Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- Former Twitter Employee Sentenced to 42 Months in Federal Prison for Acting as a Foreign Agent | OPA | Department of Justice
- Iran-Backed Charming Kitten APT Eyes Kinetic Ops, Kidnapping (darkreading.com)
- Spyware and surveillance-for-hire industry ‘growing globally’: report – The Record by Recorded Future
- Microsoft-Signed Malicious Drivers Usher In EDR-Killers, Ransomware (darkreading.com)
- Ransomware Business Models: Future Pivots and Trends (trendmicro.com)
- Microsoft’s EU data boundary plan to take effect Jan. 1 | Computerworld
- NIST Finally Retires SHA-1, Kind Of (darkreading.com)
- Leaked a secret? Check your GitHub alerts…for free | The GitHub Blog
- Power OFF: El Nuevo Operativo Internacional Que Logró Incautar 48 Dominios Vinculados A Los Principales Proveedores De Ataques DDoS | CronUp Ciberseguridad
Ciberataques e Incidentes
- EMP ha sido comprometida por BlackCat, aka ALPHV | Germán Fernández
- New supply chain attack targeted Ukrainian government networks – The Record by Recorded Future
- Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities | WeLiveSecurity
- Stolen Data on 80K+ Members of FBI-Run InfraGard Reportedly for Sale on Dark Web Forum (darkreading.com)
- FuboTV says World Cup streaming outage caused by a cyberattack (bleepingcomputer.com)
- MCCrash: Cross-platform DDoS botnet targets private Minecraft servers – Microsoft Security Blog
- Filtran Información Personal Presuntamente Robada De Los Usuarios Del Exchange De Criptomonedas Gemini | CronUp Ciberseguridad
Vulnerabilidades
Malware
- Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government | Mandiant
- Spyware and surveillance-for-hire industry ‘growing globally’: report – The Record by Recorded Future
- HTML smugglers turn to SVG images (talosintelligence.com)
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenaza |
|---|---|---|
| 2022-12-16 | Bevolution Group | karakurt |
| 2022-12-16 | TLC | karakurt |
| 2022-12-16 | Publicare | vicesociety |
| 2022-12-16 | SOFTEQ.COM FILES PART2 - dev-service-cc PUBLISHED | clop |
| 2022-12-16 | LOESCHGROUP.DE FILES PART9 - 192.168.101.34\DATEN\Media\ PUBLISHED | clop |
| 2022-12-16 | ORDEREXPRESS.COM.MX FILES PART10 - 10.10.1.33\C$\Users\emmanuel.herrera\ PUBLISHED | clop |
| 2022-12-16 | http://molcy.com | royal |
| 2022-12-16 | Arsat | play |
| 2022-12-16 | JMicron | play |
| 2022-12-16 | Gage Brothers | karakurt |
| 2022-12-15 | Universidade Catolica Portuguesa | vicesociety |
| 2022-12-15 | https://www.leohamel.com | royal |
| 2022-12-15 | Hci Systems Inc | bianlian |
| 2022-12-15 | Eureka Casino Resort | bianlian |
| 2022-12-15 | Emilio Sanchez American School | bianlian |
| 2022-12-15 | Aria systems | bianlian |
| 2022-12-15 | CIMT College | bianlian |
| 2022-12-15 | ZXP Technologies | bianlian |
| 2022-12-15 | http://vincentfister.com | royal |
| 2022-12-15 | Events DC | alphv |
| 2022-12-15 | mcft.com | lockbit3 |
| 2022-12-15 | Bailey Cavalieri LLC | alphv |
| 2022-12-14 | Mark-Taylor | hiveleak |
| 2022-12-14 | Expand Group | hiveleak |
Alerta Temprana de Riesgos Cibernéticos (ATRc®)
Attack Surface Management
Cyber Threat Intelligence
