#1208 · [Fortinet] FortiGuard Weekly Newsletter

ID interno: 10918000000423005

← Volver al listado

Estado

Cancelada

Prioridad

Normal

Urgencia

Alta

Impacto

Afecta al usuario

Categoría

Business Central

Subcategoría

Others

Tipo

Incidencia

Canal

E-Mail

SLA

Grupo

Brownie (HQ)

Site

HQ

Nivel

Nivel 1 - Primera Respuesta

Solicitante

Fortinet

Técnico

Edwin Martinez

Departamento

Request Type

Incidencia

Creado

7/10/22, 22:25

Resuelto

Actualizado

10/10/22, 7:13

Asignado

Oct 10, 2022 09:13 AM

Respondido

Completado

First resp. due

Due by

Tiempo de resolución

Overdue

No

First resp. overdue

No

Escalado

No

Reabierto

No

FCR

No

Solicitada cancelación

No

Service Request

No

Trashed

No

Asignar técnico

Actual: Edwin Martinez

Descripción

 

View this article online

 

Activity Summary - Week Ending Oct 07, 2022

 

Delivery of Malware: A Look at Phishing Campaigns in Q3 2022 - Entering the second half of 2022, phishing attacks and campaigns continue to be the top threats targeting users and organizations, using a variety of techniques. Following our observations posted last quarter, FortiGuard Labs has continued to track many malware families, including Emotet, Qbot, and Icedid. We continue to find malicious files being delivered via phishing emails using Microsoft Excel files, Microsoft Word Documents, Windows shortcut files, and ISO image files.

This blog helps organizations identify and prevent phishing attacks and infections by providing some of the most common details and techniques used by these malicious files for malware deployment.

[Continue reading]

 

 

Top 5 Application Vulnerabilities / IPS

Rank

Name

%

1 Apache.Log4j.Error.Log.Remote.Code.Execution 21
2 Generic.XXE.Detection 20
3 D-Link.Devices.HNAP.SOAPAction-Header.Command.Execution 20
4 TCP.Split.Handshake 19
5 PHPUnit.Eval-stdin.PHP.Remote.Code.Execution 19

 

New Kaiji Modular Malware Variant "Chaos" Targets Europe – FortiGuard Labs is aware of a new modular malware variant called "Kaiji". This variant targets Windows and Linux machines and devices that belong to both consumers and enterprises in Europe. Dubbed "Chaos", the malware connects to command and control (C2) servers and performs various activities, such as launching Distributed Denial of Service (DDoS) attacks and mining crypto currencies.

This is significant because the Chaos malware targets its victims by exploiting various vulnerabilities. Infected machines join a botnet that is then used for malicious activities such as DDoS attacks and cryptocurrency mining.

[Continue reading]

Signatures:
IPS:
Huawei.HG532.Remote.Code.Execution (CVE-2017-17215)
ZyXEL.Firewall.ZTP.Command.Injection (CVE-2022-30525)
F5.BIG-IP.iControl.REST.Authentication.Bypass (CVE-2022-1388)

Anti-Virus:
Linux/Kaiji.C!tr
W32/Ransom_Foreign.R002C0WG222
W32/PossibleThreat

 

Top 5 Malware Activity

Rank

Name

%

1 W32/Alllu.A!tr 40
2 W32/Inject.ZYD!tr 17
3 W32/Flystud.RN!tr 15
4 W32/VBNA.HLT!worm 15
5 W32/LdPinch.FBW!tr.pws 14

 

Ransomware Roundup: Bisamware and Chile Locker – Biweekly, FortiGuard Labs gathers data on ransomware variants of interest that have been gaining traction within the OSINT community, as well as our datasets. The Ransomware Roundup report aims to provide readers with brief insights into the evolving ransomware landscape, and the Fortinet solutions that protect against those variants.

This latest edition of the Ransomware Roundup covers the Bisamware and Chile Locker ransomware.

Bisamware is a Windows-focused ransomware that is reportedly being distributed through Microsoft Word files designed to exploit CVE-2022-30190. This vulnerability is in Microsoft Support Diagnostic Tool (MSDT) and abuses the MSDT URI scheme to download and run a malicious payload.

