---
title: "Cyber Security News Update, Week 52 of 2020 | DuoCircle"
description: "Yet again, cybersecurity becomes a sensational topic."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/"
---

Quick Answer

Week 52, 2020 cyber news: Goontact spyware hits Android and iOS via third-party escort sites in Japan and Korea, stealing contacts, texts, photos, and location for extortion; Facebook removes 274 accounts and pages tied to Russian IRA and French military influence operations in Africa and the Middle East; Israeli vendor Cellebrite claims its Physical Analyzer can decrypt Signal messages; Avast finds 28 malicious Chrome and Edge extensions installed by 3 million users; Bronze Bit (CVE-2020-17049) abuses Kerberos forwardable-flag signing weakness across all Windows versions since 2000 (Dec 8 patch fixes it); Indian defense supplier ELCOM Innovations loses \~$6.7M after employee email accounts were accessed.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2052%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2052%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2052%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/12/smtp-service-8906.jpg) 

Yet again, cybersecurity becomes a sensational topic. With _encrypted apps getting compromised and nations launching cyber espionage_, the news headlines are filled with instances of [ransomware protection](/advanced-threat-defense) getting overthrown by cyber adversaries. Here are some of the most crucial cyber headlines from this past week.

## [![spyware Goontact](https://media.mailhop.org/duocircle/images/2020/12/smtp-relay-6842.jpg)](https://media.mailhop.org/duocircle/images/2020/12/smtp-relay-6842.jpg)

## Beware Of Goontact Malware On Android And iOS Versions

_A new malware strain has been targeting Android and iOS devices, which illegally collects data from victims_. These include their contacts, texts, phone identifiers, photos, and location information. The [spyware Goontact](https://www.zdnet.com/article/new-goontact-spyware-discovered-targeting-android-and-ios-users/?&web%5Fview=true) is spread through third-party sites providing escort services. Allegedly, Chinese threat actors are spreading Goontact in countries like Japan and Korea.

_The malware is yet to reach Apple and Google app stores_, which implies that affected users have probably downloaded Goontact from third-party sites. The compromised data will likely be used later for extortion campaigns. As a **ransomware protection** measure, Google and Apple have been notified of the new malware strain. While Apple has blacklisted the apps used to propagate Goontact, Play Protect shall warn Android users of Goontact variants installed on their phones. As internet users, _we must regularly update all patches and only hope to escape such dreadful malware strains_!

## French & Russian Facebook Interference Campaigns Detected

_The social networking giant Facebook has recently suspended 274 Facebook accounts_, 18 Instagram accounts, and several groups and pages linked to the Russian Internet Research Agency and the French military. The three networks (two Russian and one French) were found launching [interference campaigns](https://www.securityweek.com/facebook-closes-disinformation-accounts-linked-french-military?&web%5Fview=true) in Africa.

Since the three networks _violated Facebook’s cybersecurity norms and privacy policy against government interference_, Facebook was quick to remove them altogether. The two campaigns mainly targeted countries in North Africa and the Middle East to mislead people about their identity and intentions. Law enforcement has been cued in about the security incident as part of Facebook’s endeavors to create a safe platform for its users.

## Users on Guard As Cellebrite Announces Its Ability to Access Signal Messages

_Products of the Israeli phone-hacking firm Cellebrite are used widely by law enforcement agencies_ to unlock devices and access data stored on them. However, Cellebrite has also been condemned for rendering services to nations with poor human rights records. China, for instance, used **Cellerbite services to spy** on democracy activists in Hong Kong.

In a recent blogpost, Cellebrite has announced its ability to decrypt the data exchanged on Signal. Signal is considered an impenetrable platform (with end-to-end encryption) for sharing data, often used by journalists. But Cellebrite’s new product, [Physical Analyzer](https://www.haaretz.com/israel-news/tech-news/.premium-israeli-spy-tech-firm-says-it-can-break-into-signal-app-previously-considered-safe-1.9368581?&web%5Fview=true), comes with a feature that can decrypt even texts exchanged on Signal. Cellebrite says that criminals are using Signal to carry forward their destructive plans, and hence, this new product is their way of **ensuring cybersecurity**.

## Avast Report Finds Malicious Extensions On Chrome & Edge

_A recent Avast report has found that over three million internet users were redirected to malicious sites via_ [_Chrome and Edge extensions_](https://www.zdnet.com/article/three-million-users-installed-28-malicious-chrome-or-edge-extensions/?&web%5Fview=true). Users unknowingly installed over 15 Chrome and 13 Edge extensions. These malicious codes usually lead users to ads and **phishing sites** and steal their personal information (DOB, email ids, etc.) and browsing history. In worst cases, they download more malware into a user’s system.

[![email security services](https://media.mailhop.org/duocircle/images/2020/12/sendgrid-alternative-7934.jpg)](https://media.mailhop.org/duocircle/images/2020/12/sendgrid-alternative-7934.jpg)

_Avast has informed Google and Microsoft about the malicious extensions_, but so far, only three Chrome extensions have been removed, and all the Edge extensions remain operational. Google and Microsoft are investigating the report from Avast and have made no comment so far. While the issue gets settled, users must consider using [email security services](/) and uninstall the extensions from their browsers for safety.

## Kerberos Vulnerable To Bronze Bit Attacks

A variant to the Golden Ticket and Silver Ticket attacks, Bronze Bit is a new attack exploiting the CVE-2020-17049 **vulnerability in network** authentication protocol Kerberos. Exploiting this vulnerability, the adversaries can [access hashed passwords](https://web.archive.org/web/20220808062520/https://cyware.com/news/the-bronze-bit-attack-can-bypass-kerberos-protocol-7853a276) and even compromise the login credentials of systems using the same network. However, this is subject to the systems being on the same Kerberos authentication protocol network.

_The vulnerability is serious because Kerberos computer-network authentication protocol has been incorporated in all official Windows versions since 2000_. What enhances the vulnerability further is that Kerberos cannot trace the tampered tickets because the Forwardable flag is not signed. It’s natural to be worried if you are a Windows user, but updating the Microsoft patch from 8th December 2020 should help fix the security flaw (CVE-2020-17049). Users must also consider investing in **email authentication services** for better cybersecurity.

## ELCOM Innovations Loses Rs. 50 Crores (About $6.7M) To Cyber Attack

_A Noida-based Indian tech company, ELCOM Innovations, recently underwent a significant cyberattack_ that compromised many of the company’s critical and classified data. A senior executive at ELCOM lodged a First Information Report with the authorities, informing them that a few of their employees’ email accounts were illegally accessed.

Elcom Innovations provides services mainly to Indian Para Military Forces, Defence Forces, and Intelligence Agencies. Although the nature of records breached hasn’t been specified, _the company has lost several sensitive files with an estimated financial loss of around Rs. 50 Crore (\~ $6.7 Million)_.

The Cyber Cell of the police has begun their investigations, and the results are what concern us. ELCOM may have used **cybersecurity tools**, but when an insider trades company information, there is not much security shields can do! ELCOM’s reputation is damaged, and there is a huge financial loss to recover.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2052%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-52-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 52 of 2020","description":"Yet again, cybersecurity becomes a sensational topic.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/","datePublished":"2020-12-26T18:01:44.000Z","dateModified":"2025-05-26T13:07:14.000Z","dateCreated":"2020-12-26T18:01:44.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":893,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/12/smtp-service-8906.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 52 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 52 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 52 of 2020","description":"Yet again, cybersecurity becomes a sensational topic.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/","datePublished":"2020-12-26T18:01:44.000Z","dateModified":"2025-05-26T13:07:14.000Z","dateCreated":"2020-12-26T18:01:44.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-52-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":893,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/12/smtp-service-8906.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```