Skip to content
NewA calmer, faster ZeroHour
Ransomwarecritical

Now’s not the time to take our foot off the gas when it comes to fighting disinformation online

Cisco Talos ()6 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-3079
Type Confusion in Google Chromium V8 Engine Exploited in the Wild
8.838%KEVPoC
KEV
CVE-2023-34362
Unauthenticated SQL Injection in Progress MOVEit Transfer
9.8100%KEVRansomwarePoC
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md53e0fb82ed8ea6cd7d1f1bb9dca5f2bdc1b84a08636d9e6f225e1e79bb346c176e0ee2ae1dfec18953a1ce2 MD5: 3e0fb82ed8ea6cd7d1f1bb9dca5f2bdc Typical Filename: PDFShark.exe Claimed Product: PDFShark De
md53e10a74a7613d1cae4b9749d7ec9351540b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG001.exe Claimed Product: N/A Detection
md58cb26e5b687cafb66e65e4fc71ec4d63ac6cfec88b748b8057e958a825224fcc619ed95750acbd1d7a4848 MD5: 8cb26e5b687cafb66e65e4fc71ec4d63 Typical Filename: dattService.exe Claimed Product: Datto Se
md593fefc3e88ffb78abb36365fa5cf857c81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor
md5a087b2e6ec57b08c0d0750c60f96a74ce7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAct.exe Claimed Product: N/A Detection N
md5df11b3105df8d7c70e7b501e210e3cc3de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC001.exe Claimed Product: N/A Detection
sha2565616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1Monito Detection Name: W32.Auto:a8a6d6.in03.Talos SHA 256: 5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG
sha25659f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaaion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC
sha2567c8e1dba5c1b84a08636d9e6f225e1e79bb346c176e0ee2ae1dfec18953a1ce2duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: 7c8e1dba5c1b84a08636d9e6f225e1e79bb346c176e0ee2ae1dfec18953a1ce2 MD5: 3e0fb82ed8ea6cd7d1f1bb9dca5f2bdc Typical Filename: PDF
sha256a8a6d67140ac6cfec88b748b8057e958a825224fcc619ed95750acbd1d7a4848ware files from Talos telemetry over the past week SHA 256: a8a6d67140ac6cfec88b748b8057e958a825224fcc619ed95750acbd1d7a4848 MD5: 8cb26e5b687cafb66e65e4fc71ec4d63 Typical Filename: dat
sha256e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636cFShark Detection Name: Win.Dropper.Razy::95.sbx.tg SHA 256: e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAc
sha256e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934t: N/A Detection Name: Win.Dropper.Coinminer::1201 SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex

From the original article

6 min read at blog.talosintelligence.com

Welcome to this week’s edition of the Threat Source newsletter. In the wake of the 2016 and 2020 presidential elections, it seemed like big tech companies were taking the fight against disinformation seriously. Social media outlets set up new fact-checking procedures and got more aggressive about banning or blocking pages and profiles that spread disinformation around elections.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.