Chile Locker is a recently reported ransomware. Chile's CSIRT team issued an alert about this variant at the end of August 2022, stating that it had affected a government service in Chile on August 25th. Despite the warning, Chile Locker variants were subsequently submitted to VirusTotal from Canada, Mexico, Romania, China, the UK, Spain, Uruguay, Netherland, Russia, Poland, Malaysia, and the U.S., which indicates that the ransomware attacker did not specifically target Chile.

[Continue reading]

Signatures:
W64/Bisamware.A!tr.ransom
W32/Agent.BNQ!tr.ransom
W64/Agent.BNQ!tr.ransom
BAT/Starter.8E92!tr
PossibleThreat.PALLASNET.H

 

Leveraging Microsoft Office Documents to Deliver Agent Tesla and njRat – We recently found some malicious Microsoft Office documents that attempted to leverage legitimate websites- MediaFire and Blogger- to execute a shell script and then drop two malware variants of Agent Tesla and njRat. Agent Tesla is a well-known spyware, first discovered in 2014, that can steal personal data from web browsers, mail clients, and FTP servers, collect screenshots and videos, and capture clipboard data. njRat, also known as Bladabindi, is a remote agent Trojan that was first discovered in 2013. It is capable of remotely controlling a victim's device to log keystrokes, access the camera, steal credentials stored in browsers, upload/download files, manipulate the registry, and more.

In this article, we will provide details of the documents we discovered, the embedded scripts used to deliver a payload, and the behavior of these malware variants.

[Continue reading]

Signatures:
VBA/Agent.AIN!tr
MSIL/Agent.CJX!tr.spy
MSIL/Agent.CWR!tr
MSIL/VXS!tr
MSIL/CoinMiner.BMT!tr
PowerShell/Agent.GJ!tr
JS/SnakeKeylogger.A!tr.dldr

PowerShell/Agent.AMM!tr

 

Zero-Day Research

Microsoft Exchange 0-Day Vulnerability Updates – On September 28, 2022, GTSC, a cybersecurity company, released a blog detailing an exploit attempt on a system they were monitoring. After analysis, they were able to locate and submit two bugs to Microsoft via the Zero Day Initiative (ZDI-CAN-18333 (CVSS 8.8) and ZDI-CAN-18802 (CVSS 6.3)).

Microsoft validated the findings and CVE-2022-41040 and CVE-2022-41082 were assigned to the vulnerabilities. CVE-2022-41040 is a Server-Side Request Forgery (SSRF) vulnerability and CVE-2022-41082 allows for remote code execution (RCE) where PowerShell is available.

This blog describes what you need to know about these vulnerabilities.

[Continue reading]

Signatures: MS.Exchange.Server.Autodiscover.Remote.Code.Execution

Indicator(s):
125[.]212[.]220[.]48
5[.]180[.]61[.]17
47[.]242[.]39[.]92
61[.]244[.]94[.]85
86[.]48[.]6[.]69
86[.]48[.]12[.]64
94[.]140[.]8[.]48
94[.]140[.]8[.]113
103[.]9[.]76[.]208
103[.]9[.]76[.]211

 

 

Validate your network's security accuracy, application usage and performance with a Fortinet Cyber Threat Assessment.

Request Assessment »


www.fortinet.com

Questions? Contact Us

 
 
 
 
 

You received this email because you are subscribed to Weekly FortiGuard Update from Fortinet, Inc. This email was sent to soporte@browniespain.com. To unsubscribe please update the subscription settings in your support account

JSON crudo (detalle completo)
{
  "id": "10918000000423005",
  "sla": null,
  "mode": {
    "id": "10918000000008033",
    "name": "E-Mail",
    "internal_name": "E-Mail"
  },
  "site": {
    "id": "10918000000794001",
    "name": "HQ",
    "deleted": false,
    "is_default": true
  },
  "tags": [],
  "group": {
    "id": "10918000000199875",
    "name": "Brownie (HQ)",
    "site": {
      "id": "10918000000794001"
    },
    "deleted": false
  },
  "level": {
    "id": "10918000000168252",
    "name": "Nivel 1 - Primera Respuesta"
  },
  "assets": [],
  "impact": {
    "id": "10918000000009652",
    "name": "Afecta al usuario"
  },
  "is_fcr": false,
  "status": {
    "id": "10918000000085001",
    "name": "Cancelada",
    "color": "#cacaca",
    "stop_timer": false,
    "in_progress": false,
    "internal_name": "Canceled"
  },
  "is_read": true,
  "subject": "[Fortinet] FortiGuard Weekly Newsletter",
  "urgency": {
    "id": "10918000000009529",
    "name": "Alta"
  },
  "category": {
    "id": "10918000000406266",
    "name": "Business Central",
    "deleted": false
  },
  "email_cc": [],
  "email_to": [
    "soporte@browniespain.com"
  ],
  "priority": {
    "id": "10918000000008169",
    "name": "Normal",
    "color": "#006600"
  },
  "template": {
    "id": "10918000000008023",
    "name": "Incidencia",
    "image": "incident-icon",
    "layouts": [
      {
        "id": "10918000000102032",
        "name": "requester_layout"
      },
      {
        "id": "10918000000102034",
        "name": "technician_layout"
      }
    ],
    "comments": "Interrupción o reducción de la calidad no planificada del Servicio",
    "inactive": false,
    "workflow": null,
    "has_tasks": false,
    "lifecycle": {
      "id": "10918000000183026",
      "name": "Ciclo de vida de una Solicitud",
      "inactive": false,
      "is_published": true
    },
    "checklists": [],
    "created_by": {
      "id": "10918000000007977",
      "name": "System",
      "site": null,
      "phone": null,
      "mobile": null,
      "email_id": null,
      "sms_mail": null,
      "job_title": "",
      "last_name": "",
      "photo_url": "https://profile.zoho.eu/file?exp=10&ID=-1&t=user&height=60&width=60",
      "department": null,
      "first_name": "System",
      "user_scope": "internal_user",
      "employee_id": "",
      "is_vip_user": false,
      "sms_mail_id": null,
      "cost_per_hour": null,
      "is_technician": false
    },
    "is_default": true,
    "sort_index": "1",
    "user_groups": [],
    "created_time": {
      "value": "1169631000000",
      "display_value": "Jan 24, 2007 10:30 AM"
    },
    "has_checklists": false,
    "has_user_group": false,
    "support_groups": [],
    "template_fields": [
      {
        "name": "email_ids_to_notify",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "attachments",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "request_type",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "subject",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": true,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "description",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "responded_time",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "mode",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "assets",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "urgency",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "group",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "requester",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": true,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "created_time",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "level",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "resolution.content",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": false,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "impact",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "technician",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "priority",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "due_by_time",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "first_response_due_by_time",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "site",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "completed_time",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "udf_fields.udf_char3",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "udf_fields.udf_char2",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "category",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "subcategory",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "status",
        "layout": {
          "name": "technician_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": false,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "email_ids_to_notify",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "attachments",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "subject",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": true,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "description",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "responded_time",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "assets",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "requester",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": true,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "created_time",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "due_by_time",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "first_response_due_by_time",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "site",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "completed_time",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "udf_fields.udf_char3",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "category",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      },
      {
        "name": "subcategory",
        "layout": {
          "name": "requester_layout"
        },
        "scopings": [
          {
            "value": false,
            "scope_name": "mandatory"
          },
          {
            "value": true,
            "scope_name": "requester_can_view"
          },
          {
            "value": true,
            "scope_name": "requester_can_edit"
          }
        ]
      }
    ],
    "service_category": null,
    "last_updated_time": {
      "value": "1747822830943",
      "display_value": "May 21, 2025 12:20 PM"
    },
    "show_to_requester": true,
    "task_configuration": {
      "trigger_after_approved": false,
      "trigger_after_creation": false,
      "allow_requester_to_view": false,
      "allow_requester_to_select": false
    },
    "is_service_template": false,
    "reference_templates": []
  },
  "workflow": null,
  "email_bcc": [],
  "has_draft": false,
  "has_notes": false,
  "lifecycle": {
    "id": "10918000000183026",
    "name": "Ciclo de vida de una Solicitud",
    "inactive": false,
    "is_published": true
  },
  "requester": {
    "id": "10918000000258315",
    "name": "Fortinet",
    "site": {
      "id": "10918000000794001",
      "name": "HQ",
      "deleted": false,
      "is_default": true
    },
    "phone": null,
    "mobile": null,
    "email_id": "noreply@fortinetpm.com",
    "sms_mail": null,
    "job_title": null,
    "last_name": null,
    "photo_url": "https://profile.zoho.eu/file?exp=10&ID=-1&t=user&height=60&width=60",
    "department": null,
    "first_name": "Fortinet",
    "user_scope": "internal_user",
    "employee_id": null,
    "is_vip_user": false,
    "sms_mail_id": null,
    "cost_per_hour": null,
    "is_technician": false
  },
  "created_by": {
    "id": "10918000000007977",
    "name": "System",
    "site": null,
    "phone": null,
    "mobile": null,
    "email_id": null,
    "sms_mail": null,
    "job_title": "",
    "last_name": "",
    "photo_url": "https://profile.zoho.eu/file?exp=10&ID=-1&t=user&height=60&width=60",
    "department": null,
    "first_name": "System",
    "user_scope": "internal_user",
    "employee_id": "",
    "is_vip_user": false,
    "sms_mail_id": null,
    "cost_per_hour": null,
    "is_technician": false
  },
  "department": null,
  "display_id": "1208",
  "is_overdue": false,
  "is_trashed": false,
  "message_id": "<66bc8525886457a2e5d066b44f2a8bee@swift.generated>",
  "resolution": null,
  "technician": {
    "id": "10918000000167018",
    "name": "Edwin Martinez",
    "site": {
      "id": "10918000000794001"
    },
    "phone": null,
    "mobile": "680658288",
    "email_id": "edwin.martinez@browniespain.com",
    "sms_mail": null,
    "job_title": "Retail Project Operations",
    "last_name": "Martinez",
    "photo_url": "https://profile.zoho.eu/file?exp=10&ID=20083566992&t=user&height=60&width=60",
    "department": {
      "id": "10918000000174683"
    },
    "first_name": "Edwin",
    "user_scope": "internal_user",
    "employee_id": "emartinez",
    "is_vip_user": false,
    "sms_mail_id": null,
    "cost_per_hour": null,
    "is_technician": false
  },
  "udf_fields": {
    "udf_char2": "Remoto",
    "udf_char3": null
  },
  "attachments": [],
  "description": "     <div style=\"width: 100%; min-width: 100%; color: rgb(10, 10, 10); font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; font-family: Arial\" class=\" zm_-8772171762154765715_parse_-3396309489395093713\"> <table class=\"x_-1163917907body\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; background: rgb(243, 243, 243); height: 100%; width: 100%; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td class=\"x_-1163917907float-center\" align=\"center\" valign=\"top\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; float: none; text-align: center\"> <center style=\"width: 100%; min-width: 580px\"> <table class=\"x_-1163917907float-center x_-1163917907container\" align=\"center\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; background: rgb(254, 254, 254); width: 580px; margin: 0 auto; Margin: 0 auto; float: none; text-align: center\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table id=\"x_-1163917907logo\" class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table; background-color: rgb(49, 60, 70)\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th valign=\"middle\" class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-12 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-bottom: 16px; width: 564px; padding-left: 16px; padding-right: 16px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"12px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 12px; line-height: 12px\">&nbsp;</td></tr></tbody></table> <img class=\"x_-1163917907float-left\" src=\"/fg_weekly/tpl/logo.png\" width=\"114\" height=\"15\" style=\"outline: none; text-decoration: none; max-width: 100%; clear: both; display: block; float: left; text-align: left; width: 114px; height: auto\" /> </th></tr></tbody></table></th> </tr></tbody></table> <table id=\"x_-1163917907header\" class=\"x_-1163917907row x_-1163917907collapse\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-12 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-bottom: 16px; padding-right: 0; padding-left: 0; width: 588px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <img class=\"x_-1163917907float-center\" src=\"/fg_weekly/tpl/header.jpg\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; margin: 0 auto; Margin: 0 auto; float: none; text-align: center\" /> </th></tr></tbody></table></th> </tr></tbody></table> <table id=\"x_-1163917907content\" class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-12 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-bottom: 16px; width: 564px; padding-left: 16px; padding-right: 16px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"20px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 20px; line-height: 20px\">&nbsp;</td></tr></tbody></table> <p class=\"x_-1163917907text-right\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; text-align: right; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"http://fortiguard.com/resources/threat-brief\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">View this article online</a></p> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"10px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 10px; line-height: 10px\">&nbsp;</td></tr></tbody></table> <div id=\"x_-1163917907doc\" style=\"\"> <h1 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 20px; color: rgb(82, 82, 82); text-align: left\">Activity Summary - Week Ending Oct 07, 2022</h1> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>Delivery of Malware: A Look at Phishing Campaigns in Q3 2022 -</strong> Entering the second half of 2022, phishing attacks and campaigns continue to be the top threats targeting users and organizations, using a variety of techniques. Following our observations posted last quarter, FortiGuard Labs has continued to track many malware families, including Emotet, Qbot, and Icedid. We continue to find malicious files being delivered via phishing emails using Microsoft Excel files, Microsoft Word Documents, Windows shortcut files, and ISO image files.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">This blog helps organizations identify and prevent phishing attacks and infections by&nbsp;providing&nbsp;some of the most common details and techniques used by these malicious files for malware deployment.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/blog/threat-research/delivery-of-malware-phishing-campaigns-in-q3-2022\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">[Continue reading]</a></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <h2 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 18px; color: rgb(82, 82, 82); text-align: left\">Top 5 Application Vulnerabilities / IPS</h2> <table style=\"padding: 0; vertical-align: top; text-align: left; width: 100%; border-collapse: collapse; border-color: grey; border-spacing: 2px; margin: 5px auto\"> <tbody> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>Rank</strong></p> </td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>Name</strong></p> </td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>%</strong></p> </td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">1</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">Apache.Log4j.Error.Log.Remote.Code.Execution</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">21</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">2</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">Generic.XXE.Detection</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">20</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">3</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">D-Link.Devices.HNAP.SOAPAction-Header.Command.Execution</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">20</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">4</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">TCP.Split.Handshake</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">19</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">5</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">PHPUnit.Eval-stdin.PHP.Remote.Code.Execution</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">19</td> </tr> </tbody> </table> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>New Kaiji Modular Malware Variant &quot;Chaos&quot; Targets Europe –</strong> FortiGuard Labs is aware of a new modular malware variant called &quot;Kaiji&quot;. This variant&nbsp;targets Windows and Linux machines and devices that belong&nbsp;to both&nbsp;consumers and enterprises in Europe. Dubbed &quot;Chaos&quot;, the malware connects to command and control (C2) servers and performs various activities, such as&nbsp;launching Distributed Denial of Service (DDoS) attacks and mining crypto currencies.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">This is significant because the Chaos malware targets its victims by exploiting various vulnerabilities. Infected machines join a botnet that is then&nbsp;used for malicious activities such as DDoS attacks and cryptocurrency mining.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortiguard.com/threat-signal-report/4774/new-kaiji-modular-malware-variant-chaos-targets-europe\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">[Continue reading]</a></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><em>Signatures:</em><br /> <strong>IPS:<br /> Huawei.HG532.Remote.Code.Execution (CVE-2017-17215)<br /> ZyXEL.Firewall.ZTP.Command.Injection (CVE-2022-30525)<br /> F5.BIG-IP.iControl.REST.Authentication.Bypass (CVE-2022-1388)</strong></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>Anti-Virus:<br /> Linux/Kaiji.C!tr<br /> W32/Ransom_Foreign.R002C0WG222<br /> W32/PossibleThreat</strong></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <h2 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 18px; color: rgb(82, 82, 82); text-align: left\">Top 5 Malware Activity</h2> <table style=\"padding: 0; vertical-align: top; text-align: left; width: 100%; border-collapse: collapse; border-color: grey; border-spacing: 2px; margin: 5px auto\"> <tbody> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>Rank</strong></p> </td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>Name</strong></p> </td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px; background-color: rgb(39, 83, 105)\"> <p style=\"font-family: Helvetica, Arial, sans-serif; padding: 0; margin: 0; Margin: 0; Margin-bottom: 10px; font-size: 10px; line-height: 14px; text-align: left; font-weight: normal; margin-bottom: 0; color: rgb(255, 255, 255)\"><strong>%</strong></p> </td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">1</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">W32/Alllu.A!tr</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">40</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">2</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">W32/Inject.ZYD!tr</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">17</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">3</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">W32/Flystud.RN!tr</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">15</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">4</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">W32/VBNA.HLT!worm</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">15</td> </tr> <tr style=\"padding: 0; vertical-align: top; text-align: left; background-color: rgb(241, 241, 241)\"> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">5</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">W32/LdPinch.FBW!tr.pws</td> <td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; padding: 2px\">14</td> </tr> </tbody> </table> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>Ransomware Roundup: Bisamware and Chile Locker –</strong> Biweekly, FortiGuard Labs gathers data on ransomware variants of interest that have been gaining traction within the OSINT community, as well as&nbsp;our datasets. The Ransomware Roundup report aims to provide readers with brief insights into the evolving ransomware landscape, and the Fortinet solutions that protect against those variants.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">This latest edition of the Ransomware Roundup covers the Bisamware and Chile Locker ransomware.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">Bisamware is a Windows-focused ransomware that is reportedly being distributed through Microsoft Word files designed to exploit CVE-2022-30190. This vulnerability is in Microsoft Support Diagnostic Tool (MSDT) and abuses the MSDT URI scheme to download and run a malicious payload.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">Chile Locker is a recently reported ransomware. Chile&#39;s CSIRT team issued an alert about this variant at the end of August 2022, stating that it had affected a government service in Chile on August 25th. Despite the warning, Chile Locker variants were subsequently submitted to VirusTotal from Canada, Mexico, Romania, China, the UK, Spain, Uruguay, Netherland, Russia, Poland, Malaysia, and the U.S., which indicates that the ransomware attacker did not specifically target Chile.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/blog/threat-research/ransomware-roundup-bisamware-and-chile-locker\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">[Continue reading]</a></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><em>Signatures:</em><br /> <strong>W64/Bisamware.A!tr.ransom<br /> W32/Agent.BNQ!tr.ransom<br /> W64/Agent.BNQ!tr.ransom<br /> BAT/Starter.8E92!tr<br /> PossibleThreat.PALLASNET.H</strong></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">&nbsp;</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>Leveraging Microsoft Office Documents to Deliver Agent Tesla and njRat –</strong> We recently found some malicious Microsoft Office documents that attempted to leverage legitimate websites-&nbsp;MediaFire and Blogger-&nbsp;to&nbsp;execute a shell script and then drop&nbsp;two malware variants of Agent Tesla and njRat. Agent Tesla is a well-known spyware,&nbsp;first discovered in 2014, that&nbsp;can steal personal data from web browsers, mail clients, and FTP servers, collect screenshots and videos, and capture clipboard data. njRat,&nbsp;also known as Bladabindi,&nbsp;is a remote agent Trojan that was first discovered in 2013. It&nbsp;is capable of remotely controlling a victim&#39;s device to log keystrokes, access the camera, steal credentials stored in browsers, upload/download files, manipulate the registry, and more.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">In this article, we will provide details of the documents we discovered, the&nbsp;embedded scripts used to deliver a payload, and the behavior of these malware variants.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/blog/threat-research/leveraging-microsoft-office-documents-to-deliver-agent-tesla-and-njrat\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">[Continue reading]</a></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><em>Signatures:</em><br /> <strong>VBA/Agent.AIN!tr<br /> MSIL/Agent.CJX!tr.spy<br /> MSIL/Agent.CWR!tr<br /> MSIL/VXS!tr<br /> MSIL/CoinMiner.BMT!tr<br /> PowerShell/Agent.GJ!tr<br /> JS/SnakeKeylogger.A!tr.dldr</strong><br /> <strong>PowerShell/Agent.AMM!tr</strong></p> <h2 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 18px; color: rgb(82, 82, 82); text-align: left\">&nbsp;</h2> <h2 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 18px; color: rgb(82, 82, 82); text-align: left\">Zero-Day Research</h2> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><strong>Microsoft Exchange 0-Day Vulnerability Updates –</strong> On September 28, 2022, GTSC, a cybersecurity company,&nbsp;released a blog detailing an exploit attempt on a system they were monitoring. After analysis, they were able to locate and submit two bugs to Microsoft via the Zero Day Initiative (ZDI-CAN-18333 (CVSS 8.8) and ZDI-CAN-18802 (CVSS 6.3)).</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">Microsoft validated the findings and CVE-2022-41040 and CVE-2022-41082 were assigned to the vulnerabilities. CVE-2022-41040 is a Server-Side Request Forgery (SSRF) vulnerability and CVE-2022-41082 allows for remote code execution (RCE) where PowerShell is available.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\">This blog describes what you need to know about these vulnerabilities.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/blog/threat-research/microsoft-exchange-zero-day-vulnerability-updates\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">[Continue reading]</a></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><em>Signatures: </em><strong>MS.Exchange.Server.Autodiscover.Remote.Code.Execution</strong></p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; color: rgb(82, 82, 82)\"><em>Indicator(s):<br /> 125[.]212[.]220[.]48<br /> 5[.]180[.]61[.]17<br /> 47[.]242[.]39[.]92<br /> 61[.]244[.]94[.]85<br /> 86[.]48[.]6[.]69<br /> 86[.]48[.]12[.]64<br /> 94[.]140[.]8[.]48<br /> 94[.]140[.]8[.]113<br /> 103[.]9[.]76[.]208<br /> 103[.]9[.]76[.]211 </em></p> <h2 style=\"padding: 0; margin: 0; Margin: 0; line-height: 1.3; font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin-bottom: 10px; Margin-bottom: 10px; font-size: 18px; color: rgb(82, 82, 82); text-align: left\">&nbsp;</h2> </div> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <hr /> </th></tr></tbody></table></th> </tr></tbody></table> <table id=\"x_-1163917907tool\" class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; width: 564px; padding-left: 16px; padding-right: 16px; padding-bottom: 6px\" class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-12 x_-1163917907last x_-1163917907first\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; margin-bottom: 10px; Margin-bottom: 10px; font-size: 14px; color: rgb(82, 82, 82); line-height: 20px\">Validate your network&#39;s security accuracy, application usage and performance with a <strong>Fortinet Cyber Threat Assessment</strong>.</p> <p style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; margin-bottom: 10px; Margin-bottom: 10px; font-size: 14px; color: rgb(82, 82, 82); line-height: 20px\"> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/ctap\" class=\"x_-1163917907link\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(220, 41, 30); text-decoration: none\">Request Assessment »</a> </p> </th></tr></tbody></table></th> </tr></tbody></table> <table id=\"x_-1163917907footer\" class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th id=\"x_-1163917907links\" class=\"x_-1163917907columns x_-1163917907small-7 x_-1163917907large-7 x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; width: 322.3333px; padding-right: 8px; padding-left: 16px; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\">\n<th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <hr /> <table class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; display: table; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-3 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 25%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\">\n<th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <p class=\"x_-1163917907text-left\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; text-align: left; font-size: 11px\"><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"http://www.fortinet.com\" class=\"x_-1163917907link\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(220, 41, 30); text-decoration: none\">www.fortinet.com</a></p> </th>\n<th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-6 x_-1163917907last\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 50%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\">\n<th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> </th>\n<th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-9 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 75%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <p class=\"x_-1163917907text-right\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; text-align: right; font-size: 11px\">Questions? <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/corporate/about-us/contact-us\" class=\"x_-1163917907link\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(220, 41, 30); text-decoration: none\">Contact Us</a></p> </th></tr></tbody></table></th> </tr></tbody></table></th>\n</tr></tbody></table></th>\n</tr></tbody></table> </th>\n<th class=\"x_-1163917907expander\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; visibility: hidden; width: 0; padding: 0\"></th>\n</tr></tbody></table></th> <th class=\"x_-1163917907columns x_-1163917907small-5 x_-1163917907large-5 x_-1163917907last\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; width: 225.6667px; padding-left: 8px; padding-right: 16px; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\">\n<th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; display: table; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th class=\"x_-1163917907columns x_-1163917907small-2 x_-1163917907large-2 x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 16.6667%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://twitter.com/fortiguardlabs?lang=en\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\"> <img src=\"/fg_weekly/tpl/twitter.png\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; border: none\" /> </a> </th></tr></tbody></table></th> <th class=\"x_-1163917907columns x_-1163917907small-2 x_-1163917907large-2\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 16.6667%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.facebook.com/FortiGuard.Labs/\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\"> <img src=\"/fg_weekly/tpl/facebook.png\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; border: none\" /> </a> </th></tr></tbody></table></th> <th class=\"x_-1163917907columns x_-1163917907small-2 x_-1163917907large-2\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 16.6667%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.linkedin.com/showcase/fortiguard-labs/\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\"> <img src=\"/fg_weekly/tpl/linkedin.png\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; border: none\" /> </a> </th></tr></tbody></table></th> <th class=\"x_-1163917907columns x_-1163917907small-2 x_-1163917907large-2\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 16.6667%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.fortinet.com/rss-feeds.html?elqTrackId=cd78c3051ede4483b89ff39803213a04&amp;elqTrack=true\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\"> <img src=\"/fg_weekly/tpl/feed.png\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; border: none\" /> </a> </th></tr></tbody></table></th> <th class=\"x_-1163917907columns x_-1163917907small-2 x_-1163917907large-2 x_-1163917907last\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-left: 0; padding-right: 0; width: 16.6667%; padding-bottom: 2px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <table class=\"x_-1163917907spacer\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td height=\"5px\" style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 5px; line-height: 5px\">&nbsp;</td></tr></tbody></table> <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://www.youtube.com/playlist?list=PLLbbcH8MnXJ5rQsQPyRt0n54ZJcsscyh9\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\"> <img src=\"/fg_weekly/tpl/youtube.jpg\" style=\"outline: none; text-decoration: none; width: auto; max-width: 100%; clear: both; display: block; border: none\" /> </a> </th></tr></tbody></table></th> </tr></tbody></table> </th>\n<th class=\"x_-1163917907expander\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3; visibility: hidden; width: 0; padding: 0\"></th>\n</tr></tbody></table></th> </tr></tbody></table> <table id=\"x_-1163917907unsubscribe\" class=\"x_-1163917907row\" style=\"border-spacing: 0; border-collapse: collapse; vertical-align: top; text-align: left; padding: 0; width: 100%; display: table\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"> <th class=\"x_-1163917907columns x_-1163917907small-12 x_-1163917907large-12 x_-1163917907last x_-1163917907first\" style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; text-align: left; font-size: 16px; line-height: 1.3; margin: 0 auto; Margin: 0 auto; padding-bottom: 16px; width: 564px; padding-left: 16px; padding-right: 16px\"><table style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; text-align: left; width: 100%\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><th style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> <p style=\"color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; margin-bottom: 10px; Margin-bottom: 10px; font-size: 11px\">You received this email because you are subscribed to Weekly FortiGuard Update from Fortinet, Inc. This email was sent to soporte@browniespain.com. To unsubscribe please update the subscription settings in your <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://support.fortinet.com/\" style=\"font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; line-height: 1.3; color: rgb(33, 153, 232); text-decoration: none\">support</a> account</p> </th></tr></tbody></table></th> </tr></tbody></table> <table class=\"x_-1163917907container\" style=\"border-spacing: 0; border-collapse: collapse; padding: 0; vertical-align: top; background: rgb(254, 254, 254); width: 580px; margin: 0 auto; Margin: 0 auto; text-align: inherit\"><tbody><tr style=\"padding: 0; vertical-align: top; text-align: left\"><td style=\"border-collapse: collapse; vertical-align: top; color: rgb(10, 10, 10); font-family: Helvetica, Arial, sans-serif; font-weight: normal; padding: 0; margin: 0; Margin: 0; text-align: left; font-size: 16px; line-height: 1.3\"> </td></tr></tbody></table>\n</td></tr></tbody></table>\n</center> </td> </tr> </tbody></table> </div>",
  "display_key": {
    "value": "1208",
    "display_value": "1208"
  },
  "due_by_time": null,
  "is_reopened": false,
  "maintenance": null,
  "subcategory": {
    "id": "10918000000406278",
    "name": "Others"
  },
  "created_time": {
    "value": "1665181536727",
    "display_value": "Oct 8, 2022 12:25 AM"
  },
  "deleted_time": null,
  "is_escalated": false,
  "request_type": {
    "id": "10918000000010007",
    "name": "Incidencia"
  },
  "time_elapsed": "0",
  "assigned_time": {
    "value": "1665386025708",
    "display_value": "Oct 10, 2022 09:13 AM"
  },
  "resolved_time": null,
  "completed_time": null,
  "responded_time": null,
  "approval_status": null,
  "has_attachments": false,
  "unreplied_count": 0,
  "last_updated_time": {
    "value": "1665386038840",
    "display_value": "Oct 10, 2022 09:13 AM"
  },
  "linked_to_request": null,
  "is_service_request": false,
  "completed_by_denial": false,
  "email_ids_to_notify": [],
  "has_linked_requests": false,
  "notification_status": null,
  "cancel_flag_comments": null,
  "cancellation_requested": false,
  "is_first_response_overdue": false,
  "request_template_task_ids": [],
  "workflow_instance_details": null,
  "entity_instance_properties": [],
  "first_response_due_by_time": null,
  "request_template_checklist_ids": []
}