Phishing & Malware Italia. Il report della scorsa settimana del CERT-AgID

In questa settimana, il #CERT-#AgID ha riscontrato ed analizzato, nello scenario #Italiano di suo riferimento, un totale di 39 campagne malevole, di cui 31 con obiettivi #Italiani e 8 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 228 indicatori di compromissione (#IOC) individuati.

#redhotcyber #online #it #web #ai #hacking #privacy #cybersecurity #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

https://www.redhotcyber.com/post/phishing-malware-italia-il-report-della-scorsa-settimana-del-cert-agid/

https://github.com/WithSecureLabs/iocs/tree/master/DUCKTAIL -
Ducktails is a threat actor that targets facebook business profiles to deliver malware #ioc #malware #blueteam #defense

#Tunisia: Mehrez Boussayene, head of the National Olympic Committee is among 8 people proposed to become #IOC members after the IOC Board meeting held Friday; they will be formally voted at the 141st IOC session next October 15 to 17 in #Mumbai, #India. http://www.tap.info.tn/en/Portal-Sports/16605350-cnot-s-mehrez
Source: @TapNewsAgency

https://nitter.privacydev.net/TapNewsAgency/status/1700201532795355250#m

French President Emmanuel Macron said that no Russian flags will be allowed at the Paris 2024 Olympics.

“Obviously there cannot be a Russian flag at the Paris Games. I think there’s consensus on that”.

The Russian flag has “no place” at the 2024 Olympics, at a time when Russia is “committing war crimes, when it’s deporting children”.

Whether Russian athletes will be allowed to participate is a decision for the IOC.

https://www.politico.eu/article/emmanuel-macron-russia-flag-paris-2024-olympics/

#France #Paris #Olympics #Russia #WarInUkraine #IOC

#Sports #Olympics

Some of these have been booted recently and want back in ....

Via Front Office Sports 🤖 @FOS

Next week, the #IOC will vote on including 9 new sports in the 2028 Olympics in Los Angeles:

• Lacrosse
• Flag football
• Baseball-Softball
• Karate
• Kickboxing
• Breakdancing
• Squash
• Cricket
• Motorsport

russians and belarusians will not be allowed to participate in the #AsianGames, which start September 23 in hangzhou, china.

The decision, the OCA added without elaborating, was taken by the #IOC who, in turn, said the idea was ‘not feasible due to technical reasons’.

Read more here🔗 https://indianexpress.com/article/sports/sport-others/no-russian-belarusian-athletes-at-asian-games-as-international-olympic-committee-denies-them-approval-8919842/

#Ukraine 🇺🇦 #SlavaUkraine #RussiaIsATerroristState
#СлаваУкраїні! #StandWithUkraine

„Solange das Internationale Olympische Komitee (#IOC) an seinen Regeln und Ausschreibungskriterien festhält und sich nicht mit dem Thema #Korruption beschäftigt, ist es nicht möglich, eine Austragung so zu machen, dass die Stadt #Berlin am Ende davon profitiert.“ (Klara Schedlich, sportpolitische Sprecherin der Berliner Grünen-Fraktion) https://www.tagesspiegel.de/berlin/zu-viele-punkte-die-dagegen-sprechen-grunen-fraktion-sieht-olympische-spiele-in-berlin-kritisch-10372720.html #KeineSpiele #NOlympia #NolympiaBerlin #Olympia2036

Been seeing a lot more very sophisticated MocuSign (#docusign) #phishing emails this week. I have been updating my #IOC list on my #GitHub. Fraudsters are doing a much better job on their contents, even using legitimate non-phishing sites as proxy to redirect to the actual #phishing site so they get by email scanners - but they haven't yet gotten past my #endpoint protections (so far, so good).

Keep up-to-date on my findings on my #IOCs #Repository so you can add them to your platforms as well. I update them multiple times per week: https://github.com/Geekmaster-General/IOCs/tree/main

Campagna di Phishing in corso ai danni di clienti #Aruba (espone anche logo Legalmail di #Infocert) con lo scopo di sottrarre credenziali di Posta Elettronica Certificata #PEC

✉️ Oggetto: ArubaPEC Notification: Avviso scadenza password 31/08/2023

💣 #IoC 👇

https:// arubapec . weebly .com/

ℹ️ La stessa pagina di phishing risulta ospitata anche su altri servizi

⚔️ Azioni di contrasto:

