Wednesday, March 09, 2022

We'll Need a Lot of Dry Powder Ready, Says Rock Creek's Doriwala

S & P INDEX: Crossing The Point Where A Short-Term Correction Morphs Into A Longer-Term Down-Trend

  1. Home

Market Extra  

A death cross for the S&P 500 is nearing as inflation fears, Russia’s Ukraine offensive rattles stock-market investors

The Dow and Nasdaq Composite have already produced death cross patterns

The S&P 500 index is closing in on a death cross, an ominous chart pattern that underscores the downtrend suffered in an asset.

A death cross appears when the 50-day moving average crosses below the 200-day moving average, an event that many chart watchers view as marking the spot a shorter-term correction morphs into a longer-term downtrend.

At last check, the S&P 500 index SPX, +2.40% was trading down 0.6%, with its 50-day moving average at 4,508.56 and its 200-day at 4,466.34, a differential of 42.22 points, which it could possibly breach by next week at the current pace of decline.

The approach of a death cross for the broad-market benchmark comes as the Dow Jones Industrial Average DJIA, +1.93% saw a death cross materialize (the 50-day at 34,990.79 fell below the 200-day MA at 35,008.55) in Tuesday trade, with Monday’s nearly 800-point tumble likely hastening that bearish cross.

FactSet, MarketWatch

A number of other assets have seen death crosses materialize, including the technology-laden Nasdaq Composite Index COMP, +3.14% in mid February.

FactSet, MarketWatch

The last time the S&P 500 registered a death cross was nearly two years ago on March 30, 2020, at the height of the pandemic-induced selling. The DJIA saw its death cross materialize at what is widely viewed as stock’s bear-market bottom on March 23, 2020.

It is worth noting that such crosses aren’t necessarily good market-timing indicators, however, as they are well telegraphed, but they can help put a selloff in historical perspective, technicians say.

The decline in the broader market was taking hold, with safe-haven assets, including gold GC00, -2.74% and benchmark 10-year Treasury notes TMUBMUSD10Y, 1.940%, generally drawing bidding, as a intensifying clash in Eastern Europe, raises the prospects of a slowdown in the global economy and a jump in values of commodities.

See: More than a quarter of Nasdaq-100 stocks are in bear markets—Wall Street sees a buying opportunity

Crude-oil futures CL.1, -11.49%, for example, were adding to their climb to the highest prices since 2008, as the U.S. and the U.K. set out to ban purchases of energy from Russia in response to its unprovoked invasion in Ukraine. The European Union, which has grown dependent on Russia crude and natural gas, has said it hopes to wean itself off energy assets out of Moscow by the coming winter.

The geopolitical tensions combined with fears that the U.S. central bank, and other global monetary policy makers, may need to lift interest rates to combat swelling inflationary pressures, was contributing to the market’s bearish overall tone.

On Monday, the Nasdaq Composite finished in a bear market, falling by 20% from its Nov. 19 peak and the Dow industrials notched its first correction, a decline of at least 10% (but no greater than 20%) in over two years."

— Tomi Kilgore contributed to this article          

MUSTANG PANDA: Gone Phishing with Refreshed Lures Targeting European Diplomats

Chinese phishing actors consistently targeting EU diplomats

briefcase

  • March 9, 2022
  • 02:02 AM

"The China-aligned group tracked as TA416 (aka Mustang Panda) has been consistently targeting European diplomats since August 2020, with the most recent activity involving refreshed lures to coincide with the Russian invasion of Ukraine.

According to a new report by Proofpoint, TA416 spearheads cyber-espionage operations against the EU, consistently focusing on this long-term role without reaping opportunistic gains.

By keeping their tools and tactics essentially unchanged since 2020 and only refreshing their phishing themes and peripheral components, TA416 has made attribution simple for the analysts.

Timeline of activity

Starting in August 2020, the phishing actors impersonated EU-based organizations to target governments in the continent.

