Properties loader, Shields down, Bad Pirates, and more.

Infosec Overnights - Daily Security News

A daily look at the relevant information security news from overnight - 08 June, 2022
Episode 240 - 08 June 2022
Properties loader- https://www.bleepingcomputer.com/news/security/new-svcready-malware-loads-from-word-doc-properties/
Shields down -
https://www.securityweek.com/data-breach-shields-health-care-group-impacts-2-million-patients
Who let the Dogs out- https://www.bleepingcomputer.com/news/security/new-dogwalk-windows-zero-day-bug-gets-free-unofficial-patches/
Owl be watching you -
https://www.securityweek.com/owl-labs-patches-severe-vulnerability-video-conferencing-devices
Bad Pirates -
https://www.bleepingcomputer.com/news/security/pirated-ccleaner-search-results-spread-information-stealing-malware/
Hi, I’m Paul Torgersen. It’s Wednesday June 8th, 2022, and this is a look at the information security news from overnight.
From BleepingComputer.com
A previously unknown malware loader named SVCReady has been discovered in phishing attacks, featuring an unusual way of loading the malware from Word documents. Specifically, it uses VBA macro code to execute shellcode stored in the properties of the document. HP reports that the malware has been under deployment since April of this year, and received several updates in May. This indicates it is currently under heavy development, and is likely still at an early stage.
From SecurityWeek.com:
Shields Health Care Group of Massachusetts has informed roughly two million individuals of a cybersecurity incident that potentially impacted a robust set of their PII and PHI. No word on the threat actor or attack vector in this breach that happened between March 7 and March 21 of this year. No free monitoring was offered, but they do guide you on how to lock down your three credit reports. Gee, thanks.
From BleepingComputer.com:
Yet another Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool has come to light. The security flaw dubbed DogWalk, is a path traversal flaw attackers can exploit to copy an executable to the Windows Startup folder from a .diagcab file. This flaw has actually been known for over two years, but Microsoft said that Outlook users are not at risk because .diagcab files are automatically blocked. Opatch says yea, but here’s a free patch anyway, you know, just in case.
From SecurityWeek.com:
Video conferencing company Owl Labs has released patches for a severe vulnerability affecting its Meeting Owl Pro and Whiteboard Owl devices. These flaws can be exploited to find registered devices worldwide and access sensitive data, or even gain access to the owners’ networks. The company says updating to firmware version 5.4.1.4 should eliminate the threat of unauthorized access.
And last today, from BleepingComputer.com
A new malware distribution campaign dubbed “FakeCrack,” is being promoted through search results for a pirated copy of the CCleaner Pro Windows optimization program. What you really get is a nasty that steals your passwords, credit cards and crypto wallets. On the other hand, if you are pirating software anyway, maybe you get what you deserve.
That’s all for me today . Have a great rest of your day. Like and subscribe. And until tomorrow, be safe out there.