New Flagpro malware linked to Chinese state-backed hackers

 The cyber espionage group APT (Advanced Persistent Threat) Blackwell has been targeting Japanese companies with a new type of malware that researchers call "Flag pro". Second level malware and run it.  Breaching corporate networks The chain of infection begins with a phishing e-mail that was developed for the target organization and pretends to be a message from a trusted partner.  The e-mail contains a password-protected ZIP or RAR attachment with a Microsoft Excel file [.XLSM] linked to a malicious macro. Running this code creates an executable file in the Flag pro home directory.  When it first runs, Flagpro connects to the C2 server over HTTP and sends the system identification details obtained by executing hard-coded operating system commands.  In response, the C2 can send additional commands or a second-level payload that Flag pro can execute.  An example of a sent command Source: NTT Security Communication between the two is base64 encoded, and there is also a configurable delay between connections to avoid creating an identifiable operating model. Communication between Flagpro and the C2 Source: NTT Security  Flagpro has been used against Japanese companies for more than a year, at the latest since October 2020, according to a report by NTT Security.  The most recent samples the researchers were able to obtain are from July 2021. The target companies are from a variety of industries, including defense, media and communications technology.  Flagpro v2.0 At some point in their analysis, NTT researchers noticed a new version of Flag pro that can automatically close relevant dialog boxes to make external connections that could reveal their presence to the victim.  "In the Flag pro v1.0 implementation, if a dialog box titled 'Windows セ キ ュ リ テ ィ' appears when Flagpro is accessing an external site, Flagpro will automatically click the OK button to close the dialog box" explains NTT Security report. “This handling also works if the dialog is written in Chinese or English  indicates destinations are in Japan, Taiwan, and English-speaking countries. Inserted code serving as obfuscation in Flagpro v2.0 Source: NTT Security  Blackwell APT is a lesser known player discovered by Trendier researchers in the summer of 2017 and has partnered with China. His typical targets are in Taiwan, although he has occasionally targeted companies in Japan and Hong Kong to steal technology.  In February  2021, a report from Unit 42 linked  Blackwell to Waterbear Flag pro, another cyber espionage group believed to have the backing of the Chinese government like Apt, Black tech, Knowledge and Refinement to adapt their tools to new reports like this one, Flag pro is likely to be modified for more stealth use. As the NTT report concludes, “Recently they (Blackwell) started using another new malware called Selfsame Loader and Spider RAT. “That means they are actively developing new malware. Defenders should be aware of the new indicators of exposure to new malware and follow all security best practices to maintain a strong defense against sophisticated threats like Blackwell. Source: Bleeping Computer
https://bit.ly/3EFy2ky

Watch out for ‘child in need’ Whatsapp scams as parents get duped out of £50,000

 Another WhatsApp scam is circulating, this time aimed at parents. WhatsApp scammers pretend to be desperate children who need money right away.  People in the UK have reportedly been defrauded of nearly £ 50,000 for this type of scam. 25 cases of fraud were reported between August and October, with victims losing pounds 48,356.  A Bedford mom shared her WhatsApp exchange with a Bedford Facebook group to warn others. "Hello mom, it's me. I have a new number, you can delete the old one, ”read the scammer's input text.  Toni Parker, 53, thought her son had dropped his phone down the toilet and had a new phone number (Picture: Caters News) When the woman asked who the unknown messenger was, they replied: “Your oldest and sweetest son xx. The scammer then stated that he had  a new phone and was "transferring everything", claiming that his banking app had banned him for 48 hours.  “Very annoying because there is nothing I can do  about it. Can you possibly pay  me and I will get it back to you asap? I'm sorry to bother you with this, '' read the scammer's text message. However, instead of sending the money immediately, the woman called her daughter, who confirmed that she was not sending the messages. When the woman realized she was being attacked by a conspiratorial impostor, she immediately warned others about the deception.  This is not the first time such a tactic has been used to commit fraud on WhatsApp. In August, a nurse was cheated of £ 2,500 after a scammer impersonated her son. In September, WhatsApp users were warned of the scam that could see criminals steal thousands of them.  'WhatsApp protects our users' personal messages with end-to-end encryption, but we want to remind people that we all have one.' We advise all users never to share their six-digit PIN code with anyone, not even with friends or family, and we recommend  all users configure two-step verification for added security.
https://bit.ly/3eAzfPy

