Pierluigi Paganini August 13, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime

Criminals Pose as Non-Fungible Token (NFT) Developers to Target Internet Users with an Interest in NFT Acquisition    

Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests

5 arrested in Poland for running bulletproof hosting service for cybercrime gangs

Administrator of ‘Bulletproof’ Webhosting Domain Charged in Connection with Facilitation of NetWalker Ransomware      

Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating  

Malware

Honeypot Recon: New Variant of SkidMap Targeting Redis   

Invisible Adware: Unveiling Ad Fraud Targeting Korean Android Users   

MAR-10454006.r4.v2 SEASPY and WHIRLPOOL Backdoors  

Statc Stealer: Decoding the Elusive Malware Threat  

Focus on DroxiDat/SystemBC  

Hacking

UK Electoral Commission – Public notification of cyber-attack on Electoral Commission systems  

Downfall Attacks

Cloud Account Takeover Campaign Leveraging EvilProxy Targets Top-Level Executives at over 100 Global Organizations  

Zyxel Router Command Injection Attack 

Python Parsing Error Enabling Bypass CVE-2023-24329 

Teens Hacked Boston Subway Cards to Get Infinite Free Rides—and This Time, Nobody Got Sued  

Intelligence and Information Warfare

Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company   

Ukrainian official touts country’s wartime cyber intelligence efforts  

Iranian cyber spies are targeting dissidents in Germany, warns intelligence service

MoustachedBouncer: Espionage against foreign diplomats in Belarus

Department of Homeland Security’s Cyber Safety Review Board to Conduct Review on Cloud Security      

Cybersecurity

Microsoft mitigates Power Platform Custom Code information disclosure vulnerability

Chinese Lawfare in the Maritime, Aviation, and Information Technology Domains       

Zoom can now train its A.I. using some customer data, according to updated terms    

THE AUGUST 2023 SECURITY UPDATE REVIEW  

‘Monumental’ data breach exposes names of entire Northern Ireland police force  

Pentagon launches AI competition to solicit help securing computer systems  

Northern Ireland police may have endangered its own officers by posting details online in error

OpenAI’s web scraping GPTBot is under attack – here’s why   

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)