Security Affairs

AUGUST 10, 2021

The eCh0raix ransomware has been active since at least 2019, when eExperts from security firms Intezer and Anomali separately discovered sample of the ransomware targeting Network Attached Storage (NAS) devices. The Taiwanese vendor was informed of ongoing eCh0raix ransomware attacks that infected QNAP NAS devices using weak passwords.

Ransomware 125

Ransomware Encryption Firmware Passwords 125

Security Affairs

AUGUST 13, 2023

To overcome the user authentication, we used a known vulnerability, CVE-2019-9013 , which allows us to perform a replay attack against the PLC using the unsecured username and password’s hash that were sent during the sign-in process , allowing us to bypass the user authentication process.” ” continues the report.

Authentication 84

Authentication Firmware Hacking Passwords 84

Security Affairs

MARCH 23, 2020

According to the Chinese security firm Qihoo 360’s Netlab team, operators of several botnets , including Chalubo , FBot , and Moobot , targeting LILIN DVRs at least since August 30, 2019. The new firmware released by the vendors validated the hostname passed as input to prevent command execution. ” Netlab concludes.

Firmware 103

Firmware Surveillance Manufacturing Advertising 103

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Ensure secure configurations for devices: Change the default password to a strong one, and block SSH from external access.

IoT 112

IoT DDOS Malware Firmware 112

Security Affairs

FEBRUARY 3, 2020

L inear eMerge E3 smart building access systems designed by N ortek Security & Control (NSC) are affected by a severe vulnerability (CVE-2019-7256) that has yet to be fixed and attackers are actively scanning the internet for vulnerable devices. CVE-2019-7256 is actively being exploited by DDoS botnet operators.

DDOS 73

DDOS Hacking Internet Internet 73

Security Affairs

JULY 28, 2020

CGI password logger This installs a fake version of the device admin login page, logging successful authentications and passing them to the legitimate login page. In November 2019, security experts first spotted the QSnatch malware that at the time infected thousands of QNAP NAS devices worldwide. ” reads the alert.

Malware 100

Malware Firmware Advertising Manufacturing 100

Security Affairs

AUGUST 20, 2021

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IoT 102

IoT DNS Manufacturing Firmware 102

Security Affairs

APRIL 4, 2019

Firmware updates that address this vulnerability are not currently available. The first one could be exploited by a remote and unauthenticated attacker with admin privileges to obtain sensitive information ( CVE-2019-1653 ), while the second one can be exploited for command injection ( CVE-2019-1652 ). through 1.4.2.20.

Small Business 78

Small Business Firmware Advertising VPN 78

Security Affairs

SEPTEMBER 20, 2020

The Mozi botnet accounted for 90% of the IoT network traffic observed between October 2019 and June 2020, IBM reported. Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. reads the analysis published by the experts. ” continues the analysis.

IoT 119

IoT DDOS Architecture Passwords 119

eSecurity Planet

APRIL 5, 2023

Tens of thousands of new security vulnerabilities are discovered each year; the value of CISA’s KEV catalog is that it helps organizations prioritize the software and firmware flaws that threat groups are actively exploiting — and many of those exploited flaws are older ones that users have failed to apply patches for.

Ransomware 126

Ransomware Firmware Cybersecurity Healthcare 126

Security Affairs

APRIL 2, 2021

The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591. In March 2021, government experts observed state sponsored hackers scanning the internet for servers vulnerable to the above flaws, the attackers were probing systems on ports 4443, 8443, and 10443.

Passwords 63

Passwords Government Firmware Accountability 63

Security Affairs

NOVEMBER 1, 2021

The number of infected devices is impressive, on 2019-11-30 a trusted security partner in the US informed Qihoo 360’s Netlab Cybersecurity reported to have observed 1,962,308 unique daily active IPs from the Pink botnet targeting its systems. According to the experts, Pink is the largest botnet they have observed in the last six years.

Architecture 117

Architecture DDOS Advertising Firmware 117

Security Affairs

JULY 13, 2019

“ Malware then guesses routers’ passwords , which new research from Avast shows are often weak. In April 2019, experts at Bad Packets uncovered a new wave of attacks mainly aimed at compromising D-Link routers, many of them hosted belonging to Brazilian users. . ” reads a blog post published by Avast. concludes Avast.

DNS 70

DNS Passwords Advertising Banking 70

Security Affairs

MARCH 30, 2019

The first one could be exploited by a remote and unauthenticated attacker with admin privileges to obtain sensitive information ( CVE-2019-1653 ), while the second one can be exploited for command injection ( CVE-2019-1652 ). Firmware updates that address this vulnerability are not currently available.

Small Business 71

Small Business Firmware Advertising Engineering 71

Security Affairs

SEPTEMBER 10, 2019

The vulnerabilities have been tracked as CVE-2019-13473 and CVE-2019-13474. . The hardware of the terminals is equipped with Shenzen technology, while the firmware is based on BusyBox Linux Debian. . The telnetd service is being deactivated and old and weak passwords are as well being removed or changed.

