News of the Cyber World

[kyonides]

D-Link Routers Compromised
https://www.cyberscoop.com/d-link-home-r...-networks/
Have you an ethernet connection? Did you buy or lease some D-Link router? Then this news article might be of special interest. It seems that you gotta apply several fixes to prevent hackers from stealing your credentials!
Obviously, that doesn't mean intruders will stop right there. They could even cause Denial of Service attacks against servers. Yes, they can also play with your DNS to route you straight to their sites full of malware. OK, they could also make you feel like an accomplice by uploading malware to any website. Practically they could even impersonate you, steal or directly spend your money, post stuff on social media, etc.

What's funny about this is that the company behind the discovery of such security flaws, Palo Alto, has been questioned for being insecure as well. Just take a look at the article I provided below.

Palo Alto's Very Own Security Flaw
https://www.cyberscoop.com/cyber-command...rks-patch/

Netgear routers are unsafe as well
https://www.cyberscoop.com/netgear-remot...grimm-zdi/
First D-Link and now Netgear joins this nefarious list of companies that are forced to release patched for flaws that could let outsiders steal or bypass your credentials as well.

An specialist even claimed that a hacker could inject javascript code to your web browser to gain such access to your router. So they don't really need to even find your device via a Wi-Fi connection.

Federal agencies recommend blocking Hong Kong-US undersea cable over national security concerns
https://www.cyberscoop.com/team-telecom-...cable-fcc/
I know this sounds extremely crazy but knowing we can't count on Hong Kong as the only democratic oasis in China any longer, it starts making some sense. Besides they already revealed the ownership of the PLCN (the undersea cable connecting Hong Kong and US) is linked to the Chinese company Dr. Peng Telecom & Media Group Co. Ltd., who's supposedly its legal owner, can be manipulated by the Chinese government, and that might not be just a conspiracy theory. We already learned about how China passed that cyber espionage law a couple of years ago...
At the end, Google and Facebook would need to properly control the portions of the cable that connect US with Taiwan and Philippines.

Chrome Extensions Filled with Spyware
https://www.cyberscoop.com/chrome-spywar...y-galcomm/

A sweeping set of surveillance campaigns has hit Google Chrome users, leading to nearly 33 million downloads of malicious software in the last three months.
The researchers believe the unidentified hackers used Chrome extensions and other malicious tools — along with domains issued by a single registrar — to spy on computer users in sectors such as oil and gas, finance and health care.
U.S. government contractors were among those targeted.

Only after another company warned Google about this issue, they finally got rid of 70 malicious extensions from its store. Before they did that, hackers could take screenshots of your favorite apps and steal your credentials. They even dared to add code to the open source browser Chromium!

Now even an Israel based company in charge of keeping domain registries secure has been questioned for its own lack of security measures to prevent ill domain registration requests from ever being approved!

Bad News for Melana and her fellow German forumers!

Hackers target senior executives at German company procuring PPE
https://www.cyberscoop.com/germany-ppe-c...ckers-ibm/

Unknown hackers began their intensive phishing campaign to infiltrate at least one of nine firms. Those companies are related to testing facilities, enterprises focused on vaccine research and some dedicated to manufacture or procure PPE to protect people from viruses.
In essence it seems they wanted to disrupt the German coronavirus related supply chain!
They had targeted an executive of an European bio-pharmaceutical company already.