Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- Medibank Shutting All Branches, Going Offline, In Security Overhaul – channelnews
- Vice Society: Profiling a Persistent Threat to the Education Sector (paloaltonetworks.com)
- Google: N. Korean hackers exploited Seoul Halloween tragedy to spread malware (nst.com.my)
- Hive Social pulls the plug on itself after security flaws found (malwarebytes.com)
- New Release: Tor Browser 12.0 | The Tor Project
- APT37 Uses Internet Explorer Zero-Day to Spread Malware (darkreading.com)
- Research reveals where 95% of open source vulnerabilities lie – Help Net Security
Ciberataques e Incidentes
- Iranian hackers accused of targeting diamond industry with wiper malware – The Record by Recorded Future
- Latest data breach shows updated details about Taiwan VP, top national security chief: hacker | Taiwan News
- CommonSpirit Health ransomware attack exposed data of 623,000 patients (bleepingcomputer.com)
- Local governments allegedly targeted with Iranian ‘Drokbk’ malware through Log4j vulnerability – The Record by Recorded Future
Vulnerabilidades
- Update now! Google patches Android vulnerability that allows remote code execution over Bluetooth (malwarebytes.com)
- Samsung Galaxy S22 hacked in 55 seconds on Pwn2Own Day 3 (bleepingcomputer.com)
- Pwn2Own Toronto 2022 Day 2: Participants earned $281KSecurity Affairs
- Cisco Releases Security Advisory for IP Phone 7800 and 8800 Series | CISA
Malware
- Breaking the silence – Recent Truebot activity (talosintelligence.com)
- Drokbk Malware Uses GitHub as Dead Drop Resolver | Secureworks
- Cloud Atlas targets entities in Russia and Belarus amid the ongoing war in Ukraine – Check Point Research
- New MuddyWater Threat: Old Kitten; New Tricks | Deep Instinct
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenaza |
|---|---|---|
| 2022-12-09 | rhotelja.com | lockbit3 |
| 2022-12-09 | hawanasalalah.com | lockbit3 |
| 2022-12-09 | SOFTEQ.COM FILES PART1 - dev-gitlab-runner PUBLISHED | clop |
| 2022-12-09 | Maney - Gordon - Zeller, P.A. | blackbasta |
| 2022-12-09 | Atcore | blackbasta |
| 2022-12-09 | Dingbro Ltd | blackbasta |
| 2022-12-09 | Mortons Media Group Ltd | blackbasta |
| 2022-12-09 | ARRI | blackbasta |
| 2022-12-09 | A.R. Thomson Group | blackbasta |
| 2022-12-09 | Cleveland Brothers | blackbasta |
| 2022-12-09 | AIRCOMECHANICAL | blackbasta |
| 2022-12-09 | Panolam Surface Systems | blackbasta |
| 2022-12-09 | SEACAST | blackbasta |
| 2022-12-09 | nworksllc | blackbasta |
| 2022-12-09 | ChemiFlex | quantum |
| 2022-12-09 | Radical Sportscars | quantum |
| 2022-12-09 | Orotex | quantum |
| 2022-12-09 | Acquarius Trust Group | quantum |
| 2022-12-09 | Pilenpak | quantum |
| 2022-12-09 | AHT Wisconsin Windows | quantum |
| 2022-12-08 | New Partners | vicesociety |
| 2022-12-08 | LOESCHGROUP.DE FILES PART8 - 192.168.101.34\DATEN\Media\ PUBLISHED | clop |
| 2022-12-08 | ORDEREXPRESS.COM.MX FILES PART9 - 10.10.1.33\C$\Users\emmanuel.herrera\Documents\Imágenes\ | clop |
| 2022-12-08 | Warren County Community College | alphv |
Ingeniero en Ciberseguridad por la Universidad Tecnológica de Chile, Speaker, Analista de Ciberinteligencia, Investigador y Redactor para CronUp Ciberseguridad.
