www.trussbilt.com | royal |
| 2022-12-04 | https://duplicatorsales.net/ | royal |
| 2022-12-04 | Grupo NGN | alphv |
| 2022-12-04 | Jubilant | alphv |
| 2022-12-04 | pro office Büro + Wohnkultur GmbH | alphv |
| 2022-12-04 | Philippine Economic Zone Authority (PEZA) peza.gov.ph | alphv |
| 2022-12-04 | Cappagh Contractors Construction (London) Ltd | alphv |
| 2022-12-04 | abilways.com | lockbit3 |
| 2022-12-04 | LOESCHGROUP.DE FILES PART7 - 192.168.101.34\DATEN\Media\ PUBLISHED | clop |
| 2022-12-04 | ORDEREXPRESS.COM.MX FILES PART8 - 10.10.1.33\C$\Users\emmanuel.herrera\Documents\Imágenes\ | clop |
| 2022-12-04 | MARCELSOLUTION.COM FILES PART9 - 192.168.12.120\E$\DATA\ PUBLISHED | clop |
| 2022-12-03 | https://allseasonmovers.com | royal |
Alerta Temprana de Riesgos Cibernéticos
Gestión de la Superficie de Ataque
Cyber Threat Intelligence
