SS-NEWS-080: Sneaking RATs, and a Bloomberg Terminal for Security

Episode 80 October 03, 2022 00:35:53
SS-NEWS-080: Sneaking RATs, and a Bloomberg Terminal for Security
Security Serengeti
SS-NEWS-080: Sneaking RATs, and a Bloomberg Terminal for Security

Oct 03 2022 | 00:35:53

/

Show Notes

We discuss a new malware-as-a-service offering, bankers dodging regulations by using third party chat, and what would a Bloomberg Terminal for security look like?

Article 1 - Want to sneak a RAT into Windows? Buy Quantum Builder on the dark web
Supporting Article:
Agent Tesla RAT Delivered by Quantum Builder With New TTPs

Article 2 - Ever suspected bankers could just use WhatsApp comms? $1.8b says you're right
Supporting Articles:
15 U.S. Code § 78q–1 - National system for clearance and settlement of securities transactions
SEC Charges 16 Wall Street Firms with Widespread Recordkeeping Failures

Article 3 - When Will Cybersecurity Get Its Bloomberg Terminal?
Supporting Article:
Beginner’s Guide to the Bloomberg Terminal

Article 4 - High-Profile Hacks Show Effectiveness of MFA Fatigue Attacks

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Other Episodes

Episode 142

May 06, 2024 00:45:37
Episode Cover

SS-NEWS-142: GM Sharing Driving Data, Testing Detections

This week, David and I discuss how GM is fraudulently collecting driving data and selling it to insurers, and Anton Chuvakin has another article...

Listen

Episode 147

July 29, 2024 00:49:14
Episode Cover

SS-NEWS-147 - Does Phishing Education need to mature like Fire Drills did?

This week David and I talk about how current phishing tests closely resemble early attempts at fire drills, through the Google Security Blog, and...

Listen

Episode 40

December 19, 2021 00:49:44
Episode Cover

SS-NEWS-40: No Insurance Payout for State Sponsored Attacks

In this episode, we review Lloyd's recent announcement on not covering state sponsored attacks, an article from Anton Chuvakin on SOC technology fails, and...

Listen