PoetRAT Resurfaces in Attacks in Azerbaijan Amid Escalating Conflict

Spear-phishing attacks targeting VIPs and others show key malware changes and are likely linked to the current conflict with Armenia. Source: Threadpost

IRS COVID-19 Relief Payment Deadlines Anchor Convincing Phish

The upcoming deadlines for applying for coronavirus relief are the lure for a phish that gets around email security gateways by using a legitimate SharePoint page for data-harvesting. Source: Threadpost

Comcast TV Remote Hack Opens Homes to Snooping

Researchers disclosed the 'WarezTheRemote' attack, affecting Comcast's XR11 voice remote control. Source: Threadpost

Grindr’s Bug Bounty Pledge Doesn’t Translate to Security

At SAS@Home, Luta Security CEO Katie Moussouris stressed that bug bounty programs aren't a 'silver bullet' for security teams. Source: Threadpost

Male Chastity Device Comes with Massive Security Flaws

Smart sex toy vulnerable to hacks, researchers say -- which could expose users’ most sensitive bits (of data) to cybercriminals. Source: Threadpost

Boom! Mobile Customer Data Lost to Fullz House/Magecart Attack

The Magecart spinoff group targeted the wireless service provider in an odd choice of victim. Source: Threadpost

Microsoft Zerologon Flaw Under Attack By Iranian Nation-State Actors

Microsoft warns that the MERCURY APT has been actively exploiting CVE-2020-1472 in campaigns for the past two weeks. Source: Threadpost

COVID-19 Clinical Trials Slowed After Ransomware Attack

The attack on eResearchTechnology potentially slowed down coronavirus research worldwide, and researchers suggest a nation-state actor could be behind the incident. Source: Threadpost

APT Attack Injects Malware into Windows Error Reporting

The fileless attack uses a phishing campaign that lures victims with information about a worker’s compensation claim. Source: Threadpost

Unpatched Apple T2 Chip Flaw Plagues Macs

A researcher claims that the issue can be exploited by attackers in order to gain root access. Source: Threadpost