A botnet exploited vulnerabilities in SPF DNS record configurations, compromising 13,000 MikroTik devices and spoofing around 20,000 web domains to spread malware. The result was a widespread spoofing attack carrying malware-laden attachments. It is recommended to avoid permissive SPF configurations, regularly check DNS records, and use Hosted SPF services with Macros in order to prevent such attacks.

Best of the Worst: Five Attacks That Looked Broken (and Worked)
I skipped last week’s roundup. Holiday weekend, family stuff, the usual. So this is a two-week-ish view of what we’ve published in the Threat Intelligence


