Going Old School, Dropping Like Flies, Seeking Out New Territories, Cunning Disguises, Old Foes, and Wiley Adversaries. It's CISO Intelligence for Wednesday, 23rd July 2025. (DRAFT)
How to protect the homestead, self-preservation is a strong motivator, a whole new world, believing lying eyes, when darkness returns, and sneaking through the system.
💡
"Gives me everything I need to be informed about a topic" - __UK.Gov__
Table of Contents
1. The Good, the Bad, and the Encoding: The Wild West of SS7 Bypass Attacks
2. Ding Dong, Two More Gone: The Grim Reality of Ransomware
3. The SOC Files: Rumble in the Jungle or APT41’s New Target in Africa
4. Android's Double-Edged Sword - From VPN to Privacy Leaks
5. The Black Screen of Death Rises Again: Windows 11 Strikes Back!
6. Howling at Vulnerabilities: The Coyote Malware Tale
Sign up for CISO Intelligence.
21st century industry insights for the modern CISO
It won't hurt, I promise.
Email sent! Check your inbox to complete your signup.
No spam. Unsubscribe anytime.
The Good, the Bad, and the Encoding: The Wild West of SS7 Bypass Attacks
_SS7 Attacks: Because apparently villainous plot twists aren’t exclusive to Spaghetti Westerns._
What You Need to Know
As telecom companies battle to secure their networks, new SS7 bypass attack techniques have been surfacing, posing a serious threat. These attacks manipulate an outdated protocol to potentially bypass current defenses. C-suite executives need to fortify their telecom communication strategies and allocate resources for enhancing security against these vulnerabilities.
CISO Focus: Telecom Security, Network Protocol Vulnerability
Sentiment: Negative
Time to Impact: Immediate to Short Term
*
In the shadowy underworld of telecommunications, Signalling System No. 7 (SS7) shows that what you don't know can hurt you. Originally designed for seamless communication between telephone networks globally, it's become a treasure trove for cyber attackers. With SS7 bypass attacks, our digital Spaghetti Western, hackers have found their goldmine through persisting vulnerabilities in one of the world's core communication protocols. It's urgent to break down these uncanny operations and reinforce our defenses before they become the headline act in your organization's cybersecurity scene.
The Threat Landscape
Harking back to its inception in the 1970s, SS7 was never built with today's cyberspace marauders in mind, leaving it a sitting duck for cyber ploys. This covert protocol, while enabling telecom interaction across borders, massively lacks in the security department.
* Core Vulnerabilities: Attacks exploiting SS7 vulnerabilities can intercept calls, siphon sensitive login credentials, manipulate user accounts, and even conduct financial fraud. The old protocol’s misconfiguration offers a backdoor for such exploits.
* Emerging Bypass Techniques: Attackers continually craft innovative techniques to dodge ramped-up defenses. These methods can often slip under the radar, evading detection due to their use of legitimate but maliciously routed SS7 commands, presenting a formidable challenge to security teams.
Immediate Need for Robust Defenses
Given the ongoing evolution of SS7 bypass techniques, the tech community, especially entities relying on extensive telecom networks like financial institutions and service providers, must prioritize reinforcing their security frameworks.
* Implementing Layered Security Measures: Multi-layered security can add resilience against these intrusions. Organizations must ensure real-time monitoring and integrate anomaly detection systems for continuous threat assessment.
* Industry Collaboration: Sharing threat intelligence and developing coordinated response strategies with industry peers can cut down the experimental ground attackers thrive on, reducing the time taken to react and retaliate against such threats.
* Invest in Stateful Firewalls and Advanced Encryption: Employ stateful firewalls that can discern unauthorized SS7 request patterns. Furthermore, encrypt all communications that could intersect with telecom networks to prevent exposure through common attack vectors.
Are You Prepared for a Showdown?
* Telecom Vendor Vetting: Organizations should diligently vet their vendors to ensure compliance with latest security regulations. Ensure that they conduct regular security audits and are transparent about their security protocols.
* Incident Response Readiness: Equip your security teams to promptly detect and mitigate attacks through advanced threat intelligence and hone-in on response times. Educate employees and stakeholders about current threats to foster a vigilant ecosystem.
* Regular Protocol Updates: While SS7 is antiquated, staying abreast of protocol enhancements, such as the Session Initiation Protocol (SIP), could help bridge the security gap left by SS7.
*
Vendor Diligence Questions
1. How frequently do you evaluate and update your security measures against evolving SS7 threats?
2. What specific technologies do you employ to monitor and detect unauthorized SS7 activity?
3. Can you provide evidence of your compliance with global telecom security standards and incident response strategies?
Action Plan
For teams reporting to the CISO, here's an action agenda to mitigate SS7 risks effectively:
Conduct Comprehensive Security Audits: Examine your existing infrastructure for SS7 vulnerabilities.
Enhance Monitoring Systems: Deploy AI-driven security analytics to identify and respond to suspicious SS7 traffic.
Facilitate Cross-Departmental Workshops: Run frequent workshops with relevant teams to ensure everyone is updated on SS7 threat dynamics and defense mechanisms.
In the turbulent telecom landscape, the SS7 story is no less riveting than a classic old Western showdown – and staying prepared might just keep your organization from riding off into a cybersecurity sunset.
*
Source:
1. ENEA. "The Good, the Bad, and the Encoding: An SS7 Bypass Attack." July 14, 2025. Retrieved from <https://www.enea.com/insights/the-good-the-bad-and-the-encoding-an-ss7-bypass-attack>
2. Team Cymru Information Security Articles.
3. Cybersecurity and Infrastructure Security Agency (CISA) Guidelines on SS7 vulnerabilities.
*
Ding Dong, Two More Gone: The Grim Reality of Ransomware
_For when your data has more leverage than you do._
What You Need to Know
Recent events underscore the severe impact of ransomware attacks as two entities have been forced to shut down operations due to uncontainable damage. Executives must evaluate their current cybersecurity frameworks against potential ransomware threats and prioritize the development of robust defense mechanisms and incident response plans. Immediate evaluation and adaptation of cybersecurity strategies are expected at all levels.
CISO focus: Ransomware Preparedness
Sentiment: Strong Negative
Time to Impact: Immediate
*
The Relentless March of Ransomware: Entities Collapse
Two more entities have succumbed to ransomware attacks, joining the unfortunate growing list of organizations unable to recover after cyber criminals breached their defenses. The disquieting trend highlights a terrifying reality—the pervasive nature of ransomware threats and their capability to dismantle even the most established enterprises.
A Looming Threat
Ransomware attacks have transitioned from mere nuisances to full-scale operational disasters. These malevolent cyber events cripple businesses by encrypting vital data, locking out access, and demanding hefty ransoms. For most companies targeted, the resulting financial and operational disruptions often prove catastrophic.
Unpacking the Breaches
In the latest incident, two unidentified entities terminated their operations post-ransomware attack. Extensive encryption of critical data rendered business continuity plans ineffective, forcing both organizations to cease activities. It underscores how critical data recovery strategies and comprehensive defense systems are invaluable lifelines in the digital age.
Financial Ruin and Reputational Damage
The financial losses associated with these attacks extend beyond ransom payments. Downtime, legal ramifications, and shattered consumer trust can debilitate organizations. Market reputation takes a considerable hit, driving potential partners and customers away. In both recent cases, recovery costs coupled with reputation damage outweighed staying operational post-breach.
The Cost of Complacency
While ransomware incidents are rising, the alarming takeaway here is the lack of preparedness among entities. Inadequate defenses, poor incident response protocols, and outdated recovery plans are leaving companies vulnerable. It’s crucial for organizations to abandon complacency and galvanize their cybersecurity measures.
Statistical Uprising
According to Cybersecurity Ventures, global ransomware damage costs are predicted to exceed $265 billion by 2031. The progression of these attacks will see businesses falling at unprecedented rates if stringent actions aren’t adopted. Organizations must commit to constant evolution in both technology and strategy to keep their defenses robust against such insidious threats.
Safeguarding Futures
To prevent the fate of folding post-attack, organizations must:
Implement Multi-layer Security : Enforcing multiple layers of security can significantly delay or deter attack efforts.
Regular Backups : Daily backup of critical information remains an irreplaceable part of any security ecosystem.
Employee Awareness : Training employees to recognize phishing attempts and social engineering ploys is crucial. Cybersecurity is only as strong as its weakest link.
Incident Response Plans : Comprehensive COB and DR plans tailored specifically for ransomware attacks can aid faster recovery.
Regular Audits : Continuously auditing and refining systems ensures alignment to the latest security standards.
In today’s digital battleground, complacency is a luxury no entity can afford. Recent ransomware fatalities remind us that robust defense, proactive planning, and quick recovery are the trifecta of survival. Let these lost entities be lessons, not precedents.
*
Vendor Diligence
1. How does the vendor protect against zero-day ransomware attacks?
2. What is the process for updating and patching vulnerabilities in vendor-provided tools?
3. Can the vendor provide a case study outlining their responses to prior ransomware incidents?
Action Plan
Enhance Monitoring : Utilize advanced threat detection systems for early identification.
Revise Incident Protocols : Update incident response plans, specifically to include ransomware scenarios.
Engage with External Experts : Partner with specialized cybersecurity firms for up-to-date intelligence and audits.
Conduct Simulations : Carry out regular security drills to examine and improve response strategies.
*
Source: Two more entities have folded after ransomware attacks
*
The SOC Files: Rumble in the Jungle or APT41’s New Target in Africa
_When hackers come knocking, even jungle drums aren't loud enough._
What You Need to Know
APT41, a notorious Chinese-speaking cyberespionage group, has recently expanded its target zone to include government IT services in Africa, marking the continent as their newest frontier. With advanced tactics and hardcoded malware, they pose a substantial threat, potentially disrupting multiple sectors. Top executives must enhance existing cybersecurity strategies, focusing on collaboration and threat intelligence sharing to safeguard assets.
CISO focus: Advanced Persistent Threats (APTs)
Sentiment: Strong Negative
Time to Impact: Immediate
*
APT41 Targets Africa: Welcome to the Global Stage
In a striking development, Kaspersky’s Managed Detection and Response (MDR) analysts have uncovered a sophisticated attack against government IT services in Africa, orchestrated by the elusive APT41. Known for its prolifically nefarious cyberespionage activities, APT41 is a Chinese-speaking group that has expanded its reach to a continent previously untouched by its digital machinations.
Who is APT41?
APT41 is no run-of-the-mill threat actor. Emerging from the shadows of cyberspace, this group has historically set its malicious gaze across industries like telecommunications, education, and healthcare in over 42 countries. Their tactics are as varied as the bewilderment they leave in their wake, ranging from deploying advanced malware to exploiting network vulnerabilities with surgical precision.
The African Exploit: Anatomy of an Attack
The underlying architecture of the recent African cyberattack is a testament to APT41’s calculated approach. By embedding hardcoded details like internal service names, IP addresses, and proxy servers into their malware, they successfully traversed digital fortresses. A telltale sign of their handiwork was the compromised SharePoint server, used as a command-and-control point within the victim's infrastructure.
Key Attack Insights:
Malware Design: Custom-crafted to infiltrate specific IT services.
Infrastructure Breach: Leveraged SharePoint servers as vector points.
Infected Sectors: Government operations with speculative threats to energy and telecom.
A New Battleground
Africa, a region previously receiving minimal attention from APT groups, is now on APT41’s radar. The continent stands as a burgeoning digital landscape, ripe for exploitation by opportunistic actors seeking data and strategic advantages.
Why Africa?
Undervalued Target: Limited prior exposure to APT activity presents softer targets.
Strategic Interests: Emerging markets with rapidly digitizing economies.
Resource Exploitation: Potential access to critical infrastructure and data.
Implications and Countermeasures
For Africa's government IT services, the implications of this attack are dire. IT departments must transition from reactive to proactive stances, employing enhanced threat detection tools and bolstering inter-continental cybersecurity collaborations. Cross-industry partnerships could provide the much-needed agility and resilience against future incursions.
Moving Forward: Securing the Continent
Organizations in Africa and globally must heed the creeping threat of APT groups by reinforcing cybersecurity frameworks. Key areas of focus include:
Strengthening Defenses: Use advanced cybersecurity technologies such as AI and machine learning to detect anomalies early.
Building Collaborations: Foster partnerships with global intelligence networks for shared insights and early warnings.
Training and Awareness: Continuous upskilling of cybersecurity personnel to stay ahead of APT tactics.
As the digital jungle drums beat louder with APT41’s entry into Africa, organizations must build not just walls but an ecosystem of resilience and proactive defense. Whether by forming alliances or training tenaciously, surviving this new onslaught requires more than mere luck or vigilance; it demands pivotal action today.
*
Vendor Diligence Questions
1. Can your solutions provide early detection capabilities for APT-style attacks like those orchestrated by APT41?
2. How does your threat intelligence service ensure the latest threat data is disseminated to clients?
3. What measures do you implement to secure infrastructure against specifically crafted malware?
Action Plan
1. Risk Assessment: Conduct an immediate risk analysis on current IT systems to identify potential vulnerabilities exploited in APT41’s recent operations.
2. System Monitoring: Increase monitoring activities, leveraging threat intelligence platforms for signs of APT41 related activities.
3. Collaboration Enhancement: Forge stronger alliances with cybersecurity firms and adjacent sectors to share intelligence and best practices swiftly.
4. Staff Training: Implement regular training sessions focused on recognizing and responding to APT strategies and tactics.
*
Source: SecureList
*
Android's Double-Edged Sword - From VPN to Privacy Leaks
_When VPNs play dress-up as spyware, even the savviest can fall prey._
What You Need to Know
In a troubling development, Iranian cyber actors have used a new piece of Android malware known as DCHSpy, which disguises itself as legitimate VPN apps to spy on dissidents. The board should be aware that this poses a significant threat to privacy, given the malware's ability to blend seamlessly with trusted apps. Users may unknowingly permit sensitive access permissions, endangering corporate data. Executives should consider reviewing security protocols and ensuring the firm has robust guidelines and procedures for detecting such malicious software.
CISO Focus: Mobile Security and Privacy
Sentiment: Strong Negative
Time to Impact: Immediate to Short
*
VPN in Wolves' Clothing: The Rise of DCHSpy
Iranian-linked threat actors have deployed a cunning adversary, the DCHSpy malware, targeting Android users by masquerading as benign VPN applications. Its appearance as a trusted software tool grants it wide-ranging permissions, ultimately allowing malicious access to confidential information, communication channels, and location data of unsuspecting users. The modus operandi highlights an increasing trend among threat actors to leverage trusted applications as vectors for privacy invasion.
Anatomy of a Malicious Deception
DCHSpy penetrates devices by promising enhanced security, ironically the very layer it obliterates once installed. The malware does more than sniff through mundane mobile data; it actively seeks access to communication logs, GPS locations, and sensitive documentation. Its architecture allows it to operate stealthily, defying detection by traditional security measures as it piggybacks on the trust users place in VPN services.
Key Features of DCHSpy:
Cloaked as VPN Apps : Uses VPN branding to entice users.
Wide Permissions Access : Gains access to contacts, call logs, and location data.
Stealth Operations : Design avoids detection, operating under the radar of regular security checks.
Impact on Privacy and Security
The implications of such sophisticated spyware stretch beyond personal privacy invasions. For enterprises, DCHSpy presents an alarming risk where personal devices, melding into corporate networks, become unwitting backdoors into corporate data treasuries. Companies with bring-your-own-device (BYOD) policies could find themselves inadvertently exposed to these threats, underscoring an urgent need to enhance mobile threat defenses.
The Iranian Connection
The development and deployment of DCHSpy align with Iran's continued strategic cyber espionage endeavors. These threat actors persist in targeting dissidents, reflecting broader motives of surveillance and information suppression. Their operation effectiveness signifies a deeply troubling capability to circumvent global cyber defenses, urging increased international collaboration for cyber threat intelligence sharing.
Mitigation Strategies
Enterprises must urgently reevaluate their approaches to mobile security within their ecosystems. Comprehensive mobile security policies, coupled with educational initiatives, can fortify defenses against such sophisticated threats.
Recommended Measures:
Enhanced Device Management : Implement rigorous mobile device management (MDM) solutions.
User Education : Train staff to recognize and avoid suspicious app downloads.
Frequent Auditing : Conduct regular audits of security protocols and potential exposure points.
*
Reality Check: When a Safe Conduct Pass is a Trojan Horse
The instance of DCHSpy malware signals an urgent need for organizations and individuals to be more discerning about their third-party applications. In an age where privacy is increasingly under siege, vigilance is not just recommended—it’s imperative.
*
Vendor Diligence Questions
1. How does your VPN service protect against known vectors like the DCHSpy?
2. Can you provide detailed logs and analyses of any detected threats?
3. What real-time security measures are integrated to detect unauthorized access permissions in apps?
Action Plan
1. Audit Existing VPNs and Apps : Review all VPN and related apps currently in use for potential threats.
2. Strengthen BYOD Policies : Reassess and reinforce policies governing personal device use within the corporate network.
3. Prompt Patch Management : Ensure prompt updates and patch applications as soon as security flaws are discovered.
4. Conduct Workforce Training : Implement regular training sessions focused on recognizing spyware and other malicious entities masquerading as legitimate apps.
*
Source: Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents
*
The Black Screen of Death Rises Again: Windows 11 Strikes Back!
_Ever feel like your computer is out to get you? Windows 11 might be. But at least it's auto-recovered from its first attempt._
What You Need to Know
The infamous Black Screen of Death (BSOD) makes its unsettling return in Windows 11, potentially disrupting workflow and challenging user patience. Microsoft has introduced an auto-recovery tool aimed at mitigating these issues. Executives are expected to ensure systems are updated promptly while keeping IT teams vigilant and users informed. This calls for immediate attention as well as strategic planning to maneuver through potential risks.
CISO focus: System Resilience and Patch Management
Sentiment: Mixed
Time to Impact: Immediate
*
The Return of the Black Screen of Death in Windows 11: What It Means for Your Organization
Microsoft's latest Windows 11 update has reawakened the notorious Black Screen of Death, a long-time adversary of users worldwide. Recognizing the potential disruption this could cause, Microsoft has incorporated an auto-recovery tool designed to prevent serious interruptions. This move reflects both the increasing complexity of modern operating systems and the need for robust recovery mechanisms. The implications for businesses are significant, involving immediate action and longer-term strategies to handle such disruptive bugs.
A Familiar Foe Returns
Background: The Black Screen of Death is a critical issue where the operating system presents a blank screen instead of user interface options upon booting. Historically associated with severe system errors, its resurgence in Windows 11 can pose significant operational challenges.
New Updates: In response to the recurring issue, Microsoft has integrated an auto-recovery tool aimed at resolving minor problems automatically before they escalate. This innovation represents Microsoft’s commitment to enhancing user experience and reducing recovery time for affected systems.
Immediate Actions for Businesses
System Updates: Companies must prioritize updating systems to the latest Windows 11 version to ensure access to auto-recovery features.
IT Vigilance: IT teams need to be hyper-vigilant, ready to diagnose and respond to BSOD occurrences. Monitoring tools should be employed to swiftly identify affected systems and deploy recovery processes.
User Awareness: Educating end-users on recognizing and reporting BSOD issues promptly can facilitate faster resolutions and minimize downtime.
Long-term Strategic Implications
Patch Management: This incident underscores the importance of robust patch management programs. Businesses should regularly review and update security protocols to prevent system vulnerabilities.
Business Continuity Planning: Organizations should reassess their business continuity plans, ensuring they account for potential IT disruptions of this nature.
Investment in Tech Support: As operating systems become more complex, investing in capable tech support and training programs will enhance the capacity to manage unforeseen technical challenges efficiently.
Microsoft's Role and Responsibility
Microsoft’s approach to addressing this issue through a built-in recovery tool highlights a trend towards self-healing systems. While this development is positive, it places a significant part of the onus on Microsoft to ensure their solutions are both efficient and effective in a diverse range of environments.
Navigating the BSOD Landscape
Organizations impacted by the Black Screen of Death need to understand the broader context within which these software issues occur:
Complex System Environments: Modern operating environments are increasingly intricate, making errors like the BSOD a possibility despite rigorous testing processes.
User Experience Focus: As businesses demand flawless user experiences, vendors like Microsoft must balance innovation with reliability.
Security Enhancements: Continuous improvements in cybersecurity measures can help mitigate some of the vulnerabilities that lead to errors like the BSOD.
Are You Safe from the Black Screen?
Given the immediate impact this issue can have on businesses, organizations must implement quick actions to safeguard their systems. This involves leveraging updates, enhancing internal response mechanisms, and keeping open lines of communication with vendors.
*
Vendor Diligence Questions
1. What specific steps is Microsoft taking to track and resolve BSOD issues across different hardware configurations?
2. How frequently will Microsoft review and potentially update the auto-recovery feature to ensure its efficacy?
3. What other system resilience enhancements are planned for future Windows 11 updates?
Action Plan
1. Update Systems: Ensure all systems running Windows 11 are updated to the latest version to leverage the auto-recovery tool.
2. Deploy Monitoring Tools: Introduce and configure system monitoring tools to detect BSOD occurrences.
3. User Training: Conduct informative sessions with employees to educate them on BSOD recognition and procedures for reporting incidents.
4. Review Continuity Plans: Evaluate and enhance current business continuity and disaster recovery plans to incorporate best practices for handling similar cyber events.
*
Source: Windows 11 gets new Black Screen of Death, auto recovery tool
*
Howling at Vulnerabilities: The Coyote Malware Tale
_What’s worse than a fox in the henhouse? A coyote in your computer._
What You Need to Know
The cybersecurity landscape has been shaken with the emergence of Coyote Malware, which discreetly exploits the Windows accessibility framework to steal sensitive information. This malware is particularly insidious because it burrows into systems using minimal privileges and minimal detection. Immediate review and enhancement of current security protocols are critical to mitigate potential damages.
CISO focus: Malware Exploitation
Sentiment: Strong Negative
Time to Impact: Immediate
*
Malware Unleashed: Windows Accessibility Abused
Coyote Malware, cleverly named for its deceptive tactics, targets Windows systems, exploiting the accessibility framework to pilfer data without triggering standard security alarms.
The Cunning Strategy of Coyote Malware
With an increased focus on adaptability in software development, the accessibility frameworks in Windows were intended to support enhanced user experience. Ironically, the same framework has been commandeered by Coyote Malware. By mimicking actions intended for legitimate users with disabilities, this malware manages to execute its operations in a stealthy manner.
Main Attack Vectors:
Masquerading as Legitimate Services: Coyote Malware aligns itself with system processes that legitimate software requires, creating a shield against detection.
Exfiltration without Restriction: By using common accessibility functions, it masks its data transmission, bypassing firewalls and network monitoring tools that differentiate normal network activity from malicious transmissions.
Key Indicators of Compromise
Noting that traditional anti-malware solutions face hurdles in detecting such sophisticated threats, organizations should focus on identifying anomalies in the accessibility framework’s usage, alongside monitoring unexpected network behaviors and permissions escalation that do not fit normal accessibility patterns.
The Foreboding Challenge
Organizations are struggling with the dual challenge of supporting genuine accessibility needs while securing systems against these covert attacks. This problem intensifies as attackers refine their techniques to exploit any overlooked security nook.
Immediate Implications and Mitigations
Implications:
Data Breaches: Organizations could face severe data loss if this malware goes undetected.
Compliance Violations: According to recent studies, not all enterprises are prepared to handle breaches of this nature, risking regulatory fines.
Reputation Damage: Exposure or theft of customer data could severely damage public trust and corporate reputation.
Mitigation Steps:
Strengthen Monitoring Solutions: Implement enhanced monitoring for accessibility API calls and network patterns indicative of data exfiltration.
Regular Security Audits: Conduct frequent evaluations of systems for unauthorized access attempts and penetration tests targeting accessibility functions.
Employee Training: Educate staff about social engineering tactics and phishing scams typically used as initial vectors for malware like Coyote.
Howling for Solutions
As cybersecurity teams scramble to develop countermeasures to Coyote's exploits, they'll need to balance vigilance and user accessibility.
*
Vendor Diligence Questions
1. How does your security solution detect anomalous behavior within accessibility frameworks?
2. What is your response protocol when a threat exploiting accessibility features is detected?
3. Can your solution integrate with existing accessibility monitoring to provide alerts in real-time?
Action Plan
For Teams Reporting to the CISO:
Initiate a comprehensive review of your organization’s accessibility settings and ensure they align with least privilege principles.
Develop an incident response strategy specific to accessibility abuse scenarios.
Implement additional layers of network segmentation to isolate critical data from accessibility-feature-induced threats.
*
Source: Coyote malware abuses Windows accessibility framework for data theft
*
_CISO Intelligence is lovingly curated from open source intelligence newsfeeds and is aimed at helping cybersecurity professionals be better, no matter what their stage in their career._
_We’re a small startup, and your subscription and recommendation to others is really important to us._
*Thank you so much for your support!(