Full Segment Notes
Naughty Tesla, Flipper Zero, Rilide, Styx, Genesis, Sophos, Cisco, Meta, Aaran Leyland, and More on this episode of the Security Weekly News.
List of Articles
Doug White
- Flipper Zero banned by Amazon for being a ‘card skimming device’
- Hackers use Rilide browser extension to bypass 2FA, steal crypto
- New dark web market STYX focuses on financial fraud services
- FBI Seizes Bot Shop ‘Genesis Market’ Amid Arrests Targeting Operators, Suppliers – Krebs on Security
- Sophos Patches Critical Code Execution Vulnerability in Web Security Appliance
- Cisco Patches Code and Command Execution Vulnerabilities in Several Products
- Salary packages approached $1 million as Meta paid to play in metaverse
- Tesla workers shared images from car cameras, including “scenes of intimacy”
Aaran Leyland
- Rorschach ransomware deployed by misusing a security tool
An unbranded ransomware strain that recently hit a US-based company is being deployed by attackers who are misusing a tool included in a commercial security product, Check Point researchers have found.
The solution in question is Palo Alto Networks’ Cortex XDR, whose Dump Service Tool the attackers appropriated and are now misusing to side-load the DLL that decrypts and injects the (newly labeled) Rorschach ransomware.
https://thehackernews.com/2023/04/rorschach-ransomware-emerges-experts.html
