July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

Update: 2022-07-08

Description

In this week's review

Microsoft Rolls Back Decision to Block Office Macros By Default 😢
Possible APT29/Ransomware Groups Use of Brute Ratel C4
- When Pentest Tools Go Brutal: Red-Teaming Tool Being Abused by Malicious Actors
- Reversing Malware Also How is APT 29 Successful with This Phishing Technique
Raspberry Robin/QNAPWorm
Cloud Misconfig Exposes 3TB of Sensitive Airport Data in Amazon S3 Bucket
Prevention Takes Priority Over Response

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com

Comments

In Channel

(Replay) HACKERS: How we GET IN and how to STOP US

2023-11-1534:26

11/2023 Cyber Threat Recap: Okta, Octo Temptest, Smishing

2023-11-0115:07

9-16-22 Week in Review: Uber Hacked, Teams Cleartext Tokens, Intermittent Ransomware Encryption

2022-09-1615:44

9-9-22 Week in Review: New EvilProxy Phishing Service and Linux Malware

2022-09-0921:37

9-2-22 Week in Review: Okta Phishing, BEC Analysis, LNK Attacks

2022-09-0227:17

8-26-22 Week in Review: LastPass Breach, Office 365 Abuse, DevSecOps

2022-08-2631:50

8-19-22 Week in Review: Password Snooping, Supply Chain, Cl0p Ransomware

2022-08-1922:32

8-12-22 Week in Review: BumbleBee Malware & High Profile Phishing Attacks

2022-08-1223:31

8-5-22 Week in Review: Evasive Phishing, Tricky Malware and Initial Access Brokers

2022-08-0524:56

July 29th Week in Review: Intergalactic Planetary Phishing, ISOs & LNKs, Ransomware & Extortion

2022-07-2931:45

July 22nd 2022 CTP Week in Review: RIP Macros, Bad Luck BlackCat, Mr. Eagle

2022-07-2224:53

July 15th 2022 CTP Week in Review: Macros, Coin Miners, Rustomware, Cookie Phishing

2022-07-1528:35

July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

2022-07-0826:53

July 1st 2022 CTP Week in Review: LNK Malware - LockBit 3.0 Bug Bounty - PwnKit Exploitation In The Wild

2022-07-0112:34

June 24th 2022 CTP Week In Review: DFSCoerce, Ransomware in OneDrive & PowerShell Forever

2022-06-2815:30

June 17th 2022 CTP Week In Review: BlackCat - LockBit 2.0 - Saitama DNS Tunneling - Exposed Travis CI Logs

2022-06-1728:39

June 10th 2022 CTP Week in Review: Dogwalk - Qakbot - Follina - ESXi Ransomware

2022-06-1023:15

June 3rd 2022 – Cyber Threat Perspective – Week in Review

2022-06-0328:27

May 27th 2022 – Cyber Threat Perspective – Week in Review

2022-05-2733:02

May 20th, 2022 - Cyber Threat Perspective - Week in Review

2022-05-2021:34

00:00

July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

#box-pro-ellipsis-175721782411614{-webkit-line-clamp:2;}July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

In this week's review

July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

SecurIT360

July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response