30
Exploring the Latest Mispadu Stealer Variant
Unit 42 found a new Mispadu infostealer variant targeting Mexican users via malicious .url files exploiting the SmartScreen CVE-2023-36025 bypass.
Unit 42 discovered a new variant of Mispadu Stealer, a Delphi-based banking trojan first reported in 2019, found while hunting for the Windows SmartScreen bypass CVE-2023-36025. The campaign uses crafted .url files referencing UNC network-share paths with an HTTP port (@80) that forces payload retrieval over WebDAV via rundll32.exe, avoiding SmartScreen warnings. Analyzed samples (~4 KB, compiled 2023-11-12) predate the CVE publication, and ZIP payloads were likely distributed as email attachments, primarily targeting users in Mexico.
45
57
30
42
60
57
30
Operation Falcon II: Unit 42 Helps INTERPOL Identify Nigerian Business Email Compromise Ring Members
30
55
60
57
55
42
60
60
35
60
42
57
55
42
60
60
30
‘We Did Not Invite You.’ Citizens Rage at Town Hall Over Proposed Nuclear AI Data Center
University of Michigan and Los Alamos faced resident backlash over a proposed $1.2 billion hyperscale data center in Ypsilanti Township, Michigan.
The University of Michigan partnered with Los Alamos National Laboratory on a proposed $1.2 billion, 220,000-square-foot hyperscale data center in Ypsilanti Township. Residents at a Wednesday town hall raised concerns about electricity costs, water usage, noise, and the facility's role in nuclear weapons research. Officials noted the project is far smaller than the nearby $56 billion, 1.4-gigawatt OpenAI data center in Saline Township. Los Alamos said no plutonium or weapons production would occur on site, though the facility would support nuclear stockpile modeling.
22
45
30
30
Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022
60
57
60
Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)
60
30
60
30
60
47
60
50