SC Magazine

MARCH 10, 2021

New malware compiled on Red Hat Enterprise Linux uses a network data encoding scheme based on XOR, creates a backdoor in systems that gives an attacker near full control over infected machines. ( “Linux password file” by Christiaan Colen is licensed under CC BY-SA 2.0 ).

Malware 136

Malware Media Passwords Government 136

Security Boulevard

JANUARY 14, 2022

Picus Labs has updated the Picus Threat Library with new attack methods for Flagpro malware of BlackTech. The APT group was first observed in 2010 and they have been active since. Flagpro malware was recently discovered by NTTSecurity and the malware is attributed to BlackTech [1]. BlackTech APT group. Initial Access.

Malware 122

Malware Passwords Phishing Authentication 122

Security Affairs

NOVEMBER 22, 2019

The Payment solutions giant Edenred disclosed a malware incident that affected some of its computing systems, it immediately started an investigation. The Payment solutions giant Edenred announced that some of its computing systems have been infected with malware, the company is currently investigating the incident. Pierluigi Paganini.

Malware 108

Malware Mobile Advertising Government 108

Security Affairs

AUGUST 1, 2020

A 30-year-old Moldovan man pleaded guilty this week for creating the FastPOS malware that infected PoS systems worldwide. The Moldovan citizen Valerian Chiochiu (30), aka Onassis, pleaded guilty on Friday for creating the infamous FastPOS Point-of-Sale (POS) malware. and infraud.ws. Pierluigi Paganini.

Malware 78

Malware Advertising Cybercrime Hacking 78

The Last Watchdog

JUNE 3, 2022

I had a chance to discuss the latter with Ravi Srinivasan, CEO of Tel Aviv-based Votiro which launched in 2010 and has grown to . Votiro has established itself as a leading supplier of advanced technology to cleanse weaponized files.

Unstructured Data 272

Unstructured Data Malware Digital transformation Authentication 272

Security Affairs

APRIL 26, 2020

Several US universities and colleges were targeted in phishing attacks aimed at delivering malware previously used by China-linked APT groups. Hupigon is a remote access Trojan (RAT) that has been active since at least 2006, it was first detected by FireEye in 2010. Faculty and students at several U.S. Pierluigi Paganini.

Malware 103

Malware Phishing Advertising Education 103

Security Affairs

MAY 28, 2020

The Ke3chang hacking group added a new malware dubbed Ketrum to its arsenal, it borrows portions of code and features from older backdoors. In May 2016, researchers from Palo Alto found evidence that the threat actors behind the Operation Ke3chang had been active since at least 2010. Pierluigi Paganini.

Hacking 70

Hacking Malware Advertising Government 70

Security Affairs

APRIL 26, 2020

Several US universities and colleges were targeted in phishing attacks aimed at delivering malware previously used by China-linked APT groups. Hupigon is a remote access Trojan (RAT) that has been active since at least 2006, it was first detected by FireEye in 2010. Faculty and students at several U.S. Pierluigi Paganini.

Malware 86

Malware Phishing Advertising Education 86

Malwarebytes

JULY 28, 2021

All of a sudden we have infectious email attachments, and compromised third-party sites serving up malware. 2010 Vancouver. All things banking are considered a problem point in Brazil in terms of hacks and malware, so there were plenty of warnings for visitors surrounding that too.

Scams 141

Scams Hacking Malware Mobile 141

SC Magazine

MARCH 9, 2021

Microsoft is now offering the same patch for the no-longer-supported Exchange Server 2010. Following widespread hacking from the Hafnium group and, perhaps, other groups , Microsoft is now offering the same patch for the no-longer-supported Exchange Server 2010 that it introduced last week for all newer editions. Microsoft).

Media 77

Media Malware Hacking Internet 77

Krebs on Security

JANUARY 24, 2023

Denis Emelyantsev , a 36-year-old Russian man accused of running a massive botnet called RSOCKS that stitched malware into millions of devices worldwide, pleaded guilty to two counts of computer crime violations in a California courtroom this week. A Google-translated version of the Rusdot spam forum.

Cybercrime 217

Cybercrime Advertising IoT Malware 217

Security Affairs

FEBRUARY 27, 2023

Threat actors behind the ChromeLoader malware campaign are using VHD files disguised as popular games, experts warn. Researchers from Ahnlab Security Emergency Response Center ( ASEC ) recently uncovered a malware campaign distributing the ChromeLoader using VHD files. ” concludes the report.

Software 95

Software Malware Advertising Hacking 95

Security Affairs

JUNE 30, 2021

According to the experts, the Gozi Banking Malware infected more than 1 million computers worldwide, causing tens of millions of dollars in losses. Prosecutors claim that the malware has infected systems in at least eight countries, including the United States, Germany, Finland and the United Kingdom.

Banking 109

Banking Malware Hacking Information Security 109

Krebs on Security

JANUARY 8, 2024

As detailed in my 2014 book, Spam Nation , Spamdot was home to crooks controlling some of the world’s nastiest botnets, global malware contagions that went by exotic names like Rustock , Cutwail , Mega-D , Festi , Waledac , and Grum. And there were many good reasons to support this conclusion.

Cybercrime 206

Cybercrime Banking Computers and Electronics DDOS 206

Krebs on Security

DECEMBER 8, 2021

“My exploit pack is hosted there with 0 problems,” DCReaver2 says of a shady online provider that another member asked about in May 2010. Arrested in 2010, Skorjanc was sentenced to nearly five years in prison for selling and supporting Mariposa, which was used to compromise millions of Microsoft Windows computers.

Cybercrime 271

Cybercrime Ransomware Accountability Advertising 271

Security Affairs

JANUARY 4, 2021

The APT group has been active since 2010, targeted organizations worldwide, including U.S. The cyber espionage group leverage both readily available tools and custom malware in their operations, many tools are available for years, but in recent attacks, their code was updated. They also uncovered the ASPXSpy webshell.