IoT 82

IoT Hacking Firmware Advertising 82

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. However, with more than 30 billion IoT devices expected to be connected to the internet by 2026, attacks against them can have wide-ranging impacts.

IoT 145

IoT DDOS Malware Internet 145

SiteLock

AUGUST 27, 2021

It’s safe to say that the volume and magnitude of high-profile data breaches and ransomware attacks that punctuated 2019 really kept the cybersecurity industry on its toes. shows that data breaches have increased by 54% — making 2019 “the worst year on record” for data breaches. In comparison to last year, research.

Cybersecurity 98

Cybersecurity Phishing Data breaches IoT 98

Security Affairs

APRIL 26, 2019

The first iLnkP2P flaw tracked as CVE-2019-11219 is an enumeration vulnerability that could be exploited by an attacker to discover devices exposed online. The second issue tracked as CVE-2019-11220 can be exploited by an attacker to intercept connections to vulnerable devices and conduct man-in-the-middle (MitM) attacks.

IoT 79

IoT Hacking Manufacturing Advertising 79

Security Boulevard

MAY 30, 2022

By 2027, the IoT in Healthcare market is expected to reach $290 billion , up from just $60 billion in 2019. The use of internet connected medical devices can be incredibly scary if the right security isn’t put in place. Change all default passwords. This can lead to cyberattacks in hospitals or other targeted healthcare attacks.

Healthcare 90

Healthcare IoT Manufacturing Risk 90

Security Affairs

JULY 31, 2019

The most severe vulnerability, tracked as CVE-2019-7670, is an OS command injection flaw. Another issue, tracked as CVE-2019-7669, is an improper validation of file extensions when uploading files that was rated as CVSS score of 9.1. Another critical issue, tracked as CVE-2019-7672, received a CVSS score of 8.8.

Backups 55

Backups Authentication Advertising Firmware 55

SecureList

JULY 19, 2023

Perform offline cracking to extract the password. While the threat actor infrastructure might request Net-NTLMv2 authentication, Windows will honor the defined internet security zones and will not send (leak) Net-NTLMv2 hashes. Note: as these are NTLMv2 hashes, they cannot be leveraged as part of a Pass-the-Hash technique.

Firmware 88

Firmware Internet Internet Government 88

eSecurity Planet

FEBRUARY 16, 2021

Organizations can help prevent their computers from becoming part of a botnet by installing anti-malware software, using firewalls , keeping software up-to-date, and forcing users to use strong passwords. Always change the default passwords for any IoT devices you install before extended use. with no internet. Browser Hijacker.

Malware 104

Malware Adware Spyware Antivirus 104

eSecurity Planet

DECEMBER 7, 2023

Users can establish a symmetric key to share private messages through a secure channel, like a password manager. Symmetric encryption is often used for drive encryption, WiFi encryption, and other use cases where speed performance is paramount and a password can be safely shared.

Encryption 107

Encryption Authentication Passwords Password Management 107

ForAllSecure

OCTOBER 5, 2021

In 2016, the Mirai IoT botnet shut down part of the internet, yet variations still plague us today. Vamosi: The internet. Vamosi: Dyn was an internet performance management and web application security company that has since been bought by Oracle. The results can be massive enough to bring down parts of the internet.

IoT 52

IoT DDOS Malware Internet 52

SecureList

NOVEMBER 26, 2021

The vulnerability is in MSHTML, the Internet Explorer engine. We started detecting some suspicious backdoored installer packages (including TeamViewer, VLC Media Player and WinRAR); then in the middle of 2019 we found a host that served these installers along with FinSpy Mobile implants for Android. logins, passwords, etc.),

Malware 91

Malware Banking Energy and Utilities Accountability 91

Digital Shadows

NOVEMBER 10, 2022

For instance, financially-motivated threat actors often plant in malicious URLs spoofing these events to fraudulent sites, hoping to maximize their chances of scamming naive internet users for a quick (illicit) profit. Nowadays, such pages are necessary to build a brand, generate new business, and resolve customer issues.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

McAfee

AUGUST 24, 2021

Lastly, the pump runs its own custom Real Time Operating System (RTOS) and firmware on a M32C microcontroller. Attacks on healthcare settings are increasing with the FBI estimating a cyberattack using “Ryuk” ransomware took in $61 million over a 21-month period in 2018 and 2019. Could this attack take place over the internet?

Computers and Electronics 145

Computers and Electronics Authentication Software Risk 145

Kali Linux

SEPTEMBER 1, 2019

We are pleased to announce that our third release of 2019, Kali Linux 2019.3, Bluetooth firmware that was accidentally dropped has been added back in, and the rc.local file has been fixed to properly stop dmesg spam from showing up on the first console. 2kali1 (2019-08-22) root@kali:~# root@kali:~# uname -r 5.2.0-kali2-amd64

Architecture 52

Architecture Firmware Passwords Internet 52

ForAllSecure

MAY 13, 2022

Vamosi: Wiki space, got bought out and then shut down in January of 2019. I kind of felt like it was giving back a bit to the community that I had kind of taken a lot from like when I was growing up by being IRC channels, and I had found the internet, all this information that was available. And then the company went out of business.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52