Internet Security Week - Edition Nº 55

In edition no. 55 of Internet Security Week, hacker forums are being hacked, Microsoft fails, new ransomware doesn't want money and much more.

News

Hacker forums are being hacked

Consulting firm Flashpoint posted on its blog that it had detected a breach in the famous Russian cybercrime forum known as “Maza”.

In Flashpoint

Chain on WhatsApp promises designer sneakers, but delivers malware

This Tuesday (9), The Hack identified a new malicious chain that is being spread through WhatsApp, deceiving internet users and encouraging them to forward such content to their contacts.

By Ramon de Souza in The Hack

Hackers break into security cameras at Tesla, Cloudflare and more companies

Hackers managed to access more than 150,000 surveillance cameras managed by a company called Verkada.

By Emerson Alecrim in Tecnoblog

Microsoft failure allows user to add money to their own account

A Brazilian security researcher discovered three vulnerabilities in the Microsoft Store platform, aimed at purchasing applications and games, which allow everything from generating cold invoices to fraudulently increasing money in the account itself.

By Felipe Payão in Tecmundo

US government warns of major flaw in Outlook emails

The White House has issued an alert to all system administrators about vulnerabilities present in Outlook, Exchange and other Microsoft email systems.

By Felipe Demartini on Canaltech

Apple has released security patches for macOS, iOS, iPadOS, watchOS and Safari to fix a vulnerability

The vulnerability can be exploited by malicious web pages to execute malware on victims' computers and gadgets.

By Chris Williams in The Register

iPhone app exposed 300 GB of user voice call recordings

The Automatic Call Recorder application, one of the most popular for iOS device users, had a very dangerous flaw, which exposed the security of thousands of its users.

By Rafael Arbulu in Olhar Digital

WhatsApp recovery email: understand how two-step verification can be bypassed to steal an account

Clear doubts explains how scammers can take advantage of the recovery email to steal a WhatsApp account with two-step confirmation activated.

By Altieres Rohr in G1

Step by step: how to create a manual on ethics and good use of the internet at work

Allowing unlimited access to any website or online service can bring risks, generate problems or compromise team performance and the company's information security.

By Cledison Eduardo Fritzen on Lumiun Blog

New ransomware doesn't ask for money, but justice for Indian farmers

A group of hacktivists decided, in an unprecedented way, to use this type of malware not for their own profit, but rather to show support for the various protests by Indian farmers that have been taking place in the country since November 2020.

By Ramon de Souza in The Hack