yaracroft @venom@nanao.cybtex.fr

Ransomware attacks more than doubled last year and increased in both scale and sophistication

https://www.group-ib.com/resources/threat-research/ransomware-2021.html

Thousands of Android and iOS Apps Leak Data From the Cloud

https://www.wired.com/story/ios-android-leaky-apps-cloud/

⚖️ Procès du hacker militant sioniste Ulcan

https://www.francetvinfo.fr/monde/israel/ce-type-dactes-ne-doit-pas-rester-impuni-au-proces-du-hacker-ulcan-les-parties-civiles-esperent-une-condamnation_4318511.html

A security flaw in a website run by the government of West Bengal in India exposed the lab results of at least hundreds of thousands of residents, though likely millions, who took a COVID-19 test.

https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/

[DDDB:PR] 15 schools in Nottinghamshire crippled by cyber attack

https://www.itpro.co.uk/security/cyber-attacks/358770/15-schools-in-nottinghamshire-crippled-by-cyber-attack

[DDDB:PR] Altona Clinic was the victim of a ransomware attack last Friday (February 26).

https://pembinavalleyonline.com/local/ransomware-attack-shuts-down-altona-clinic

Yara rules - APT HAFNIUM

https://github.com/Neo23x0/signature-base/blob/master/yara/apt_hafnium.yar

Russian cybercriminal forum hacked, user details exposed.

https://grahamcluley.com/russian-cybercriminal-forum-hacked-user-details-exposed/

Scripts and binaries to automatically detect control-flow flattening and other state machines in binaries.

https://github.com/mrphrazer/obfuscation_detection

Qubes containerization on Windows

https://github.com/nccgroup/Wubes

Lazarus Group's MATA Framework Leveraged to Deploy TFlower Ransomware

https://sygnia.co/mata-framework

« De toute façon, nos concurrents ne font pas vraiment mieux que nous sur ce sujet. »

https://cyber.excusesecu.fr/

Palantir's recommendations to the U.S. National Security Commission for Artificial Intelligence (NSCAI)

https://medium.com/palantir/palantirs-recommendations-to-the-nscai-f5d7d5dad344

ATM Malware Ploutus is back, targeting banks in Latin America.
https://www.metabaseq.com/recursos/ploutus-is-back-targeting-itautec-atms-in-latin-america

.NIET is an IDA Pro plugin. Its purpose is to import missing symbols (usually few thousands) which are resolved at runtime by .NET native compiled binaries.
https://github.com/synacktiv/dotNIET