November 2, 2020
David Redekop

This Week In Nerd News – November 2, 2020

Your weekly top 5 technical and security issues Nerds should pay attention to:

YouTube video

Cops Turn to Canadian Phone-Tracking Firm After Infamous ‘Stingrays’ Become ‘Obsolete’.

An interesting attribute of 5G is that legacy stingrays are no longer effective.

Law enforcement agencies across the United States are scrambling to secure funding for new cellphone-tracking equipment after the maker of the controversial “Stingray” device quietly announced last year it would no longer sell equipment directly to local law enforcement.

 

Read More: Cops Turn to Canadian Phone-Tracking Firm After Infamous ‘Stingrays’ Become ‘Obsolete’

 

European ransomware group strikes US hospital networks, analysts warn.

“UNC1878 is one of most brazen, heartless and disruptive threat actors I’ve observed over my career,” Carmakal said.

An Eastern European cybercriminal group has conducted ransomware attacks at multiple U.S. hospitals in recent days in some of the most disruptive cyber-activity in the sector during the coronavirus pandemic, cybersecurity company FireEye said Wednesday.

 

Read More: European ransomware group strikes US hospital networks, analysts warn

 

Munich Security Conference attendees targeted with Iran-linked spearphishing, Microsoft says.

While reporters focus on bigger stories, it is important to recognize that anyone can become a target. Just so happens the attackers get a bigger impact at conferences.

Iranian government-linked hackers have been sending spearphishing emails to large swaths of high-profile potential attendees of the upcoming Munich Security Conference as well as the Think 20 Summit in Saudi Arabia, according to Microsoft research.

 

Read More: Munich Security Conference attendees targeted with Iran-linked spearphishing, Microsoft says

 

Grayshift, The Startup That Breaks Into iPhones For The Feds, Raises $47 Million.

“It’s most likely they can’t do much, if anything at all, with the iPhone 12 and iOS 14,” said Vladimi Katalov

Grayshift, the startup behind one of the U.S. government’s favorite iPhone hacking technologies, has raised $47 million in funding. It’s a huge round for a phone forensics company, especially one that’s focused almost exclusively on breaking through the security of Apple’s famous device.

 

Read More: Grayshift, The Startup That Breaks Into iPhones For The Feds, Raises $47 Million

 

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo.

Once again, an open RDP hole facilitated this attack. Close RDP, Close RDP, Close RDP.

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems.

 

Read More: Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

 

Did you know?

The founder of Evernote has a new project: MMHMM App (invite beta at this time) looks to make zoom meetings feel fresh again 🙂

Need an IT professional? Request service today.