Internet Security Week – Edition No. 135

In edition no. 135 of Internet Security Week , a report on the cybersecurity scenario in Brazilian companies, Brazil is the main source of the longest DDoS attack in history, 80% of piracy sites display malicious advertisements and much more.

News

80% of piracy websites display dangerous ads to visitors

Access to piracy websites is often cited by experts as a risk to users and, now, research has quantified this risk. According to a survey carried out by the Digital Citizens Alliance, 80% of domains of this type display dangerous advertisements to visitors, with one in every six visits exposing users to downloading malware.

By Felipe Demartini on Canaltech

Lazarus Group hacked energy companies around the world

A malicious campaign conducted by the North Korean group Lazarus affected energy suppliers around the world between February and July this year. The campaign was partially disclosed by Symantec and AhnLab in April and May, respectively, but Cisco Talos is now providing more details about the attack.

In CISO Advisor

A Zoom vulnerability and the war between hackers and developers

In March 2020, when the entire world was just beginning to deal with remote work, a vulnerability was discovered in the installation package for Zoom — one of the world's leading remote communications tools — allowing arbitrary code execution on Apple computers . Zoom fixed the vulnerability… sort of.

By Enoch Root on Kaspersky Daily

Report presents the current cybersecurity scenario in Brazilian companies

The ESET Security Report presents information about the current digital security scenario in the corporate world, such as the increase in phishing attacks, cases of increasingly targeted ransomware and the growth in threat detections targeting Android devices.

By Francisco Camurça in We Live Security

Financial technology company suffered data leak of 50 thousand users

Founded in 2015, Revolut is a rapidly growing financial technology company, now offering banking, money management and investment services to customers around the world.

By Bill Toulas in Bleeping Computer

Data-stealing spyware disguised as a banking rewards app on Android

Malware, which can be controlled remotely by bad actors after infecting a device. According to reports, an updated version of Android software was first discovered in 2021.

By Jessica Lyons Hardcastle in The Register

Brazil is the main origin of one of the longest DDoS attacks in history

One of the longest denial of service attacks in history was recorded last June, when a Chinese telephone operator was the target of a very high volume of requests for more than four hours. Brazil even had a negative share in this record, being the third country with the highest number of contaminated devices, behind the USA and Indonesia.

By Felipe Demartini on Canaltech

VMware and Microsoft warn of new Chromeloader attacks

VMware and Microsoft are warning about the emergence of an ongoing and widespread Chromeloader malware campaign that has evolved into a more dangerous threat, now seen dropping malicious browser extensions, the node-WebKit malware, and even ransomware in some cases.

In CISO Advisor

Hot out of the oven: a new study on “the nature of cyber incidents”

Most often in 2021, attackers attempted to attack companies' infrastructure by exploiting vulnerabilities in widely available applications (in 53.6% of cases). In 17.9% of cases, they used previously compromised credentials, and in 14.3% — malicious emails.

In Kaspersky Daily