In this week’s review:
- Microsoft DOES plan to work on blocking internet macros by default in Office, their pause is apparently temporary
- The DFIR Report – SELECT XMRig FROM SQLServer
- Hive ransomware gets upgrades in Rust
- From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud
If you’re on to go, listen here or on your favorite podcast app: https://cyberthreatperspective.buzzsprout.com/1731753/10968278-july-15th-2022-ctp-week-in-review-macros-coin-miners-rustomware-cookie-phishing
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com