Security Affairs

DECEMBER 31, 2021

Researchers discovered multiple high-risk vulnerabilities affecting the latest firmware version for the Netgear Nighthawk R6700v3 router. Researchers from Tenable have discovered multiple vulnerabilities in the latest firmware version (version 1.0.4.120) of the popular Netgear Nighthawk R6700v3 WiFi router. ” states Tenable. .

Firmware 120

Firmware Encryption Authentication Passwords 120

Security Affairs

JULY 1, 2021

Microsoft experts have disclosed a series of vulnerabilities in the firmware of Netgear routers which could lead to data leaks and full system takeover. The traffic was TLS-encrypted, so the researchers focused on the router and investigate the presence of security weaknesses that can be exploited by threat actors.

Firmware 127

Firmware Authentication Encryption Passwords 127

Security Affairs

MARCH 22, 2022

Since January, DeadBolt ransomware operators are targeting QNAP NAS devices worldwide , its operators claim the availability of a zero-day exploit that allows them to encrypt the content of the infected systems. Once encrypted the content of the device, the ransomware appends. SecurityAffairs – hacking, QNAP).

Ransomware 96

Ransomware Firmware Internet Internet 96

Security Affairs

JANUARY 29, 2022

QNAP forces its customers to update the firmware of their Network Attached Storage (NAS) devices to protect against the DeadBolt ransomware. QNAP forced the firmware update for its Network Attached Storage (NAS) devices to protect its customers against the DeadBolt ransomware. ” states the vendor.

Ransomware 87

Ransomware Firmware Encryption Engineering 87

Security Affairs

OCTOBER 5, 2020

The botnet uses the WSS (WebSocket over TLS) protocol for C2 communication to circumvent the typical Mirai traffic detection and provide secure encrypted communication for command and control. “Two zero days, 12 remote access functions for the router, encrypted traffic protocol, and infrastructure IP that that moves around.

IoT 136

IoT Firmware DNS Advertising 136

Security Affairs

AUGUST 3, 2019

Dragonblood researchers found two new weaknesses in WPA3 protocol that could be exploited to hack WPA3 protected WiFi passwords. A group of researchers known as Dragonblood (Mathy Vanhoef and Eyal Ronen ) devised new methods to hack WPA3 protected WiFi passwords by exploiting two new vulnerabilities dubbed Dragonblood flaws.

Passwords 91

Passwords Hacking Wireless Authentication 91

Security Affairs

SEPTEMBER 3, 2019

Researchers at firmware security firm Eclypsium discovered multiple vulnerabilities referred as USBAnywhere that could be exploited to potentially allow an attacker to take over the baseboard management controller (BMC) for three different models of Supermicro server boards: the X9, X10, and X11. Pierluigi Paganini.

Hacking 84

Hacking Firmware Media Authentication 84

Security Affairs

AUGUST 9, 2023

Malware can carry out a Downfall attack to steal sensitive information like passwords, encryption keys, and private data such as banking details, personal emails, and messages. ” Intel informed customers that is releasing firmware updates to address the vulnerability.

Firmware 64

Firmware Encryption Software Banking 64

Security Affairs

MARCH 7, 2020

The CVE-2019-0090 vulnerability affects the firmware running on the ROM of the Intel’s Converged Security and Management Engine (CSME). Intel CSME is responsible for initial authentication of Intel-based systems by loading and verifying all other firmware for modern platforms.” x, SPS_E3_05.00.04.027.0. .

Firmware 125

Firmware Technology Advertising Authentication 125

Security Affairs

MAY 16, 2022

Researchers devised an attack technique to tamper the firmware and execute a malware onto a Bluetooth chip when an iPhone is “off.” Unlike NFC and UWB chips, the Bluetooth firmware is neither signed nor encrypted opening the doors to modification. SecurityAffairs – hacking, domain name system).

Malware 95

Malware Wireless Firmware Mobile 95

Security Affairs

MARCH 26, 2021

The Federal Bureau of Investigation (FBI) issued an alert to warn that the Mamba ransomware is abusing the DiskCryptor open source tool to encrypt entire drives. Mamba ransomware is one of the first malware that encrypted hard drives rather than files that was detected in public attacks. ” reads the alert published by the FBI.

