618 - GlobalProtect falso é mais uma vez usado em ataques

Notas do episódio

[Referências do Episódio] Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant - https://unit42.paloaltonetworks.com/global-protect-vpn-spoof-distributes-wikiloader/ Head Mare: adventures of a unicorn in Russia and Belarus - https://securelist.com/head-mare-hacktivists/113555/ DarkCracks, 一个利用被黑GLPI, WORDPRESS站点充当中转的高级恶意载荷&升级框架 - https://blog.xlab.qianxin.com/uncovering_darkcracks_payload_delivery_framework_cn/#%E6%94%BB%E5%87%BB%E7%9B%AE%E6%A0%87 Iran’s Hacker Hierarchy Exposed - https://www.recordedfuture.com/blog/iran-hacker-hierarchy Iranian State-Sponsored Hackers Have Become Access Brokers for Ransomware Gangsca - https://cyble.com/blog/iranian-state-sponsored-hackers-have-become-access-brokers-for-ransomware-gangsca/ Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia