Sep 01 2023
Welcome to Gone Phishing, your daily cybersecurity newsletter that wishes judges would throw the book at cyber criminals like they did the nutters who stormed the U.S Capitol ???? #17years #ProudBoys #Jan6
It’s Friday, folks, which can only mean one thing… It’s time for our weekly segment!!!
It goes by many names. Patch of the Week, Tweak of the week. Okay, that’s it.
Congrats, the cybercriminals are no match… for your patch! Check out these freshly hatched patches!! ????????????
Netgear, the network hardware giant, has just unveiled crucial updates to address two high-severity vulnerabilities ????️ affecting their router model and network management software. Here's the scoop:
1️⃣ CVE-2023-41183: This vulnerability allows hackers to access Netgear’s Orbi 760 routers without authentication. ???? The issue lies in the Simple Object Access Protocol (SOAP) API settings, lacking proper identity confirmation. It scores 8.8 on the CVSS scale, but don't fret – Netgear has already released a patch! ???? They strongly advise downloading the latest firmware ASAP for your safety.
2️⃣ CVE-2023-41182: This vulnerability affects Netgear’s network management system ProSAFE. While it requires authentication, crafty hackers can bypass it to run their own code. It has a CVSS score of 7.2, but, guess what? Netgear patched it in the latest ProSAFE version! ????
The good news? No reports of these vulnerabilities being exploited in the wild. Phew! ????
Netgear, known for its top-notch networking equipment, wants you to stay secure. So, heed their advice and update your devices pronto! ????
Fun fact: As of 2023, Netgear boasts over 800,000 paid subscribers! ????
Remember, staying updated keeps the cyber baddies at bay. ????♂️???? Stay safe, techies! ✨
Now, on to today’s hottest cybersecurity stories:
???? Forever 21 breach leaks the personal details of 1/2 million plus customers ????
????️ National SAFETY Council leaks 1000s of logins, passwords from NASA, Tesla ????
???? Introducing SapphireStealer malware: a ransomware & espionage extravaganza ????
On August 29, 2023, Forever 21 reported a significant data breach to the Attorney General of Maine, affecting a staggering 539,000 individuals. ???? This breach exposed sensitive information, including names and Social Security numbers, to unauthorised parties. ????
If you've received a breach notification from Forever 21, it's crucial to grasp the risks and take action. Cybercriminals often target Social Security numbers for identity theft and fraud. Consult a data breach lawyer to explore how to protect yourself and your legal options following this incident. Check out our recent article for more details. ????️
???? What Caused the Breach?
The breach came to light on August 4, 2023, when Forever 21 identified a cybersecurity concern. An investigation revealed unauthorised access to confidential data from January 5, 2023, to March 21, 2023. ????
Forever 21 has notified affected individuals with data breach letters, outlining the compromised information. If you're unsure about what data was exposed, these letters should provide clarity. ????
ℹ️ About Forever 21
Founded in 1984, Forever 21 is a prominent fashion retailer headquartered in Los Angeles, California. With 540+ stores in the US and abroad, it generates approximately $6.9 billion in annual revenue and employs over 32,800 people. ????️
Stay vigilant and protect your identity! ????
I came across ZZZ money club during the crypto market bull run when everyone’s a winner, even during the bear market this discord group has been amazing at giving information on projects and ways to make passive income in various ways.
The group is very active and everyone in this private discord group is very chatty and helpful.
Its run by Yourfriendandy and Decadeinvestor, you can find them here on YouTube, both top guys with great content.
If you are interested in joining the group you can through the link below.
In an ironic twist of fate, the National Safety Council (NSC) accidentally spilled the beans on nearly 10,000 emails and passwords of their members, unveiling a whopping 2000 companies, including big shots like NASA and Tesla! ????
???? What Went Down?
The NSC, a US non-profit dedicated to safety training, left their website vulnerable for five whole months. ???? Cybernews investigators uncovered public access to directories, laying bare thousands of credentials.
???? Who's Affected?
The fallout reaches far and wide, touching major players across industries:
???? Fossil Fuel Giants: Shell, BP, Exxon, Chevron
???? Electronics Manufacturers: Siemens, Intel, HP, Dell, IBM, AMD
✈️ Aerospace Companies: Boeing, FAA
???? Pharmaceutical Companies: Pfizer, Eli Lilly
???? Car Manufacturers: Ford, Toyota, Volkswagen, Tesla
????️ Government Entities: DOJ, US Navy, FBI, NASA, OSHA
???? Internet Service Providers: Verizon, ATT, Comcast
???? Others: Amazon, Home Depot, Coca-Cola, UPS
These firms likely used NSC for training or events, but their info was exposed! ????
????️ The Risks?
This breach endangered not just NSC but also the companies they served. Leaked data could fuel "credential stuffing" attacks, infiltrating corporate networks and potentially unleashing ransomware or data theft! ????
???? How It Happened
The flaw was discovered on March 7th when the Cybernews team spotted an NSC subdomain used for development. It publicly showcased web directories, even a database backup with user emails and hashed passwords! ???? The leak existed for five months before discovery.
???? Take Action!
With your email potentially out there, stay vigilant! Expect a rise in spam and phishing emails. Verify emails externally, and be cautious with links and attachments. ????
???????? Learn from the Mistake
Developers: keep dev environments separate, and never host user data publicly. Basic security, folks! ????️
Stay safe online, folks! ????
????️ Extra, Extra! Read all about it! ????️
Each fortnite, we carefully select three hot newsletters to show you. Reputation is everything, so any links we share come from personal recommendation or carefully researched businesses at the time of posting. Enjoy!
????The Crypto Nutshell: Crypto News & Expert Predictions all in a nutshell ????
????The Breakthrough: Receive one idea, one question, and one exercise each week that could spark your next breakthrough.
✈️ViaTravelers: Get exclusive travel tips, news, and insider deals right in your inbox.
Let us know what you think!
A new player in the cybercrime arena, SapphireStealer, is making waves. This open-source .NET-based malware is causing quite a stir, and here's what you need to know. ????
???? The Threat Landscape
SapphireStealer is an information-stealing malware that's all the rage among various entities. It's a game-changer, capable of snatching sensitive info, especially corporate credentials. Cyber baddies can then use this stolen data for espionage, ransomware attacks, or other nefarious deeds. ????
???? The Cybercrime Ecosystem
SapphireStealer isn't alone in the world of cybercrime. A whole ecosystem has emerged, allowing both money-driven and nation-state actors to exploit stealer malware services. These tools not only bolster the cybercrime-as-a-service (CaaS) model but also provide opportunities to monetize stolen data through ransomware and other malicious activities. ????
???? Stealing the Goods
SapphireStealer works like other sneaky stealer malware, snatching host info, browser data, files, screenshots, and then packaging it into a ZIP file sent via email. Crafty, right? ????
???? Source Code Free-for-All
What makes SapphireStealer particularly troubling is that its source code was released for free late last year. This means miscreants can tinker with it, making it tough to detect. They've even added new data exfiltration methods using Discord and Telegram. ????
???? Evolving Threat
This malware isn't static; it's evolving. Multiple variants are out there in the wild, getting better with time. ???? There’s the likes FUD-Loader and Agniane Stealer to contend with too. But those are stories for another day lol…
That’s all for this week, folks. Have a good weekend and see you on Monday. Peace out ✌️
So long and thanks for reading all the phish!
