FireEye has uncovered a widespread campaign, that they are tracking as UNC2452. The actors behind this campaign gained access to numerous public and private organizations around the world. They gained access to victims via trojanized updates to SolarWind’s Orion IT monitoring and management software. This incident may have begun as early as Spring 2020 and is currently ongoing. Post compromise activity following this supply chain compromise has included lateral movement and data theft.
A new strain of Adrozek malware infects devices and modifies browser settings in order to inject ads into search results pages so that the attackers can collect fees from referral programs. The malware can also extract credentials from the browser and upload them to the attacker's servers.
A Remote Code Execution vulnerability has been identified in MS Teams desktop app which can be triggered by a novel XSS (Cross-Site Scripting) injection in teams.microsoft.com. A specifically crafted chat message can be sent to any Microsoft Teams member or channel which will execute arbitrary code on a victim PC's with NO USER INTERACTION.
BruCERT was established in May 2004 with the vision of enhancing the security of Brunei ICT through proactive prevention and effective response. BruCERT became the nation’s most trusted one-stop referral agency dealing with computer-related security incidents in Brunei Darussalam.
BruCERT also runs an awareness program called Secure Verify Connect, aimed at raising awareness of Internet safety and information security among the Bruneian public, though education, seminars and workshops.
Please fill in the required fields along with your correct email address so we can reply back to you.
