Careful of malware that’s been spreading from social media

https://cyberguy.com/security/troubling-malware-threat-spreading-on-facebook-and-twitter/

In the wake of security products flagging 3CX software where users thought this to be false positives, Microsoft Defender (unrelated) falsely flags legitimate URLs. Fix has been released.

https://www.theregister.com/2023/03/29/microsoft_defender_url_alerts/

FBI investigating a hacking incident involving its computer network to the New York field office. The computer system was used to investigate child sexual abuse material.

https://www.govinfosecurity.com/fbi-investigates-hacking-incident-inside-its-systems-a-21231

Geek Squad email scams are back

They’re back, so the effort has to bear some fruit for someone. There’s a lot of good advice out there about them so I won’t rehash them all. It’s best to know that they’re fake. Just delete them and move on. I would think that all age groups have been a victim of this kind of fraud, but the elderly may be especially susceptible. Educate your parents, grandparents, aunts, uncles and their friends.

Some recent articles about them:

https://www.makeuseof.com/geek-squad-email-scam/

What is Geek Squad Email Scam and How to Avoid It?

If you’ve fallen prey to these, don’t hide that. Tell someone. Report it to your local police and/or file a report online with the FTC here: https://reportfraud.ftc.gov/#/

It might also be a good time to revisit these great tips concerning Online Privacy and Security

https://consumer.ftc.gov/identity-theft-and-online-security/online-privacy-and-security

Microsoft reversal: VBA macros will not be blocked by default after-all

https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-back-decision-to-block-office-macros-by-default/

YouTube used to distribute malware and steal data

https://blog.cyble.com/2022/06/30/infostealer/

Free (Anti-virus) doesn’t mean that it won’t cost you. Flaws announced earlier in May, 2022 involving Avast and AVG.

https://www.sentinelone.com/labs/vulnerabilities-in-avast-and-avg-put-millions-at-risk/

MSDT RCE vulnerability is actively being exploited in the wild. CISA advises admins to disable the MSDT protocol

https://www.bleepingcomputer.com/news/security/windows-msdt-zero-day-now-exploited-by-chinese-apt-hackers/

Red Canary finds malware on USB drives. (Do people really still share USB drives?)

https://www.techradar.com/news/this-dangerous-new-malware-is-attacking-windows-devices-via-infected-usb-drives

FCC adds Kaspersky to the “Covered List”; citing unacceptable risks to U.S. national security

https://www.bleepingcomputer.com/news/security/us-says-kaspersky-poses-unacceptable-risk-to-national-security/