• August 03, 2021

Raccoon Stealer Bundles Malware, Propagates Via Google SEO

This post was originally published on this siteAn update to the stealer-as-a-service platform hides in pirated software, pilfers crypto-coins and installs a software dropper for downloads of more malware.   This post was originally published on https://threatpost.com/feed/. https://blacklakesecurity.com/raccoon-stealer-bundles-malware-propagates-via-google-seo/

• August 03, 2021

‘DeadRinger’ Targeted Exchange Servers Long Before Discovery

This post was originally published on this siteCyberespionage campaigns linked to China attacked telecoms via ProxyLogon bugs, stealing call records and maintaining persistence, as far back as 2017.   This post was originally published on https://threatpost.com/feed/. https://blacklakesecurity.com/deadringer-targeted-exchange-servers-long-before-discovery/

• August 02, 2021

‘PwnedPiper’: Devastating Bugs in >80% of Hospital Pneumatics

This post was originally published on this sitePodcast: Blood samples aren’t martinis. You can’t shake them. But bugs in pneumatic control systems could lead to that, RCE or ransomware.   This post was originally published on https://threatpost.com/feed/. https://blacklakesecurity.com/pwnedpiper-devastating-bugs-in-80-of-hospital-pneumatics/

• August 02, 2021

This post was originally published on this siteVulnerability Name Affected Component CVE# Date Underflow in udpRXThread HMI3 Control Panel in: Nexus Panel CVE-2021-37161 02/08/2021 Overflow in sccProcessMsg HMI3 Control Panel in: Nexus Panel CVE-2021-37162 02/08/2021 Overflow in hmiProcessMsg HMI3 Control Panel in: Nexus Panel CVE-2021-37165 02/08/2021 Off-by-three stack overflow in tcpTxThread HMI3 Control Panel in: […]

• August 02, 2021

Chipotle Emails Serve Up Phishing Lures

This post was originally published on this siteMass email distribution service compromise mirrors earlier Nobelium attacks.   This post was originally published on https://threatpost.com/feed/. https://blacklakesecurity.com/chipotle-emails-serve-up-phishing-lures/