Cyber Morning Call - #589 - 24/07/2024

[Referências do Episódio] Daggerfly: Espionage Group Makes Major Update to Toolset - https://symantec-enterprise-blogs.security.com/threat-intelligence/daggerfly-espionage-updated-toolset  Exploiting CVE-2024-21412: A Stealer Campaign Unleashed - https://www.fortinet.com/blog/threat-research/exploiting-cve-2024-21412-stealer-campaign-unleashed  CVE-2024-21412 - Internet Shortcut Files Security Feature Bypass Vulnerability - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412  REMEDIATION AND GUIDANCE HUB: FALCON CONTENT UPDATE FOR WINDOWS HOSTS - https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/  Fake CrowdStrike repair manual pushes new infostealer malware - https://www.bleepingcomputer.com/news/security/fake-crowdstrike-repair-manual-pushes-new-daolpu-infostealer-malware/  How a North Korean Fake IT Worker Tried to Infiltrate Us - https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us  SocGholish: Fake update puts visitors at risk - https://www.gdatasoftware.com/blog/2024/07/37976-socgholish-fake-update  Impact of FrostyGoop ICS Malware on Connected OT Systems - https://hub.dragos.com/hubfs/Reports/Dragos-FrostyGoop-ICS-Malware-Intel-Brief-0724_.pdf  Roteiro e apresentação: Carlos Cabral e Bianca Oliveira Edição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia