Saturday, July 01, 2023

4th Night of Nation-Wide Unrest

 

LIVE
New
New

Fires rage as police detain nearly 1,000 on fourth night of French protests

French police arrest hundreds during protests
03:29 - Source: CNN
Paris, FranceCNN — 

Fires raged across protest sites in France and nearly 1,000 people were detained as violent demonstrations over the killing of a 17-year-old shot by police entered a fourth night.

Protests continued into the early morning of Saturday in defiance of a ban announced a day earlier on all “large-scale events” in the country, with rioting breaking out in several cities, CNN affiliate BFMTV reported.

France’s Interior Ministry said Saturday 994 people had been detained following the fourth night of violence. It said 2,560 fires had been reported on public roads, with 1,350 cars burned, and there had been 234 incidents of damage or fire in buildings.

Seventy-nine police and gendarmes were injured over Friday night and there had been 58 attacks on police and gendarme stations, it added.

Social media videos of scenes in Lyon, geolocated by CNN, showed rapid gunfire from an automatic rifle at night, fireworks being released at a protest and demonstrators next to burning fires.

There was an explosion in the Old Port of Marseille on Friday evening, according to BFMTV, but no casualties had been reported. It also shared video showing damage to the Alcazar library in Marseille which it said had been vandalized during the night.

The continued violence comes despite French police deploying 45,000 officers, special units, armored vehicles and helicopters across the country on Friday.

The country’s interior minister, Gerald Darmanin, had previously told BFMTV that that the violence had become a “lot less intense” and the situation in the Paris region calmer, though he said things remained tense in Marseille and Lyon.

Darmanin said in a tweet that reinforcements would be sent to Marseille following reports by the local mayor of violence and looting.

Marseille mayor Benoit Payan had tweeted late Friday night that the scenes were “unacceptable” and called upon the state to “immediately send additional law enforcement forces.”

The previous night, 917 people had been detained, among them children as young as 13, Darmanin told French TV channel TF1.

Why are people protesting?

The unrest in France is a response to the death of 17-year-old Nahel, who was shot dead during a traffic stop Tuesday morning in the Paris suburb of Nanterre.

A funeral for Nahel is scheduled to take place on Saturday at 11 a.m. local time (5 a.m. ET).

Footage of the incident filmed by a bystander showed two officers standing on the driver’s side of the car, one of whom fired his gun at the driver despite not appearing to be in any immediate danger.

The officer has said he fired his gun out of fear that the boy would run someone over with the car, according to Nanterre prosecutor Pascal Prache.

The officer currently faces a formal investigation for voluntary homicide and has been placed in preliminary detention.

Despite calls from top officials for patience to allow time for the justice system to run its course, a sizable number of people across France remain shocked and angry, especially young men and women of color who have been victims of discrimination by police. Nahel was of Algerian descent.

Looting is taking place amid the riots, French authorities say.

Protests appear even to have spread to overseas French territories.

A man was killed by a “stray bullet” during riots in Cayenne, the capital of French Guiana, on Thursday evening, according to a statement from the city’s mayor.

“The situation is worrisome with the violent riots that have been ongoing in mainland France for several days. Our territory must not be engulfed in this spiral of violence,” the statement read.

Authorities in Réunion, a French territory in the Indian Ocean, said Saturday that at least 28 people had been detained in riots there, while five police officers and a gendarme were injured.

Darmanin has said that the death of Nahel “cannot justify the disorder and the delinquency,” while French Justice Minister Éric Dupond-Moretti has called for “firm sanctions” against the rioters and said that “justice was not achieved by looting, smashing public establishments and attacking people.”

State of emergency ‘not necessary’: Elysée

This level of unrest and rioting has not been seen in France since 2005, when the deaths of two teenage boys who were hiding from police sparked weeks of rioting and prompted the government to call a state of emergency.

But the French government has so far resisted calling a state of emergency this time around.

A spokesperson for the Elysée said Friday that a state of emergency was “not necessary” and that a “gradual response” to the violence seen in recent days was “more appropriate.”

The spokesperson noted that the 2005 state of emergency was called “after about nine days of violence,” adding that the law surrounding it was an “exception” that should be used only “when the situation on the ground requires it.”

“This is not the revolt of neighborhoods. This is not about disenfranchised neighborhoods. This is the action of a delinquent minority,” the spokesperson said, denying there was any racial motivation behind the shooting and insisting it was an “individual act” that did not represent the police at large.

France sees fourth consecutive night of nationwide unrest

PROXY JACKING: Low-effort and High-reward Tactic of Leeching compromised Devices' Resources

Akamai first spotted the attacks on June 8 after multiple SSH connections were made to honeypots managed by the company's Security Intelligence Response Team (SIRT). 
What is proxy jacking?
  • Proxyjacking is a new phenomenon brought on by the growth and use of proxyware services in the last couple of years. A proxyware service is a totally legitimate and nonmalicious application or software that you can install on your internet-connected devices. 
  • When you run it, you share your internet bandwidth with others who pay to use your IP address. These services, such as IPRoyal, Honeygain, Peer2Profit, and others, pay for each IP address you share, based on the number of hours you run the application.
  • These services have been used in adware attacks previously reported by Cisco Talos Intelligence Group and AhnLab Security Emergency response Center (ASEC). Proxyware services enable users to make money by sharing their internet connection with others. 
  • As Cisco Talos explained in their blog post, attackers are “leveraging these platforms to monetize the internet bandwidth of victims, similar to how malicious cryptocurrency mining attempts to monetize the CPU cycles of infected systems.”

New proxy jacking attacks monetize hacked SSH servers’ bandwidth

 
  • June 30, 2023
  •  
  • 02:47 PM
  •  
  • 0

Hacker

"Attackers behind an ongoing series of proxyjacking attacks are hacking into vulnerable SSH servers exposed online to monetize them through proxyware services that pay for sharing unused Internet bandwidth.
Like cryptojacking, which allows attackers to use hacked systems to mine for cryptocurrency, proxyjacking is a low-effort and high-reward tactic of leeching compromised devices' resources.
  • However, proxyjacking is harder to detect because it only leeches on hacked systems' unused bandwidth and doesn't impact their overall stability and usability.
While threat actors can also use hacked devices to set up proxies that can help them hide their traces and obfuscate malicious activity, the cybercriminals behind this campaign were only interested in monetization through commercial proxyware services.

"This is an active campaign in which the attacker leverages SSH for remote access, running malicious scripts that stealthily enlist victim servers into a peer-to-peer (P2P) proxy network, such as Peer2Proxy or Honeygain," said Akamai security researcher Allen West.
"This allows for the attacker to monetize an unsuspecting victim's extra bandwidth, with only a fraction of the resource load that would be required for cryptomining, with less chance of discovery."
While investigating this campaign, Akamai found a list containing the IP that started the investigation and at least 16,500 other proxies shared on an online forum.

Proxyware services and Docker containers
  • Akamai first spotted the attacks on June 8 after multiple SSH connections were made to honeypots managed by the company's Security Intelligence Response Team (SIRT).
Once connected to one of the vulnerable SSH servers, the attackers deployed a Base64–encoded Bash script that added the hacked systems to Honeygain's or Peer2Profit's proxy networks.
The script also sets up a container by downloading Peer2Profit or Honeygain Docker images and killing other rivals' bandwidth-sharing containers.
  • Akamai also found cryptominers used in cryptojacking attacks, exploits, and hacking tools on the compromised server used to store the malicious script. This suggests the threat actors have either fully pivoted to proxyjacking or used it for an additional passive income.
"Proxyjacking has become the newest way for cybercriminals to make money from compromised devices in both a corporate ecosystem as well as the consumer ecosystem," West said.
"It is a stealthier alternative to cryptojacking and has serious implications that can increase the headaches that proxied Layer 7 attacks already serve."


This is just one of many similar campaigns that enroll systems they compromise into proxyware services like Honeygain, Nanowire, Peer2Profit, IPRoyal, and others, as Cisco Talos and Ahnlab previously reported.
  • In April, Sysdig also spotted proxyjackers leveraging the Log4j vulnerability for initial access, allowing them to make profits of up to $1,000 for every 100 devices added to their proxyware botnet."

Related Articles: 


Hackers infect Linux SSH servers with Tsunami botnet malware

Hackers use Azure Serial Console for stealthy access to VMs

Friday, June 30, 2023

PRESS RELEASE: The City of Mesa has received over $6,565,000, which includes over $6 million in funding from the U.S. Department of Housing and Urban Development (HUD)

The list of funding recommendations was submitted by Mesa City Council to HUD as part of the City's Annual Action Plan, following a 30-day public comment period and City Council and Human Services Advisory Board public meetings earlier this year. 



Funding Awarded for Housing and Community Development Programs

June 29, 2023 at 9:19 am

facebook sharing button
twitter sharing button
email sharing button
sharethis sharing buttonThe City of Mesa has received over $6,565,000, which includes over $6 million in funding from the U.S. Department of Housing and Urban Development (HUD), for various programs to help Mesa residents in need during the 2023/2024 fiscal year.


The funds awarded by HUD through its Community Development Block Grant (CDBG), Emergency Solutions Grant (ESG) and HOME Investment Partnerships (HOME) programs support housing and community development activities in Mesa that benefit low and moderate-income residents and assist in preventing slum and blighting influences.

 > The City has also announced funding for its Human Services programs, which receive money from the General Fund and the ABC: A Better Community program contributions.

"Mesa appreciates how the federal government is stepping up to find local solutions to issues, especially homelessness, which includes important annual allocations like the HUD funds, said Natalie Lewis, Deputy City Manager. "It also includes once in a generational capital funding from US Treasury launched during the pandemic that will deliver long-term local tools/resources, and cross-agency technical assistance to identify ways to remove barriers that expedite local results."

The list of funding recommendations was submitted by Mesa City Council to HUD as part of the City's Annual Action Plan, following a 30-day public comment period and City Council and Human Services Advisory Board public meetings earlier this year. 



> Mesa allocated the funding to various programs, including homeless and crisis services, food and basic needs, health services, youth services and education, employment training and tax and legal assistance.

Among the allocations:


  • $1 million to the City of Mesa for its Emergency Rehabilitation Program to offer grant assistance to address emergency items in disrepair, such as air conditioners in the summer, water heaters, plumbing and electrical issues impacting the immediate livability of a home
  • $1.5 million to the City of Mesa for its Major Rehabilitation Program, a deferred loan program to address extensive home repairs
  • $300,000 to the City of Mesa for its Utility and Rent Deposit Program
  • $1 million to the City of Mesa to replace playground equipment, upgrade playground surfacing and install shading at Whitman Park, 1750 N. Grand. The project includes ADA accessibility improvements to the playground and surrounding parking area
  • $350,000 to the City of Mesa to install playground equipment and benches, install shading and add playground surfacing to achieve ADA accessibility at Aripine Park, 915 S. Horne
  • $198,258 to Copa Health, Inc. for the Homeless Day Center and Community Court Navigation
  • $100,000 to Child Crisis Arizona for counseling services for the homeless, foster children and youth in Mesa

  • $120,728 to A New Leaf for the East Valley Men's Center

$119,562 to Save the Family Foundation of Arizona for Rapid Rehousing

A complete list of agencies and funding allocations is available on the City's website.

BEA News: Gross Domestic Product by State and Personal Income by State, 3rd Quarter 2025

  BEA News: Gross Domestic Product by State and Personal Income by S...