Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- Cloudflare Expands Relationship With Microsoft (darkreading.com)
- $20K Buys Insider Access to Telegram Servers, Dark Web Ad Claims (darkreading.com)
- Crypto Fraud Victims Receive Over $17 Million in Restitution from BitConnect Scheme | OPA | Department of Justice
- Meta sues ‘surveillance service’ for creating fake accounts and scraping user data – The Record from Recorded Future News
- SailPoint Acquires SecZetta to Provide Identity Security for Non-Employee Identities (darkreading.com)
- Buggy Microsoft Defender ASR rule deletes Windows app shortcuts (bleepingcomputer.com)
- Europol takes down call centers that scammed Germans out of €2 million – The Record from Recorded Future News
- Cloudflare Wins CISA Contract for Registry and Authoritative Domain Name System (DNS) Services (darkreading.com)
Ciberataques e Incidentes
- Vice Society ransomware claims attack on Australian firefighting service (bleepingcomputer.com)
- Millions of Aflac, Zurich insurance customers in Japan have data leaked after breach – The Record from Recorded Future News
- Cyber attack against Royal Mail linked to Russia (cshub.com)
- Canada’s Okanagan College warns of potential privacy breach after cyber attack (databreaches.net)
- Pro-Russia group NoName057(16) targets Ukraine and NATO countriesSecurity Affairs
- NortonLifeLock warns that hackers breached Password Manager accounts (bleepingcomputer.com)
- Fortinet Confirma Que Un Actor De Amenazas Estaba Explotando Una Vulnerabilidad ZERO-DAY De FortiOS SSL-VPN Contra Redes Gubernamentales | CronUp Ciberseguridad
Vulnerabilidades
- Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw (bleepingcomputer.com)
- Hackers exploit Control Web Panel flaw to open reverse shells (bleepingcomputer.com)
- Cisco warns of two vulnerabilities affecting end-of-life routers – The Record from Recorded Future News
- SymStealer Vulnerability Let Attacker Steal Login Credentials (gbhackers.com)
Malware
- Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar (thehackernews.com)
- EyeSpy – Iranian Spyware Delivered in VPN Installers – Bitdefender Antivirus Software
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenazas |
|---|---|---|
| 2023-01-13 | SOFTEQ.COM FILES PART6 - Projects\ PUBLISHED | clop |
| 2023-01-13 | LOESCHGROUP.DE FILES PART13 - 192.168.101.34\DATEN\Media\Img\ PUBLISHED | clop |
| 2023-01-13 | ORDEREXPRESS.COM.MX FILES FILES PART14 - 10.10.2.246\CCOECUMPLIMIENTO\ PUBLISHED | clop |
| 2023-01-13 | fujikura-electronics.co.th | lockbit3 |
| 2023-01-13 | Trans Maldivian Airways | ransomhouse |
| 2023-01-13 | Liebra Permana | alphv |
| 2023-01-13 | TIME TECHNOPLAST LIMITED | alphv |
| 2023-01-13 | Fu Yu Corporation | alphv |
| 2023-01-13 | Air Comm Corporation | alphv |
| 2023-01-12 | http://www.lvcdlaw.com | royal |
| 2023-01-12 | http://www.tasupply.com | royal |
| 2023-01-12 | http://www.ruhrpumpen.com | royal |
| 2023-01-12 | versteden.com | lockbit3 |
| 2023-01-12 | russellfinex.com | lockbit3 |
| 2023-01-12 | nuxe.com | lockbit3 |
| 2023-01-12 | lidestrifoodanddrink.com | lockbit3 |
| 2023-01-12 | muellergartenbau.ch | lockbit3 |
| 2023-01-12 | lloyddowson.co.uk | lockbit3 |
| 2023-01-12 | Physician Partners of America | snatch |
| 2023-01-12 | IMI Hydronic Engineering | ransomhouse |
| 2023-01-11 | G.W. Becker | hiveleak |
Ingeniero en Ciberseguridad por la Universidad Tecnológica de Chile, Speaker, Analista de Ciberinteligencia, Investigador y Redactor para CronUp Ciberseguridad.
