615 - Irã: Operações de contrainteligência do APT42 e novo backdoor do APT33

Notas do episódio

[Referências do Episódio] I Spy With My Little Eye: Uncovering an Iranian Counterintelligence Operation - https://cloud.google.com/blog/topics/threat-intelligence/uncovering-iranian-counterintelligence-operation/ Peach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations - https://www.microsoft.com/en-us/security/blog/2024/08/28/peach-sandstorm-deploys-new-custom-tickler-malware-in-long-running-intelligence-gathering-operations/ The vulnerabilities we uncovered by fuzzing µC/OS protocol stacks - https://blog.talosintelligence.com/fuzzing-uc-os-protocol-stacks/ BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks - https://blog.talosintelligence.com/blackbyte-blends-tried-and-true-tradecraft-with-newly-disclosed-vulnerabilities-to-support-ongoing-attacks/ VMSA-2024-0013:VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087) - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505 Analysis of two arbitrary code execution vulnerabilities affecting WPS Office - https://www.welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office/ Beware the Unpatchable: Corona Mirai Botnet Spreads via Zero-Day - https://www.akamai.com/blog/security-research/2024/aug/2024-corona-mirai-botnet-infects-zero-day-sirt Rocinante: The trojan horse that wanted to fly - https://www.threatfabric.com/blogs/the-trojan-horse-that-wanted-to-fly-rocinante Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) - https://www.fortra.com/security/advisories/product-security/fi-2024-011 Kursk Offensive Unveiled: Ukraine’s Strategic Planning and Cyber-Kinetic Convergence - https://cyble.com/blog/kursk-offensive-unveiled-ukraines-strategic-planning-and-cyber-kinetic-convergence/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia