MuddyWater’s Cyber Onslaught, AT&T Pays, Trello Leak, and Sys01 Malvertising Campaign

Cybersecurity Digest for 17 July 2024:

Today we discuss:
MuddyWater’s Latest Cyber Onslaught and a sneaky backdoor!

AT&T Pays Hackers – Was it Worth it?

An Update on RiteAid’s Data Breach

SEXi Ransomware group rebrands…. Meet APT INC!

mSpy Breach

SYS01 Stealer Malware: Malvertising across Social Media

15 Million Trello Email Addresses Leaked

Google’s 23 Billion  to acquire Wiz

Octo Tempest, AKA Scattered Spider adds new ransomware payloads

CISA adds one new vulnerability to its Known Exploited Catalog

 

Articles Referenced in the Show in the order they appear:

CheckPoint Research Bugsleep Backdoor:

New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns - Check Point Research

AT&T Paid Threat Actor:

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records | WIRED

RiteAid Update:
Rite Aid says June data breach impacts 2.2 million people (bleepingcomputer.com)

SEXi Rebranding:

SEXi ransomware rebrands to APT INC, continues VMware ESXi attacks (bleepingcomputer.com)

Mspy Data Breach:

Mspy data breach exposes millions of customers' information (candid.technology)

 

Malvertising in Facebook, LinkedIn, and YoutTube:
Facebook Malvertising Epidemic – Unraveling a Persistent Threat: SYS01 (trustwave.com)

Malvertising_Research.pdf (trustwave.com)

Trello Leak:

Email addresses of 15 million Trello users leaked on hacking forum (bleepingcomputer.com)

Wiz Acquisition:

Exclusive | Google Near $23 Billion Deal for Cybersecurity Startup Wiz - WSJ

Microsoft Tweet Thread:
Microsoft Threat Intelligence on X

 

CISA KEV Addition:
NVD - CVE-2024-36401 (nist.gov)