Email impersonating a UN agent
Email impersonating a UN agent (Proofpoint)

The malicious emails used a DropBox URL to deliver a variant of the PlugX malware, which was previously deployed in attacks against Australian organizations.

In November 2021, TA416 added hidden image trackers on emails to validate message openings and follow a more targeted approach in their campaign.

On January 17, 2022, Proofpoint noticed new delivery attempts involving ZIP files that were custom-named to match the target’s interests.

January 2022 phishing email
January 2022 phishing email (Proofpoint)

A change in tactic also occurred at this point, as the ZIP files weren’t fetched from a cloud hosting service but instead leveraged a dropper malware executable.

The four components downloaded this way were the PlugX malware, its loader, the DLL search order hijacker (process loader), and a PDF decoy file.

Finally, on February 28, 2022, the Chinese threat actors were spotted using a compromised diplomat’s address to target other top-ranking officials of NATO countries with lures involving the Russian invasion of Ukraine.

The most recent phishing lure linked to TA416
The most recent phishing lure linked to TA416 (Proofpoint)

The compromised person worked in refugee and migrant services, an area that was recently targeted by Belarusian hackers as well.

Superficial changes

While the tactics, malware drop, installation, and loading methods remain constant across campaigns, Mustang Panda puts some effort into regularly changing the components used.

“The group uses different legitimate PE files to initiate side-loading, as well as a variety of PlugX DLL loaders including the PotPlayer and DocCon versions,” elaborates the Proofpoint report.

“TA416 also uses different variants of the final PlugX payload in which the communication routines are observed to be different when closely analyzed.”

However, too many elements form a common ground between 2020, 2021, and 2022 campaigns, as reflected in the following table.

Common TA416 tactics throughout the years
Common TA416 tactics throughout the years (Proofpoint)

As Proofpoint’s report underlines in conclusion, these superficial variations will continue unabated, especially now that a fresh set of indicators of compromise has been published, so vigilance and good email security practices are advised to all potential targets.

Related Articles:

Google: Russia, China, Belarus state hackers target Ukraine, Europe

Emotet growing slowly but steadily since November resurgence

Google: Chinese hackers target Gmail users affiliated with US govt

Adafruit discloses data leak from ex-employee's GitHub repo

Russia-Ukraine war exploited as lure for malware distribution

US intelligence leaders testify before House Intelligence Committee

ARIZONA DEMO-CRAZY: Gerrymandering Sets Up A 2-Way Far-Right Fringe-Femme Fatale Smackdown

Who's running now against each other in the August Primary Election - Rogers and Townsend have been close political allies who late last year found themselves drawn into the same legislative district, despite living hundreds of miles apart.
Rather than face off in 2022, Townsend opted to declare her candidacy for a southern Arizona congressional district — that she doesn’t live in — and Rogers swiftly endorsed her

Wendy Rogers refuses to condemn white nationalist leader after GOP senator challenges her

"A day after the Arizona Senate voted to censure Flagstaff Republican Wendy Rogers for comments she made at a white nationalist conference and a string of inflammatory social media posts, another one of her colleagues challenged her to condemn those she had praised in a fiery speech on the Senate floor. 

“I contend that this is unbecoming rhetoric, it is inappropriate rhetoric,” Sen. Kelly Townsend, R-Mesa, said on the Senate floor Wednesday. . .

“I received ugly blowback from people on my side,” Townsend said. “Like being in a piranha tank — but I’m not afraid of the piranha tank anymore.”

Townsend herself is no stranger to controversy. In 2019, Townsend toured the border with the extremist group AZ Patriots whose leader walked around the Arizona State Capitol with a “kekistan” flag, a white nationalist symbol used to troll liberal events. 

And last year, Townsend compared vaccine supporters to Nazis and sharing an image of needles in the shape of a swastika on social media. When the Anti-Defamation League sharply criticized her rhetoric, Townsend rebuked the 108-year-old Jewish organization. “Learn your history,” she retorted."

 

 

 

 

 

 

 

Ζ (Costa Gavras) - Trailer

Zorro