July 8th 2022 CTP Week in Review: Office Macros - BRC4 - QNAPWorm - Leaky S3 Buckets - Prevention Over Response

• Microsoft Rolls Back Decision to Block Office Macros By Default 😢
• Possible APT29/Ransomware Groups Use of Brute Ratel C4
  • When Pentest Tools Go Brutal: Red-Teaming Tool Being Abused by Malicious Actors
  • Reversing Malware Also How is APT 29 Successful with This Phishing Technique
• Raspberry Robin/QNAPWorm
  • Raspberry Robin gets the worm early
  • Microsoft finds Raspberry Robin worm in hundreds of Windows networks
  • New Raspberry Robin worm uses Windows Installer to drop malware
• Cloud Misconfig Exposes 3TB of Sensitive Airport Data in Amazon S3 Bucket
• Prevention Takes Priority Over Response

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Spencer's Twitter: https://x.com/techspence
Spencer's LinkedIn: https://linkedin.com/in/SpencerAlessi

Work with Us: https://securit360.com