Russia hacked former U.K. PM Liz Truss / Samsung users may have been breached / World's second-largest copper producer hacked

Plus: Fodcha DDoS reappears

Inside.com Part of   Network October 31, 2022

Presented by

Russia has likely hacked former U.K. Prime Minister Liz Truss' phone, according to reports. Truss was using her personal phone to communicate with diplomats. More: Liz Truss, the former PM who resigned after only 45 days in office, was reportedly using her private phone to have conversations about sensitive topics such as arms shipments for Ukraine with international diplomats. This event was allegedly tracked by security agencies just a few days before Truss officially took office. These reports were shunned by then-PM Boris Johnson when they were initially commented on by journalists. At this point, the U.K. government has not given details about this attack, declining to comment on this event, but this breach is likely to be related to an earlier leak that happened a few weeks ago. In that leak, 25 government ministers had their numbers made public, including Truss.  The threat actor is believed to have used Pegasus, an infamous spyware created by Israeli company NSO Group.

Hackers could've breached Samsung users due to a Galaxy Store app security flaw. The flaw could have enabled hackers to execute code remotely on their targets' devices. More: The security flaw was found in Galaxy Store version 4.5.32.4. In the Galaxy Store application, there are some deeplinks handled. Deeplink can be called from another application or from a browser. By not checking the deeplink securely, when a user accesses a link from a website containing the deeplink, the attacker can execute JS code in the webview context of the Galaxy Store application. The hackers cause damage to their target by using XSS attacks on otherwise benign and trusted websites. XSS attacks are deployed when an attacker uses a web application to send malicious code. Usually, this attack is deployed through browsers.

A message from SECURITY COMPASS The only secure developer training that is accredited by (ISC)²  Our role-based, language-specific, secure developer training meets developers where they are in their knowledge and learning style to ensure they successfully develop and apply secure coding skills. Go beyond secure coding training. Retain talent, remain competitive, and stay compliant. We offer over 49 courses covering topics including: ● Defending AWS, .NET, Angular, Java, and more ● DevSecOps Fundamentals and DevSecOps for Managers ● Defending Containers, Kubernetes, Docker ● Secure Software Requirements, Design, Testing Explore language-specific, role-based, (ISC)² accredited secure developer training.  Visit our page to browse our curriculum, try a free course, or speak to the team. See our approach

The world's second-largest copper producer, Aurubis, has been hacked by unknown threat actors. The German company had to shut down its systems after the attack. More: The company, based in Hamburg, Germany, is Europe's largest copper producer. According to a statement released by Aurubis, the cyberattack forced the company to shut down its production system. The attack continues to pose problems for the company's production of precious metals, and there is no timeline for when robotic production will resume. Currently, the company's workers are working manually to keep the production process going.  Zoom Out: Copper is an increasingly important metal used, among other things, in renewable energy production, electric vehicles, and energy storage technologies.

Fodcha DDoS has reappeared, as researchers have tracked a new version of the botnet with new capabilities. The botnet can now receive crypto payments as part of the ransom for stopping DDoS attacks. More: According to researchers, the botnet has been receiving upgrades consistently. Its current version is now targeting 1,000 per day compared with 100 per day in April and operates 60,000 active bot nodes per day supported by 42 C2 domains, allowing it to generate up to 1Tbps of destructive traffic. The botnet was last active on Oct. 11, 2022. Fodcha has been used to attack targets in the U.S, China, Canada, Russia, Germany, Netherlands, France, etc. The DDoS reached its peak during its last campaign on Oct. 11, when it targeted 1,300 devices in one day.

Twilio has stated that it was hacked in June by the same threat actor that breached the company again two months later. The hackers used voice phishing as a threat vector. More: The threat actor convinced a Twilio employee to give away their login credentials. The hackers then used those credentials to steal information about specific Twilio users.  Once the company found out about the breach, it removed the access privileges. This operation reportedly lasted for 12 hours. Twilio was only one of the 138 companies targeted in the 0ktopus campaign, a hacking campaign that used a fake landing page for Okta as the first step in the infection chain. This campaign managed to steal 9,931 accounts, a third of which had their credentials stolen through their email.

Quick Hits: This app makes it easy to learn vocab and phrases with lessons, games, videos, podcasts, and more. Plus, for a limited time you can get 55% off.* Researchers have found a number of security flaws that may lead to Juniper Networks equipment being hacked. Out of the five flaws tracked, only one flaw has a CVSS ranking higher than 7.0. 223,000 have had their data stolen from hackers who breached the Australian Clinical Labs. Five malicious  Android apps that target over 200 apps have been tracked. The malicious apps are able to steal financial data by spreading different banking trojans, while the apps are named: Codice Fiscale 2022, My Finances Tracker, File Manager Small Lite, Recover Audio, Images & Videos, and Zetter Authenticator. The U.S. is hosting the 2nd International Counter Ransomware Initiative, a conference where tens of countries will participate and coordinate on how to prepare and react against the increasing number of cyberattacks. Have you been thinking about changing your pup's daily meals for something better? Science-backed Nom Nom offers 50% off a two-week trial specifically for Inside readers.* *This is sponsored content.

Upcoming events at Inside: November 02 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here) November 09 - Synthetic data for more efficient, robust and ethical model development - Live AMA with Yashar Behzadi (CEO and Founder of Synthesis AI)* (Register Here) December 07 - Live AMA with Deividi Silva ( Head of Developer Relations at Gun.io) (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

Security Compass delivers best-practice, role-based, accredited eLearning solutions.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.