article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Some possible avenues of infection include exploiting weak or default administrative credentials on routers, and outdated, insecure firmware that has known, exploitable security vulnerabilities. com was registered in 2008 to an Adrian Crismaru from Chisinau, Moldova. WHO’S BEHIND SOCKSESCORT? DomainTools says myiptest[.]com

Malware 203
article thumbnail

Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

eSecurity Planet

Update and patch operating systems, software, and firmware as soon as updates and patches are released. Audit user accounts with administrative privileges and configure access controls with least privilege in mind, and use multifactor authentication. CVE-2015-1635 : An RCE vulnerability in specific versions of Windows (e.g.,