<h2 id="the-oh-no-news">The <em>Oh No!</em> news.</h2>
<h2 id="oh-no-news-is-good-news"><em>Oh No!</em> News, is Good
News.</h2>
<hr />
<ul>
<li><strong>Threat analysis; your attack surface.</strong>
<ul>
<li><strong>TAGS:</strong> Malware, Phishing, Security Breach</li>
</ul></li>
<li><strong>GoDaddy, a Web Hosting Provider Hit Multiple Times by the
Same Group.</strong>
<ul>
<li>This month, GoDaddy, a leading web hosting provider, revealed that
it had experienced a major security breach over several years, resulting
in the theft of company source code, customer and employee login
credentials, and the introduction of malware onto customer
websites.</li>
<li>Major Security Breach: Spanning several years.
<ul>
<li><a href="https://en.wikipedia.org/wiki/Data_breach">Data Breach:</a>
Employee login credentials &amp; customer data.</li>
<li><a
href="https://d18rn0p25nwr6d.cloudfront.net/CIK-0001609711/e4736ddb-b4c7-485b-a8fc-1827691692c9.pdf">10-k
form</a> Filled with the U.S. Securities and Exchange Commission.</li>
<li><a
href="https://www.sec.gov/Archives/edgar/data/1609711/000160971121000122/gddyblogpostnov222021.htm">sec:</a>
GoDaddy Announces Security Incident Affecting Managed WordPress
Service.</li>
<li><a href="https://en.wikipedia.org/wiki/Malware">Malware:</a>
Compromising customer websites managed by GoDaddy.</li>
<li>Phishing Attacks: Exposed customer data including login credentials,
email addresses, and SSL private keys.</li>
</ul></li>
</ul></li>
<li><strong>Chick-Fil-A Customers are Victims of a Data Breach.</strong>
<ul>
<li>Fast-food chain Chick-fil-A has issued a warning to customers
regarding a recent data security breach. The incident occurred between
Dec. 18, 2022 and Feb. 12, 2023, during which unauthorized parties
gained access to customer information, according to a statement posted
on the California Attorney General&#x2019;s website on Tuesday.
<ul>
<li><a href="https://en.wikipedia.org/wiki/Data_breach">Data Breach:</a>
membership numbers, mobile pay numbers, QR codes, last 4 digits of
credit/debit card numbers, credits on Chick-fil-A accounts, birthdays,
phone numbers, and addresses.</li>
</ul></li>
</ul></li>
<li><strong>New phishing campaign uses fake ChatGPT platform to scam
eager investors.</strong>
<ul>
<li>Bitdefender Antispam Labs confirmed that these scams initiate with
an email containing a link that directs users to a copycat version of
ChatGPT. The goal of this copycat version is to convince users that they
can earn as much as $10,000 per month on the duplicate ChatGPT
platform.</li>
<li><a href="https://en.wikipedia.org/wiki/Phishing">Phishing:</a> Email
based scam.</li>
</ul></li>
<li><strong>LassPass Security Incident Update and Recommended
Actions.</strong>
<ul>
<li>Major Security Breach: Spanning multiple years.
<ul>
<li><a href="https://en.wikipedia.org/wiki/Data_breach">Data Breach:</a>
Employee login credentials, source code &amp; other intellectual
property, customer data.</li>
<li><a href="https://en.wikipedia.org/wiki/Malware">Malware:</a>
Attackers exploited third-party software to compromise company systems
by delivering a keylogger type malware.</li>
</ul></li>
</ul></li>
</ul>
<hr />
<ul>
<li><strong>InfoSec; the language of security.</strong>
<ul>
<li><strong>TAGS:</strong> Information Security, Monitoring</li>
</ul></li>
<li><strong>Bitwarden flaw can let hackers steal passwords using
iframes.</strong>
<ul>
<li>Bitwarden highlights that the autofill feature is a potential risk
and even includes a prominent warning in its <a
href="https://bitwarden.com/help/auto-fill-browser/">documentation</a>,
specifically mentioning the likelihood of compromised sites abusing the
autofill feature to steal credentials.</li>
<li><a href="https://en.wikipedia.org/wiki/Phishing">Phishing:</a> Sniff
credentials from a webpage HTML inline frame.</li>
<li><a
href="https://en.wikipedia.org/wiki/HTML_element#Frames">wikipedia:</a>
An inline frame places another HTML document in a frame. Unlike an
&lt;object /&gt; element, an &lt;iframe&gt; can be the "target" frame
for links defined by other elements, and it can be selected by the user
agent as the focus for printing, viewing its source, and so on. The
content of the element is used as alternative text to be displayed if
the browser does not support inline frames. A separate document is
linked to a frame using the src attribute inside the &lt;iframe /&gt;,
an inline HTML code is embedded to a frame using the srcdoc attribute
inside the &lt;iframe /&gt; element. First introduced by Microsoft
Internet Explorer in 1997, standardized in HTML 4.0 Transitional,
allowed in HTML5.</li>
</ul></li>
</ul>
<hr />
<ul>
<li><strong>User space.</strong>
<ul>
<li><strong>TAGS:</strong> Solutions, Services</li>
</ul></li>
<li><strong>Flathub&#x2019;s Got Big Plans for 2023.</strong>
<ul>
<li>Developers are flocking to Flathub in droves, which means users are
too, and even Linux distributions (well, bar one) are getting in on the
action by making making it easier to install apps from Flathub with the
friction of setting things up using terminal commands or odd sounding
download files.</li>
<li><a href="https://beta.flathub.org/">Flathub Beta site:</a> Welcome
to Flathub, the home of hundreds of apps which can be easily installed
on any Linux distribution. Browse the apps online, from your app center
or the command line.</li>
</ul></li>
</ul>
<hr />
<ul>
<li>References (APA format).
