Afternoon Dessert - 2022-11-17

Welcome to another Afternoon Dessert breakout:

U.S. charges Russian suspects with operating Z-Library e-Book site
Anton Napolsky (33) and Valeriia Ermakova (27), two Russian nationals, were charged with intellectual property crimes linked to Z-Library, a pirate online eBook repository. [...]
Read more....

Black Friday and retail season – watch out for PayPal “money request” scams
Don't let a keen eye for bargains lead you into risky online behaviour...
Read more....

Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign
A China-based financially motivated group is leveraging the trust associated with popular international brands to orchestrate a large-scale phishing campaign dating back as far as 2019. The threat actor, dubbed Fangxiao by Cyjax, is said to have registered over 42,000 imposter domains, with initial activity observed in 2017. "It targets businesses in multiple verticals including retail, banking,
Read more....

Microsoft urges devs to migrate away from .NET Core 3.1 ASAP
Microsoft has urged developers still using the long-term support (LTS) release of .NET Core 3.1 to migrate to the latest .NET Core versions until it reaches the end of support (EOS) next month. [...]
Read more....

ESET rolls out new consumer offerings to improve home security
ESET's newest consumer product release has taken a comprehensive approach to security to guard against a full range of threats. While cyberthreats and hackers continue to evolve, ESET is always a step ahead. Here is a look at the new product updates: [...]
Read more....

F5 fixes two remote code execution flaws in BIG-IP, BIG-IQ
F5 has released hotfixes for its BIG-IP and BIG-IQ products, addressing two high-severity flaws allowing attackers to perform unauthenticated remote code execution (RCE) on vulnerable endpoints. [...]
Read more....

S3 Ep109: How one leaked email password could drain your business
Latest episode - listen now! Cybersecurity news plus loads of great advice...
Read more....

QBot phishing abuses Windows Control Panel EXE to infect devices
Phishing emails distributing the QBot malware are using a DLL hijacking flaw in the Windows 10 Control Panel to infect computers, likely as an attempt to evade detection by security software. [...]
Read more....