CERT-SE:s veckobrev v.36

Ännu en vecka har gått och vi har bland annat läst om det här.

Nyheter i veckan

Cobian RAT – A backdoored RAT - Free RAT builder with a backdoor integrated by the author
https://www.zscaler.com/blogs/research/cobian-rat-backdoored-rat

German election chief urges action to ensure vote software can't be hacked
https://www.reuters.com/article/us-germany-election-cyber/german-election-chief-urges-action-to-ensure-vote-software-cant-be-hacked-idUSKCN1BI26I

DolphinAttack: Inaudible voice commands to speech recognition systems with ultrasound
https://assets.documentcloud.org/documents/3987864/Dolphinattack.pdf

Dragonfly: Western energy sector targeted by sophisticated attack group
https://www.symantec.com/connect/blogs/dragonfly-western-energy-sector-targeted-sophisticated-attack-group

Possible security risk affects 750,000 Estonian ID-cards
http://estonianworld.com/technology/possible-security-risk-affects-750000-estonian-id-cards/

Equifax data breach may affect nearly half the US population
https://www.cnet.com/news/equifax-data-leak-hits-nearly-half-of-the-us-population/

Mobile Bootloaders From Top Manufacturers Found Vulnerable to Persistent Threats
https://thehackernews.com/2017/09/hacking-android-bootloader-unlock.html

Lenovo Faces No Significant Penalty for Security-Destroying Superfish Debacle
https://www.extremetech.com/computing/255086-lenovo-settlement-superfish

xRAT Mobile Malware Emerges
http://www.securityweek.com/xrat-mobile-malware-emerges

Instagram Warns Hack More Widespread Than Expected
https://www.inforisktoday.com/instagram-warns-hack-more-widespread-than-expected-a-10256

EITest: HoeflerText Popups Targeting Google Chrome Users Now Push RAT Malware
https://researchcenter.paloaltonetworks.com/2017/09/unit42-hoeflertext-popups-targeting-google-chrome-users-now-pushing-rat-malware/

Kuriosa på temat "Väck inte döda författare"

About to fulfill my obligation to Terry
https://twitter.com/terryandrob/status/901028525200879616

There goes the browsing history...
https://twitter.com/terryandrob/status/901037198665019392

CERT-SE i veckan

Kritisk sårbarhet i Struts 2