CISA and CNMF Analysis of SolarWinds-related Malware

This article is contributed. See the original author and article here.

CISA and the Department of Defense (DoD) Cyber National Mission Force (CNMF) have analyzed additional SolarWinds-related malware variants—referred to as SUNSHUTTLE and SOLARFLARE. One of the analyzed files was identified as a China Chopper webshell server-side component that was observed on a network with an active SUNSHUTTLE infection. The webshell can provide a cyber threat actor an alternative method of accessing a network, even if the SUNSHUTTLE infection was remediated.

The U.S. Government attributes this activity to the Russian Foreign Intelligence Service (SVR).

CISA encourages users and administrators to review Malware Analysis Report MAR-10327841-1.v1, U.S. Cyber Command’s VirusTotal page, and the following resources for more information: 

FTC and DOJ bring first case under new COVID-19 consumer protection law

FTC and DOJ bring first case under new COVID-19 consumer protection law

This article was originally posted by the FTC. See the original article here.

There are no supplements proven to treat or prevent COVID-19. But that doesn’t stop some companies from making these kind of unsubstantiated claims, or even false claims that their products work as well — or better — than available COVID-19 vaccines. If you see claims like these, the FTC wants you to ignore them.

The first action taken under the COVID-19 Consumer Protection Act charges St. Louis-based chiropractor Eric Anthony Nepute and his company Quickwork LLC with deceptively marketing vitamin D and zinc products as proven immunity boosters that effectively treat or prevent COVID-19. What’s more, the defendants claim their products offer equal or better protection from the disease than available vaccines. The complaint, filed by the Department of Justice on the FTC’s behalf, says that the defendants don’t have the scientific evidence to back up their treatment or prevention claims, much less the claims that their products are as good as (or superior to) approved COVID-19 vaccines.

In addition to financial penalties, the government seeks to bar the defendants from making additional unsubstantiated claims about the effects of vitamin D and zinc on COVID-19.

When it comes to fighting COVID-19 and spotting unsupported treatment claims, follow these tips:

  • When there’s a medical breakthrough to treat, prevent, or cure a disease, you’re not going to hear about it for the first time through an ad or sales pitch.
  • Always talk with your doctor or healthcare professional before you try any product claiming to treat, prevent, or cure COVID-19.
  • Visit CDC.gov and the FDA.gov for the most up-to-date information about COVID-19 and available vaccines.

Now, share what you know, and ask others to do the same.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Google Releases Security Updates for Chrome

This article is contributed. See the original author and article here.

Google has updated the stable channel for Chrome to 90.0.4430.72 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CISA encourages users and administrators to review the Chrome release and apply the necessary changes.