SecureList

JUNE 5, 2023

Satacom downloader, also known as LegionLoader, is a renowned malware family that emerged in 2019. It is known to use the technique of querying DNS servers to obtain the base64-encoded URL in order to receive the next stage of another malware family currently distributed by Satacom. To do so, it performs a DNS request to don-dns[.]com

Cryptocurrency 82

Cryptocurrency DNS Malware Encryption 82

eSecurity Planet

DECEMBER 3, 2021

lazydocker : A simple terminal UI for both docker and docker-compose : [link] pic.twitter.com/HsK17rzg8m — Binni Shah (@binitamshah) July 1, 2019. Facebook Plans on Backdooring WhatsApp [link] — Schneier Blog (@schneierblog) August 1, 2019. — Jason Haddix (@Jhaddix) July 27, 2019. Brian Krebs | @briankrebs.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

eSecurity Planet

SEPTEMBER 26, 2023

Physical appliances provide functionality for routing wide area networks (WANs), stateful firewalls, SD-WANs, NGFW, antivirus, intrusion prevention services (IPS), and unified threat management (UTM) capabilities for local networks. Microsoft Azure Microsoft Hyper-V 2016/2019 R2/2019 VMware ESXi up to 7.0

Firewall 98

Firewall Software Antivirus Internet 98

eSecurity Planet

FEBRUARY 16, 2021

Install an antivirus solution that includes anti-adware capabilities. If your antivirus software fails to notice a new strain, you can reinstall the browser. During the 2019 holiday season, the Barracuda research team analyzed 4,200 Android apps related to shopping, Santa, and games. How to Defend Against Adware. RAM Scraper.

Malware 104

Malware Adware Spyware Antivirus 104

SecureList

APRIL 24, 2023

Introduction We introduced Tomiris to the world in September 2021, following our investigation of a DNS-hijack against a government organization in the Commonwealth of Independent States (CIS). The following map shows the countries where we detected Tomiris targets (colored in green: Afghanistan and CIS members or ratifiers).

Malware 95

Malware DNS Government Software 95

SecureList

MAY 31, 2021

A41APT is a long-running campaign, active from March 2019 to the end of December 2020, that has targeted multiple industries, including Japanese manufacturing and its overseas bases. We believe this is a continuation of a campaign last summer, reported by Avast , in which the malware masqueraded as the Malwarebytes antivirus installer.

Malware 100

Malware Adware Encryption Architecture 100

SecureList

APRIL 27, 2021

One of the suspected FinFly Web servers was active for more than a year between October 2019 and December 2020. We investigated a long-running espionage campaign, dubbed A41APT, targeting multiple industries, including the Japanese manufacturing industry and its overseas bases, which has been active since March 2019.

Malware 141

Malware Spyware Government Social Engineering 141