Cool WebEx idea

https://www.scmagazine.com/home/security-news/cybercrime/phishing-emails-spoof-webex-invites-abuse-cisco-open-redirect/

https://malware.wikia.org/wiki/Warzone

https://hybrid-analysis.com/sample/4ff1ec1b7f9f19ee38e17fa499fcf7270f0de35f394bfcef39286c924268de48?environmentId=120

Wyoming Hospital Disrupted by Ransomware

https://www.securityweek.com/wyoming-hospitals-services-disrupted-ransomware

Clearly this is different than an ordinary trespassing case.

New Ruling in Mar-a-Lago Intruder Case Raises Question of Chinese Espionage

Georgia's turn

Ransomware Hits Georgia Courts As Municipal Attacks Spread

https://www.wired.com/story/ransomware-hits-georgia-courts-municipal-attacks-spread

Vendor crapware strikes again

Keylogger Uncovered On Hundreds Of HP PCs https://packetstormsecurity.com/news/view/28435/Keylogger-Uncovered-On-Hundreds-Of-HP-PCs.html

Why I never go with a factory build of a PC. All that other $h1t they put on those machines is worthless anyway.

Tango down for Kelihos

How the FBI Took Down Russia’s Spam King—And His Massive Botnet https://www.wired.com/2017/04/fbi-took-russias-spam-king-massive-botnet/

Meet NSO Groul

The New Big Player In The Government Spyware Business

https://motherboard.vice.com/en_us/article/nso-group-new-big-player-in-government-spyware

Drive goes on

Dridex wielding duo sent down by NCA - SC Magazine UK http://www.scmagazineuk.com/dridex-wielding-duo-sent-down-by-nca/article/548173/

Blocking bad debit cards

Indian Bank Blocks 600,000 Debit Cards After ATM Malware Incident http://news.softpedia.com/news/indian-bank-blocks-600-000-debit-cards-after-atm-malware-incident-509458.shtml

Old hospital threats renewed

http://www.darkreading.com/vulnerabilities---threats/attackers-wrapping-new-tools-in-old-malware-to-target-medical-devices/d/d-id/1326075

Too easy a target

http://mobile.nytimes.com/2016/05/27/business/dealbook/north-korea-linked-to-digital-thefts-from-global-banks.html

Warning: paywall

It seems too easy to blame these on north Korea. I get it that they have motive and desire, but considering their poor operational security it would not be too far fetched to think someone is framing things to look like them.

Hospital pays ransom

http://www.chicagotribune.com/news/nationworld/ct-california-hospital-ransom-hackers-20160217-story.html

Java 0day

http://www.infosecurity-magazine.com/news/first-java-zero-day-two-years-pawn/

Gunpoweder malware

http://www.infosecurity-magazine.com/news/explosive-gunpoder-malware-evades/

A new way to hide for malware

http://www.infosecurity-magazine.com/news/stegoloader-malware-hides-in/

Shellshocked

I have a running list of IPs that are either scanning for the shellshock vulnerability, or are the CnC servers that the malware tries to communicate back with.

http://pastebin.com/QLmEMpz5

More java woes.......

Malware Intelligence Lab from FireEye - Research & Analysis of Zero-Day & Advanced Targeted Threats:YAJ0: Yet Another Java Zero-Day

More java woes....

Zero-Day Java Exploit Debuts in Crimeware

Twitter spreading new malware

I am sure it is not really new and just a variation on something that already exists, but it looks as if twitter is spreading junk again.

Outbreak: Blackhole malware attack spreading on Twitter using "It's you on photo?" disguise

Holy Crap...... Android Exploits.......

So I received the link to this article from a guy i work with, and this scared the living *&^% out of me. Basically any app that asks for "Internet permissions" on your HTC phone, can basically grab whatever it wants from the logging application that HTC included in their android phones.

immediately right after this, a co-worker responds with this link about Trojan'ed QR codes.Then someone added this link tot he email thread started, and .......

mobile security is still in its infancy, but Google and the Mobile device manufacturers do not need to take us back to the security levels of pre-2000.

A lock screen timing out, and you can circumvent the password? That is just a little short of ridiculous.