patches and updates abound 24-Mar-2020

 Apple released iOS and iPadOS 13.4 today. Feature updates and security fixes. MacOS released two updates to their beta program as well.

 Also today Microsoft released an update KB4541335. This is NOT an automatic update, users need to use Windows Update and select.

Yet another Microsoft Windows zero-day vulnerability 23-March-2020

 The 0-day vulnerability in Microsoft's Adobe Type Manager Library (atmfd.dll) is being actively exploited according to a Microsoft advisory ADV200006.
 The knows exploits allow attackers to run code on a user's system and take actions on that user's behalf.
 Consult the advisory at Microsoft's site for details and mitigations.

COVID-19 related scams, links, false information, FUD, etc.

eMails, web sites, social media posts, twits, any and everything we've ever thought of or used is being used to capitalize on the outbreak.  The chance of appearing  to come from friends and/or family are very large.
The above eMail is an example of these fakes. Reports are many thousands a day are fake or attempting to lure the public to sow fear or gain financial advantage - cost the public money. Who sends these and similar eMails? Every/Anyone with $200 to purchase a Covid-19 themed phishing kit.

 Then there are apps. Apps for smart phones, Windows, MacOS, etc. Some are Covid themed directly. Some are Covid victim themed. Some have replaced the fold@home app (the real fold@home uses unused compute power to fold proteins for Covid and other research) .

 Fake or rogue domains. Hundreds are registered every day. One on one of these newly registered sites, users are asked for donations to fund vaccines, help victims, etc.

 With a larger workforce working remotely malware can more easily target and exploit remote worker's lesser protected machines that then connect to the company's infrastructure. Mom and/or dad now use the family computer that has been used all day by the curious teens in the house.

 The worst? Attackers of healthcare providers, agencies, and government agencies in the fight of Covid-19. State public health sites hit with ransomware (it is possible they would have been hit by ransomware attack anyway, just more likely to get past defenses given the stressed workforce).


Be aware, be prepared, be wary, be safe.  Like the virus, if each of us is safer, we are all safer.

Update: Researchers report 30,000% INCREASE in pandemic related threats. The FBI is seeing similar trends. I too see a lot more related scans, scams, and attempts via any and all past and current methods.
30,000% is NOT a typo!

COVID-19 and privacy/tracking?

 New arrivals to China are now being given a wristband and an app for their smartphone 
StayHomeSafe. Interesting name. The app and wristband are an alternative to forced quarantine camps. The app has a 14 day count down.
 Israel approved cellphone tracking technologies to enable tracking of suspected COVID-19 patients.
 Thailand provides a replacement SIM card for new arrivals to the country.
 These and other measures have been implemented with less than usual regulatory oversight. Due to the urgency. The China wristband comes with a warning of criminal and civil penalties. Time will tell if the app can or does collect any other data. China collects data from citizen's smartphones. China uses facial recognition to a large degree, capability has to be lessened die to face masks.

 The U.S. government is seeking measures from the technology sector to collect data to heighten the data collected to fight the outbreak. Law enforcement use of Stingrays can provide information and alert on large gatherings, has done so for years. The technology has been used and is used today. Google maps alerts on traffic congestion, restaurant wait times, population density for wild fire response, etc.

Rumors of US national quarantine are FAKE

 US National Security Council taking steps to dispel fake news attributed to "foreign entity"

 Some COVID-19 sites with graphic maps contain malware.

Be health safe, be cyber safer.

Got iPhone? Got unexplained cellular data?

 Reports of iPhone users getting large bills or large cellular data usage on unlimited plans.

Check Settings > Cellular > Cellular Data

Look at the data usage for Uninstalled Apps. My usage and my wife's usage is as expected. But users are experiencing large unexplained usage.

Check yours. If you get an increased bill from your carrier, report this. It appears to be a known problem.

Out of Band Microsoft security Update KB4551762

 Today, March 12, 2020 

 Microsoft released a patch for the SMB vulnerability.