ZeroFox Daily Intelligence Brief - February 23, 2023

ZeroFox Daily Intelligence Brief - February 23, 2023

ZeroFox Intelligence collects, curates, and analyzes information derived from open and proprietary sources. Please find today’s daily roundup with recommendations that aim to give you and your clients an advantage over the adversary.

Key Findings

• NSA: Best Practices for Securing Your Home Network
• Mozilla Study: Data Privacy Labels for Most Top Apps in Google Play Store are False or Misleading
• Hackers Use Fake ChatGPT Apps to Push Windows, Android Malware

NSA: Best Practices for Securing Your Home Network

The National Security Agency (NSA) has issued detailed guidelines for securing home networks and navigating the online environment safely, which include specific recommendations for teleworkers to ensure their confidentiality on home networks. The advisory features cybersecurity hygiene tips and best practices, including installing the latest software updates, backing up data periodically, disconnecting equipment from the internet when feasible, using personal routers instead of those supplied by internet providers, and utilizing a lower-privileged user account for regular tasks. The NSA also advises securing wireless networks with Wi-Fi Protected Access 3 (WPA3) or WPA2/3 and setting a unique service set identifier (SSID).

Recommendations:

• Follow the cybersecurity best practices recommended by the NSA, such as: ** Upgrade and update all equipment and software regularly, including routing devices. ** Exercise secure habits by backing up data and disconnecting devices when connections are not needed. ** Limit administration to the internal network only.

Mozilla Study: Data Privacy Labels for Most Top Apps in Google Play Store are False or Misleading

A recent study has revealed significant contrast between the Data Safety labels of applications in Google Play Store and the privacy policies of these apps. More specifically, most of these apps' privacy policies explicitly disclose the capture and sharing of consumer data, but the corresponding Data Safety labels failed to reflect this data-use behavior. Play Store Data Safety labeling is a data-transparency initiative by Google to help users understand at a glance how specific applications use their data.

Recommendations:

• Allow the minimum possible privilege and access to applications.
• Consider using data-protection services, such as IDX, to defend against impersonation and other forms of data abuse.
• Dark web monitoring services, including those provided by ZeroFox, can help monitor the potential sharing of your personally identifiable information (PII) on the deep and dark web.

Hackers Use Fake ChatGPT Apps to Push Windows, Android Malware

The growing popularity of ChatGPT has led to the proliferation of fake applications and websites masquerading as premium ChatGPT services. These services, which claim to provide premium or uninterrupted ChatGPT services for free, actually lead users to phishing sites or distribute info-stealing malware such as Redline. These malicious apps often use the official ChatGPT logo and are promoted extensively on Google Play and third-party Android app stores.

Recommendations:

• Remember that ChatGPT is available exclusively at the URL chat.openai[.]com; there is no alternative website or application for it.
• System admins should block access to known malicious URLs that claim to provide access to ChatGPT, such as chat-gpt-pc[.]online, chatgpt-go[.]online, openai-pc-pro[.]online, and pay.chatgptftw[.]com.
• Follow ZeroFox Intelligence to remain up-to-date on emerging threats.