Ransomware 144

Ransomware Encryption Passwords Malware 144

Security Affairs

JULY 8, 2022

“Once the attacker successfully logs in to a device, they encrypt data in shared folders and leave a ransom note with the file name “!CHECKMATE_DECRYPTION_README” ” The ransomware appends the.checkmate extension to the filenames of encrypted files, it drops a ransom note named !CHECKMATE_DECRYPTION_README

Ransomware 90

Ransomware Encryption Passwords Internet 90

Security Affairs

AUGUST 17, 2022

Researchers uncovered a new flaw, dubbed ÆPIC, in Intel CPUs that enables attackers to obtain encryption keys and other secret information from the processors. “A potential security vulnerability in some Intel® Processors may allow information disclosure.Intel is releasing firmware updates to address this potential vulnerability.”

Architecture 76

Architecture Firmware Software Information Security 76

Security Affairs

MARCH 19, 2022

The AvosLocker ransomware-as-a-service emerged in the threat landscape in September 2021, since January the group expanded its targets by implementing the support for encrypting Linux systems, specifically VMware ESXi servers. Install updates/patch operating systems, software, and firmware as soon as updates/patches are released.

Ransomware 95

Ransomware DDOS Passwords Backups 95

Security Affairs

DECEMBER 17, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 78

Data breaches Cybercrime Firewall Artificial Intelligence 78

Security Affairs

JULY 10, 2020

The backdoor accounts in the firmware of 29 FTTH Optical Line Termination (OLT) devices from popular vendor C-Data. The security duo, composed of Pierre Kim and Alexandre Torres, disclosed seven vulnerabilities in the firmware of FTTH OLT devices manufactured by C-Data. SecurityAffairs – hacking, FTTH devices ).

Firmware 93

Firmware Accountability Advertising Manufacturing 93

Security Affairs

FEBRUARY 23, 2020

Organizers of major hacking conferences in Asia put them on hold due to Coronavirus outbreak. FC Barcelona and the International Olympic Committee Twitter accounts hacked. Russian govn blocked Tutanota service in Russia to stop encrypted communication. US administration requests $9.8B

Artificial Intelligence 61

Artificial Intelligence eCommerce Firmware Hacking 61

Security Affairs

SEPTEMBER 22, 2021

Security experts from consulting firm GRIMM have discovered a vulnerability in Small Offices/Home Offices (SOHO) Netgear routers that could be exploited by a remote attacker to execute arbitrary code as root. The flaw, tracked as CVE-2021-40847, resides in the source of a third-party component included in the firmware of many Netgear devices.

DNS 125

DNS Firmware VPN Risk 125

Security Affairs

DECEMBER 13, 2021

The WiFi chip encrypts network traffic and holds the current WiFi credentials, thereby providing the attacker with further information.” Threat actors can execute code by exploiting an unpatched or new security issue over-the-air, or abusing the local OS firmware update mechanism. Pierluigi Paganini.

Wireless 101

Wireless Firmware Mobile Passwords 101

Security Affairs

AUGUST 10, 2021

The ransomware, tracked by Intezer as “ QNAPCrypt ” and “ eCh0raix ” by Anomali, is written in the Go programming language and uses AES encryption to encrypt files. The malicious code appends.encrypt extension to filenames of encrypted files. SecurityAffairs – hacking, NAS). Pierluigi Paganini.

Ransomware 125

Ransomware Encryption Firmware Passwords 125

Security Affairs

AUGUST 13, 2022

To each encrypted file, it appends a randomized nine-digit hexadecimal number as an extension. The US agencies recommend not paying the ransom because there is no guarantee to recover the encrypted files and paying the ransomware will encourage the illegal practice of extortion. SecurityAffairs – hacking, Zeppelin ransomware).

Ransomware 84

Ransomware Encryption Firmware Backups 84

Security Affairs

AUGUST 12, 2019

Searching online the expert first found an encrypted firmware, he found on a forum a Portable ROM Dumper , (a custom firmware update file that once loaded, dumps the memory of the camera into the SD Card) that allowed him to dump the camera’s firmware and load it into his disassembler (IDA Pro). Pierluigi Paganini.