<ul>
<li>CySecurity News. (2023, March 01). [GoDaddy Hit Multiple Times by
the Same Group]. CySecurity. <a
href="https://www.cysecurity.news/2023/03/godaddy-web-hosting-provider-hit.html">https://www.cysecurity.news/2023/03/godaddy-web-hosting-provider-hit.html</a></li>
<li>Gatlan S. (2021, November 22). [GoDaddy data breach hits 1.2 million
Managed WordPress customers]. Bleepingcomputer. <a
href="https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-12-million-managed-wordpress-customers/">https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-12-million-managed-wordpress-customers/</a></li>
<li>GoDaddy. (2023, February 16). Statement on recent website redirect
issues. GoDaddy. <a
href="https://aboutus.godaddy.net/newsroom/company-news/news-details/2023/Statement-on-recent-website-redirect-issues/default.aspx">https://aboutus.godaddy.net/newsroom/company-news/news-details/2023/Statement-on-recent-website-redirect-issues/default.aspx</a></li>
<li>Gatlan S. (2020, May 04). GoDaddy notifies users of breached hosting
accounts. Bleepingcomputer. <a
href="https://www.bleepingcomputer.com/news/security/godaddy-notifies-users-of-breached-hosting-accounts/">https://www.bleepingcomputer.com/news/security/godaddy-notifies-users-of-breached-hosting-accounts/</a></li>
<li>Ilascu I. (2019, April 26). Hundreds of GoDaddy Accounts Used for
"Miracle" Product Scams. Bleepingcomputer. <a
href="https://www.bleepingcomputer.com/news/security/hundreds-of-godaddy-accounts-used-for-miracle-product-scams/">https://www.bleepingcomputer.com/news/security/hundreds-of-godaddy-accounts-used-for-miracle-product-scams/</a></li>
<li>Cross T. (2023, March 08). Chick-Fil-A Customers are Victims of a
Data Breach. Safetydetectives. <a
href="https://www.safetydetectives.com/news/chick-fil-a-customers-are-victims-of-a-data-breach/">https://www.safetydetectives.com/news/chick-fil-a-customers-are-victims-of-a-data-breach/</a></li>
<li>Oguejiofor-Abugu K. (2023, March 07). New phishing campaign uses
fake ChatGPT platform to scam eager investors. Safetydetectives. <a
href="https://www.safetydetectives.com/news/new-phishing-campaign-uses-fake-chatgpt-platform-to-scam-eager-investors/">https://www.safetydetectives.com/news/new-phishing-campaign-uses-fake-chatgpt-platform-to-scam-eager-investors/</a></li>
<li>Toulas B. (2023, March 08). Bitwarden flaw can let hackers steal
passwords using iframes. Bleepingcomputer. <a
href="https://www.bleepingcomputer.com/news/security/bitwarden-flaw-can-let-hackers-steal-passwords-using-iframes/">https://www.bleepingcomputer.com/news/security/bitwarden-flaw-can-let-hackers-steal-passwords-using-iframes/</a></li>
<li>Toubba K. (2023, March 01). Security Incident Update and Recommended
Actions. LassPass. <a
href="https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/">https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/</a></li>
<li>Toubba K. (2022, December). Incident 2 &#x2013; Additional details of the
attack. LassPass. <a
href="https://support.lastpass.com/help/incident-2-additional-details-of-the-attack">https://support.lastpass.com/help/incident-2-additional-details-of-the-attack</a></li>
<li>Toubba K. (2023, February). What have we done to secure LastPass.
LassPass. <a
href="https://support.lastpass.com/help/what-have-we-done-to-ensure-lastpass-is-safe-to-use">https://support.lastpass.com/help/what-have-we-done-to-ensure-lastpass-is-safe-to-use</a></li>
<li>Sneddon J. (2023, March 07). Flathub&#x2019;s Got Big Plans for 2023. OMG
ubuntu. <a
href="https://www.omgubuntu.co.uk/2023/03/flathub-has-big-plans-for-2023">https://www.omgubuntu.co.uk/2023/03/flathub-has-big-plans-for-2023</a></li>
<li>McQueen R. (2023, March 07). [The personal blog of Robert McQueen].
ramcq. <a
href="https://ramcq.net/2023/03/07/flathub-in-2023/">https://ramcq.net/2023/03/07/flathub-in-2023/</a></li>
</ul></li>
</ul>
