Security news weekly round-up - 22nd October 2021
Tags: security
Published: 2021-10-22 17:13:02

---
title: Security news weekly round-up - 22nd October 2021
published: true
description: Curated links about computer security from around the web
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/0jupjut8w3h9mjwm8m57.jpg
series: Security news weekly round-up
---

## __Introduction__

Hello and welcome to this week's review. I am your host [Habdul Hazeez](https://dev.to/ziizium).

This week's review is mostly about computer security in general with a story about money linked to _ransomware_ and another about a fake "security company"

Let's begin.

<hr />

## __[US links $5.2 billion worth of Bitcoin transactions to ransomware](https://www.bleepingcomputer.com/news/security/us-links-52-billion-worth-of-bitcoin-transactions-to-ransomware/)__

What a time to be alive.

The interesting thing about this story? It's all _computer code_.

Excerpt from the article:

> FinCEN identified 177 CVC (convertible virtual currency) wallet addresses used for ransomware-related payments after analyzing 2,184 SARs (Suspicious Activity Reports) filed between January 1, 2011, and June 30, 2021, and reflecting $1.56 billion in suspicious activity

> Based on blockchain analysis of transactions tied to the 177 CVC wallets, FinCEN identified roughly $5.2 billion in outgoing BTC transactions potentially tied to ransomware payments

## __[Researchers Disclose New Side-Channel Attacks Affecting All AMD CPUs](https://www.securityweek.com/researchers-disclose-new-side-channel-attacks-affecting-all-amd-cpus)__

All AMD CPUs? Oh my.

Excerpt from the article:

> The new attacks demonstrated by Lipp, Gruss and Schwarz leverage time and power measurements of prefetch instructions. “In contrast to previous work on prefetch attacks on Intel, we show that the prefetch instruction on AMD leaks even more information

## __[A recipe for failure: Predictably poor passwords](https://www.welivesecurity.com/2021/10/19/recipe-failure-predictably-poor-passwords/)__

Are you using `pass1234` or its like for your password because it's easy to remember?

Guess what? It's also easy to guess.

You feel my rhymes 😊?

Jokes apart, the article is an **interesting read**

Excerpt from the article:

> Unlike biometrics, there is no limit to how many you can have, plus you can store your passwords in a password manager and have it generate one for you.

> Furthermore, when used with multi-factor authentication such as an authenticator app or security key, the entry to an account is seamless and extremely easy for even the most entry-level user

## __[Acer hacked twice in a week by the same threat actor](https://www.bleepingcomputer.com/news/security/acer-hacked-twice-in-a-week-by-the-same-threat-actor/)__

I don't know what to say 🤐.

Excerpt from the article:

> Last week, threat actors known as 'Desorden' emailed journalists to say they hacked Acer India's servers and stole data, including customer information

> Less than a week later, Desorden emailed BleepingComputer to say they breached Acer Taiwan's servers on October 15th and stole employee and product information

## __[How hackers hijacked thousands of high-profile YouTube accounts](https://arstechnica.com/information-technology/2021/10/how-hackers-hijacked-thousands-of-high-profile-youtube-accounts/)__

It all starts with a phishing email.

Excerpt from the article:

> It all starts with a phish. Attackers send YouTube creators an email that appears to be from a real service—like a VPN, photo editing app, or antivirus offering—and offer to collaborate.

> They propose a standard promotional arrangement: Show our product to your viewers and we’ll pay you a fee. It’s the kind of transaction that happens every day for YouTube’s luminaries, a bustling industry of influencer payouts

> Clicking the link to download the product, though, takes the creator to a malware landing site instead of the real deal

## __[Hacking gang creates fake firm to hire pentesters for ransomware attacks](https://www.bleepingcomputer.com/news/security/hacking-gang-creates-fake-firm-to-hire-pentesters-for-ransomware-attacks/)__

You should be careful of the kind of jobs you apply to 🤓.

Excerpt from the article:

> The thin veil of legitimacy around this new corporate entity was lifted by researchers at Gemini Advisory, who found out that the website for a fake cybersecurity company known as Bastion Security comprised of stolen and re-compiled content from other websites

> Even more revealing is that the company states that they are based out of England, but the site serves Russian-language 404 error pages

## __[Problems with Multifactor Authentication](https://www.schneier.com/blog/archives/2021/10/problems-with-multifactor-authentication.html)__

Lesson from the article: **Do not authorize a sign-in that you did not initiate**.

Excerpt from the article:

> It turns out that the VP had approved over 10 different push-based messages for logins that he was not involved in. When the VP was asked why he approved logins for logins he was not actually doing, his response was, “They (IT) told me that I needed to click on Approve when the message appeared!”

## __Support Me__

Writing makes me thirsty. I'll appreciate a cup of coffee 😉.

<a href="https://www.buymeacoffee.com/ziizium" target="_blank"><img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" style="height: 60px !important;width: 217px !important;" ></a>

## __Credits__

Cover photo by [Debby Hudson on Unsplash](https://unsplash.com/@hudsoncrafted).

<hr>

That's it for this week, I'll see you next Friday.