Firmware 85

Firmware Ransomware Wireless Encryption 85

Security Affairs

MAY 21, 2023

million NPM packages found containing the TurkoRat infostealer Lemon Group gang pre-infected 9 million Android devices for fraudulent activities Apple fixed three new actively exploited zero-day vulnerabilities KeePass 2.X

Data breaches 86

Data breaches Cybercrime Ransomware Passwords 86

Security Affairs

MAY 14, 2023

ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million

Data breaches 87

Data breaches DDOS Artificial Intelligence Ransomware 87

Security Affairs

FEBRUARY 15, 2022

NAS devices are privileged targets of cybercriminals, a couple of weeks ago QNAP forced the firmware update for its Network Attached Storage (NAS) devices to protect its customers against the DeadBolt ransomware. SecurityAffairs – hacking, NAS). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Firmware 79

Firmware Ransomware Encryption Hacking 79

Security Affairs

FEBRUARY 24, 2022

Since January, DeadBolt ransomware operators are targeting QNAP NAS devices worldwide, its operators claim the availability of a zero-day exploit that allows them to encrypt the content of the infected systems. Once encrypted the content of the device, the ransomware appends. The encrypted files have a ‘.deadbolt’

Ransomware 80

Ransomware Encryption Internet Internet 80

Security Affairs

OCTOBER 8, 2020

Recently QNAP published a security advisory urging its customers to update the firmware and apps installed on their network-attached storage (NAS) devices to prevent AgeLocker ransomware infections. SecurityAffairs – hacking, QNAP). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Encryption 99

Encryption Firmware Advertising Ransomware 99

Security Affairs

SEPTEMBER 6, 2022

today detected the security threat DEADBOLT leveraging exploitation of Photo Station vulnerability to encrypt QNAP NAS that are directly connected to the Internet. QNAP Product Security Incident Response Team (QNAP PSIRT) had made the assessment and released the patched Photo Station app for the current version within 12 hours.”

Ransomware 83

Ransomware Internet Internet Encryption 83

Security Affairs

JANUARY 16, 2022

BleepingComputer also reported that dozens of ransom notes and encrypted files have been submitted to the ID-Ransomware service by affected QNAP users. Up to date apps and firmware seem not to help either.” The malicious code appends.encrypt extension to filenames of encrypted files. SecurityAffairs – hacking, QNAP NAS).

Ransomware 109

Ransomware Encryption Backups Firmware 109

Security Affairs

APRIL 7, 2020

Upon the installation, the malicious app registers itself as a foreground service and extracts an encrypted payload that gathers information about the victim’s device (android_id, manufacturer, model, firmware version, etc.) and sends it to a server under the control of the attackers ([link]. ” continues Kaspersky.

Malware 119

Malware Firmware Manufacturing Mobile 119

Security Affairs

JULY 28, 2020

These are encrypted with the actor’s public key and sent to their infrastructure over HTTPS. In November 2019, security experts first spotted the QSnatch malware that at the time infected thousands of QNAP NAS devices worldwide. .” SecurityAffairs – hacking, QSnatch). Webshell functionality for remote access.

Malware 101

Malware Firmware Advertising Manufacturing 101

Security Affairs

JUNE 14, 2020

SecurityAffairs – newsletter, hacking). The post Security Affairs newsletter Round 268 appeared first on Security Affairs. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Firmware 66

Firmware Advertising Ransomware Hacking 66

Security Affairs

MAY 20, 2022

.” Since January, DeadBolt ransomware operators are targeting QNAP NAS devices worldwide , its operators claim the availability of a zero-day exploit that allows them to encrypt the content of the infected systems. Once encrypted the content of the device, the ransomware appends. SecurityAffairs – hacking, NAS).

Ransomware 94

Ransomware Internet Internet Firmware 94

Security Affairs

JUNE 3, 2021

The researchers demonstrated a proof-of-concept (PoC) exploit that sees the attacker masquerading as a legitimate access point, running a modified open-source hostapd , and sending a malicious encrypted group temporal key (GTK) to any client that connects to it via WPA2. SecurityAffairs – hacking, Realtek RTL8170C Wi-Fi module).

Wireless 85

Wireless IoT Encryption Firmware 85

Security Affairs

AUGUST 7, 2020

Intel is investigating reports of an alleged hack that resulted in the theft and leak of 20GB of data coming from the chip giant. The engineering received the files from an anonymous hacker who claimed to have hacked the company earlier this year, the experts believe that this leak is just a first lot on a larger collection.

Firmware 63

Firmware Advertising Engineering Hacking 63

Security Affairs

SEPTEMBER 3, 2021

“Cyber criminal threat actors exploit network vulnerabilities to exfiltrate data and encrypt systems in a sector that is increasingly reliant on smart technologies, industrial control systems, and internet-based automation systems. Install updates/patch operating systems, software, and firmware as soon as they are released.

Ransomware 94

Ransomware Passwords Backups Firmware 94

Security Affairs

JANUARY 2, 2022

SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 347 appeared first on Security Affairs. If you want to also receive for free the newsletter with the international press subscribe here. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Banking 88

Banking Firmware Malware Ransomware 88