Hello and welcome to the Wednesday, November 6, 2020, 4 edition of the Sansanet Storm Center's Stormcast.

My name is Johannes Ulrich and the name I'm recording from Riyadh, Saudi Arabia.

Xavier today took a look at some a little bit older Python map that still has a fairly low virus total score with only

three antivirus engine that's actually detecting it.

It's a relatively standard malware with the usual remote administrator type features,

but one feature that kind of sticks out is that in addition to just

doing simple screenshots, this malware can actually live stream the victim's desktop to a video

server set up by the hacker. This takes advantage of a standard Python library and according to a quick demo that

Xavi recorded and you can see that in the diary does work quite well and actually provides a

quite good quality of the video that's being streamed from the victim's desktop. And that hacker could,

of course, always also record these streams and then later review them for any potentially

leaked information. And Google released its monthly update for Android for November. This particular update is significant

because it does fix two already exploited vulnerabilities. One of the vulnerabilities is approach

escalation vulnerability in the framework. The second one affects Qualcomm components and Google refers here to Qualcomm's

upcoming bulletin for more details. Haven't seen that being published yet, but this one is also

rated high-end, well, it's a kernel component.

So as usual, Android users should update quickly as these updates become available for their particular phone.

And in the past, attackers have often used very large and sometimes artificially inflated files in order to prevent anti-malver

solutions from scanning malicious files. Looks like according to researchers from Securonics

that, well, the hackers have sort of pushed that a little bit further now by actually

delivering an entire Linux virtual machine.

Now, this Linux virtual machine comes including the QEMO emulation environment, very popular

...