➡️ diffusione di #IoC alle PA e Gestori PEC
➡️ segnalazione al servizio abuse di Weebly

„A patched NetScaler can still contain a backdoor. It is recommended to perform an Indicator of Compromise check on your NetScalers, regardless of when the patch was applied.“
◦ Fox-IT https://github.com/fox-it/citrix-netscaler-triage
◦ Mandiant https://github.com/mandiant/citrix-ioc-scanner-cve-2023-3519/

#infosec #citrix #ioc #foxit #mandiant #backdoor

das nur die #Ukraine wg. dem Angriffskrieg durch #Russland damit droht, bei #Olympia nicht anzutreten, ist leider nur eine sehr schlappe Drohung. DARÜBER wird das #IOC wahrscheinlich keine bösen Träume bekommen (leider).

Wie wäre es, wenn die USA und die Länder Europas Solidarität beweisen und ebenfalls einen Boykott androhen würden? Man könnte zumindest ein "Während der Spiele haben die Waffen zu ruhen!" auf diese Weise erzwingen.

Nachhaltigkeits-PR hin oder her: Am Ende werden das #IOC und Putin-Freund Thomas Bach den Winterspielen ihren Stempel aufdrücken.

Von @jan_jirat

#WOZtäglich #Winterspiele #OlympischeSpiele #Schweiz

https://www.woz.ch/taeglich/2023/08/15/winterolympia-fieber-im-hochsommer?mtm_campaign=mstdn-2332

There are some discussions about expiring indicators, maybe our blog post (2019) and training material (2022) about the feature in MISP might be of interest for some of you.

🔗 https://www.misp-project.org/2019/09/12/Decaying-Of-Indicators.html/

🏫 https://www.misp-project.org/misp-training/handout/a.5-decaying-indicators_handout.pdf

#ThreatIntel #ioc #infosec

Russian & Belarusian Athletes Banned from Prague Tennis Tournament https://politicaliq.com/2023/07/28/russian-belarusian-players-banned-from-prague-tennis-tournament/ #WTA #Prague #PragueOpen #Tennis #Paris2024 #Olympics #IOC #Russia #Belarus #Ukraine #UkraineRussiaWar #politicaliq #news #politics

Thomas Bach und #Putin - passt doch. Was soll das für eine Olympiade werden? Und die russische Sportlerin ist ein Abbild der russischen Gesellschaft. Völlig krank, stimmt mich dahingehend noch trauriger. #IOC

The #ioc is at agaib. Just ban russian athletes. Stop with this stupid federation of Russian athletes bs

#Estonia, #Latvia and #Lithuania issued a statement asking the #IOC not to allow russians and belarusians to participate in the 2024 #Olympics in Paris.

According to Estonian Foreign Minister Margus Tsahkna, even “neutral” #athletes feature in russian pro-war propaganda.

Read more here🔗 https://www.weareukraine.info/baltic-states-urge-ioc-not-to-allow-russians-and-belarusians-to-the-olympic-games/

#Ukraine 🇺🇦 #SlavaUkraine #RussiaIsATerroristState
#СлаваУкраїні! #StandWithUkraine

Eklat bei Fecht-WM:Disqualifikation für Ukrainerin Charlan https://wp.me/p36Ae-ZEv Die Ukrainerin Charlan will ihre russische Gegnerin Smirnowa bezwingen – auf eigene Art.Das hat Konsequenzen.Die Ukrainerin sieht die schwarze Karte. #IOC #Fechten #RU #UA

Ukrainian fencer Kharlan disqualified in 'shameful decision'

The #IOC and the #FIE for permitting Russians and Belarusians to compete again, albeit as neutral athletes. Fencing was the first sport to open their doors in March.

#MOG
https://www.france24.com/en/live-news/20230727-kharlan-lands-first-blow-for-ukrainian-athletes-after-change-of-policy

Spent a few hours updating my #IOC collection on my #GitHub repositories. Added a long list of IOCs from #DocuSign #PhishingEmails here: https://github.com/Geekmaster-General/IOCs/blob/main/DocuSign%20IOCs

Also added a new section called "Phishing Email IOCs" which you can find here: https://github.com/Geekmaster-General/IOCs/blob/main/Phishing%20Email%20IOCs

This covers the infamous "Password Reset", "Microsoft Teams File", "Storage if Full", "Messages on Hold", and "SharePoint Document" phishing emails we all see from time to time.

#cyberdefense #cybersecurity #securitymanagement