Bite Sized Cyber Crime

Brother Printers Affected by Unpatchable Critical Vulnerability

Printers are the bane of many's existence, but they may have just gotten worse for security professionals. Rapid7 discovered 8 new vulnerabilities mostly impacting Brother branded printers, one of which cannot be patched by the vendor and leaks the admin password of the device.
Sources: https://pastebin.com/vNDbrwsU

Were 16 Billion Passwords Just Leaked?

News has hit the mainstream media that all your passwords have been leaked yet again, in a massive password leak including Google, Meta, and Apple. But how much of that sensationalized story is true?
Sources: https://pastebin.com/Xi1MPpFg

I Got Scammed

And it could happen to you too. On this week's episode of Bite Size Cyber Crime I detail an actual scam I fell for and emphasize that anyone can be a victim of a scam anywhere on the internet.

Malwareception: SakuraRAT is a Backdoor to Trick Script Kiddies

Malware is everywhere, even inside of other malware. One tool advertising itself as an advanced remote access trojan ended up being much more, a backdoor infecting novice hackers. This was not just a one off, however, and lead to the discovery of a massive backdoored malware campaign infecting other hackers and gaming cheaters.
Sources: https://pastebin.com/C4DG6LTw

MSP Customers Face Ransomware after Remote Assist Tool Compromised

Using an MSP can be handy for getting your IT set up or managing technical support without hiring a lot of full time staff, but there are risks that can come with outsourcing your IT to a third party. One MSP was compromised, leading to many customers having ransomware headaches.
Sources: https://pastebin.com/hLKSqRaS

Malware Spread via fake TikTok Piracy Tutorials

Piracy and accidentally getting malware go hand in hand for many, and though the days of Limewire viruses on your Linkin Park albums are mostly over, modern problems require modern solutions so attackers have moved to modern platforms to spread malware to those not interested in paying for software.
Sources: https://pastebin.com/i7yriZXy

Coinbase Insiders Bribed to Hand Over Data to Scammers

Coinbase is one of the largest crypto exchanges, but when corrupt employees are compromised into handing over data to scammers, a series of social engineering attacks took place. The scammers demanded a ransom, but Coinbase fired back.
Sources: https://pastebin.com/dTZR6hKw

Pearson Breached Via Exposed GitLab Token

Pearson is an education giant, providing learning tools and standardized assessments across many fields, schools, and organizations. Recently they were breached by what was likely a series of relatively minor mistakes.
Sources: https://pastebin.com/YemUE0Xi