Omicron symptoms: how they differ from Delta, the flu and a cold, and how quickly they’ll show up

  Image Credit:CIPhotos via Getty Images With the Omicron variant of Covid, it extends along the city and abroad, many people felt this week as the hope that their end of the pandemic had been plagued. Omicron symptoms can mimic the common cold Although experts say that the widely recognized COVID-19 symptoms, coughing, fever or taste of smell or taste are still indicators for a possible infection, the researchers have found that the symptoms of Omicron can also be similar to those of a cold similarities. The symptoms of the Delta variant were also compared to those of a cold, but some doctors said the cases of Omicron seen so far were particularly mild. A US study of around 750,000 people recently found that the five most common symptoms for both the Delta and Omicron variants currently are runny nose, headache, fatigue, sneezing, and sore throat. However, in many people, Omicron also causes atypical symptoms that were not seen with previous variants. In a popular TikTok video this weekend, people currently suffering from the Omicron variant weighed down on their unusual symptoms, including nausea, less back pain, muscle pain, and even eye pain. Omicron appears to be more contagious with symptoms that show up faster, but questions about severity remain While coughs, headaches, and fever manifest themselves after four to five days of infection with older COVID strains, the incubation time of Omicron can be even shorter. Data on the latest variant of COVID, first spotted in Botswana and South Africa in mid-November, is still limited, but a recent study in Norway suggests an average three-day window between exposure to the Omicron variant and symptoms, which means that Omicron could spread faster, reports Jessica Mathews of Fortune. Preliminary studies of the Omicron variant have shown that infections may be less severe than the Delta variant. However, it spreads faster. Last week, the World Health Organization announced that Omicron is spreading faster than any other strain before and that the variant is likely to be found in most countries, even if it has not yet been detected. An analysis published last week by South African researchers found that the risk of hospitalization among adults with COVID19 was 29% lower in people with the Omicron variant compared to the first wave of infections in 2020, the fastest increase since May last year . Another study from Imperial College London found that the infection in the Omicron cases analyzed was no less severe than in the Delta variant. Johnson and Johnson, Sputnik, and Sinopharm vaccines have also proven largely ineffective at protecting against Omicron, as studies have shown, and due to the large number of mutations in the variant, which health experts say can be significantly resistant to Pfizer and Moderna vaccines as well. U.S. cities should expect a winter surge in cases Experts say COVID infections experience a "winter surge" even without Omicron. There are currently an average of 83,000 new cases of COVID in the US every day, even with 61% of the population being vaccinated. On Friday, the seven-day national average of new daily cases topped 197,000, a 65% increase over the past 14 days, the New York Times reported. Deaths also increased by 3% during this period. The highest national average of daily falls was set in January 2021 at 251,232 in the days after the holidays. Reasons for the increase in cases include people roaming the country as they did before the pandemic, spending more time indoors due to the cold outside temperatures, wearing fewer masks, and falling protection from vaccines and previous infections, Ali Mokdad,  professor of health sciences . from the University of Washington's Institute for Health Metrics and Evaluation, he told NPR. With more and more people wanting to return to life as they were before the pandemic and the new variant is extremely contagious and vaccine resistant, the risk of infection is very real. While Europe still battles the Delta variant, Omicron is spreading at a “ferocious pace” While Europe is still fighting the Delta variant, Omicron is spreading at a "rapid pace", European leaders are fighting to get the majority of their populations vaccinated and amplified as Omicron and COVID cases rise. of COVID19 cases with 121,371 infections in 24 hours. “[Omicron] is spreading at high speed and may be in danger of at least partially escaping our vaccines. We know that our health  systems are currently overloaded, "said EU Commission President Ursula von der Leyen to reporters last week. Shortly before the holidays, Cornell University closed his campus after he discovered 900 positive Covid cases, after the Bloomberg.stanford University, also his decision to return to online classes in the first two weeks of his winter quarters, because of the concern of the Omicron Several major league sports have cut their seasons after the outbreaks, and many Broadway shows have closed, some even permanently. And companies continue to postpone their plans to return to the office indefinitely for fear of the new variant. It gets worse when we move into the dead of winter, "said Anthony Fauci, senior medical advisor to the president, last week for the University of California Chamber of Commerce Foundation, especially for the unvaccinated.
https://bit.ly/3ewgxbN