Exposure management conf, UltraAV and more

Happy to meet you here again ! Thank you 49632 subscribers at the time I'm typing this... It may sound scary, but in the end, the views will be max 8K or so, crowded spaces :)

In 2 days only, coming webinar (interesting topic, I'm not speaking in this one) :

Why Validation is Needed in Modern Exposure Management

I always speak about reducing your attack surface, well, that's a spot on event here :

Exposure assessment and exposure validation is a very formal way to handle risks in regards to your organization's digital footprint.

Hopefully it will be of interest for some of you.

A new Linux malware in the place : New Mallox ransomware Linux variant based on leaked Kryptina code

From Kryptina to Mallox

Kryptina was launched as a low-cost ($500-$800)?ransomware-as-a-service (RaaS) platform for targeting Linux systems in late 2023 but failed to gain traction in the cybercrime community. Enjoy the details in the linked article.

If you had Kaspersky AV on your machine, well you may have ended with a new AV called "ultraAV", and that's from Kaspersky.

Kaspersky deletes itself, installs UltraAV antivirus without warning

I do not think this is the right way to do thing, but I guess they follow big tech model, shut up and obey.

The way to do it would have been, showing a message "we're sorry but we must stop providing our services as per regulations, yet, don't stay without protection and check this box to get our recommended solution"

But when you run a computer, do your really own anything on it ? .... yes, you down there in the back... what ? Linux ? ... true, the closer you can be to owning your machine is running a Linux system, I agree.

Finally, your smartphone running android, well, may have been infected with a malware from the very official, cloud based, claimed "secured" google play store !

Android malware 'Necro' infects 11 million devices via Google Play

Can't complain, it could have blown up and killed you...so, somehow, with this perspective, it's not THAT bad.

Interestingly, it's Kaspersky (yes, just from the previous topic), who found the stuff..... sometimes I wonder, you know, creating the need... after all, I'd be an AV company with a research lab, I'd pay some guys to spread some stuff, and then, after a while, publish some good findings that no one else would have seen coming.... It'd look so bad ass !

Anyways, that the quick wrap for today. A lot of moves as well on the dark web in the ransomware world, but you know, will only speak about this when it does hit the mainstream cyber media :)

Have a good one all !