Ransomware 125

Ransomware Malware Financial Services Encryption 125

Krebs on Security

FEBRUARY 9, 2023

Initially a stealthy trojan horse program delivered via email and used to steal passwords, Trickbot evolved into “a highly modular malware suite that provides the Trickbot Group with the ability to conduct a variety of illegal cyber activities, including ransomware attacks,” the Treasury Department said. .” The Forbes.ru

Hacking 190

Hacking Cybercrime Ransomware Government 190

Security Affairs

OCTOBER 17, 2018

Yoroi security firm uncovered a targeted attack against one of the most important companies in the Italian Naval Industry leveraging MartyMcFly Malware. According to VirusTotal the software was “seen in the Wild” in 2010 but submitted only on 2018-10-12! Security Affairs – MartyMcFly , malware).

Malware 93

Malware Computers and Electronics Encryption Penetration Testing 93

Threatpost

APRIL 8, 2020

Hundreds of thousands of malware files are disguised as well-known social conferencing and collaboration apps.

Malware 94

Malware Adware Mobile 94

Malwarebytes

AUGUST 20, 2021

the malware used by the attacker pretends to be the xmlprov Network Provisioning Service. The post New variant of Konni malware used in campaign targetting Russia appeared first on Malwarebytes Labs. Document analysis. We found two lures used by Konni APT. It then executes xwtpui.dll using rundll32.exe Figure 7: check.bat.

Malware 144

Malware Encryption Phishing Authentication 144

Krebs on Security

SEPTEMBER 24, 2022

RUSdot is the successor forum to Spamdot , a far more secretive and restricted forum where most of the world’s top spammers, virus writers and cybercriminals collaborated for years before the community’s implosion in 2010. A Google-translated version of the Rusdot spam forum. “That’s why they want me.”

Cybercrime 203

Cybercrime Data breaches Malware Ransomware 203

Security Affairs

JANUARY 26, 2022

. “The Federal Office for the Protection of the Constitution ( BfV ) has information about an ongoing cyber espionage campaign by the cyber attack group APT27 using the malware variant HYPERBRO against German commercial companies.” ” reads the advisory published by the German intelligence.

Financial Services 97

Financial Services Surveillance Malware Cyber Attacks 97

Security Affairs

OCTOBER 22, 2023

BlackTech is a Chinese APT group that has been active since at least 2010 and that known for conducting cyber espionage campaigns in Asia aimed at entities in Hong Kong, Japan, and Taiwan. The researchers observed Flax Typhoon gaining and maintaining long-term access to Taiwanese organizations’ networks with minimal use of malware.

Telecommunications 137

Telecommunications Technology Government Firmware 137

CyberSecurity Insiders

OCTOBER 27, 2021

Cybersecurity Insiders have learnt that the said group of threat actors have launched a MATA malware attack on the servers of the software company to steal information from the database and encrypt it with ransomware until their demands are met.

Software 105

Software Data breaches Education Technology 105

Security Affairs

AUGUST 23, 2019

Malware researchers at Trend Micro discovered a new variant of the Asruex Trojan that exploits old Microsoft Office and Adobe vulnerabilities to infect Windows and Mac systems. CVE-2010-2883 is a stack buffer overflow flaw that could be exploited by attackers to execute arbitrary code or trigger a denial of service condition. .

Malware 89

Malware Spyware Advertising Encryption 89

CyberSecurity Insiders

JULY 8, 2021

Information is also out that these unmanned vehicles have sophisticated devices installed in them that can launch cyber attacks such as DDoS and malware after connecting to a wireless network.

Cyber Attacks 141

Cyber Attacks Artificial Intelligence Wireless Surveillance 141

CyberSecurity Insiders

NOVEMBER 9, 2021

Launched in the year 1987 as an anti-malware solution by John McAfee, Intel Chip making unit in 2010 took the business over. Cybersecurity Insiders has learnt from its sources that the deal of acquiring McAfee will be wrapped up for $12 billion with the cost expected to rise to more than $14 billion when the company’s debt is added.

Technology 131

Technology Marketing Cybersecurity Malware 131

Security Affairs

MAY 7, 2023

Most of the victims are Chinese-speaking Windows users engaged in online gambling, the APT group relies on Telegram to distribute the malware. The malware is also able to steal cryptocurrency from the MetaMask crypto (Ethereum) wallet extension for Google Chrome. Sophos discovered a web site (telegramos[.]org)

Malware 94

Malware Cryptocurrency Encryption Phishing 94

SecureWorld News

AUGUST 2, 2023

When I first became interested in ICS/OT cybersecurity, it was 2010 and news about Stuxnet had been made public. Stuxnet was a piece of malware designed to infiltrate a uranium enrichment facility in Iran and physically destroy the enrichment centrifuges used to ultimately make nuclear warheads.

Cybersecurity 79

Cybersecurity Manufacturing Data breaches Malware 79

Security Affairs

JULY 12, 2021

Magecart hackers have devised a new technique to obfuscating the malware within comment blocks and hide stolen credit card data into images evading detection. Security firms have monitored the activities of a dozen groups at least since 2010. php echo ""."h"."e"."".""."llo"."w"."o"."".""."r"."l"."d"."";

Malware 114

Malware Software Marketing Hacking 114

Security Affairs

DECEMBER 7, 2021

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including defense, high tech, energy, government, aerospace, and manufacturing. “The Microsoft Digital Crimes Unit (DCU) has disrupted the activities of a China-based hacking group that we call Nickel.

VPN 126

VPN Manufacturing Government Hacking 126

Security Affairs

NOVEMBER 11, 2022

The campaigns involved a new piece of malware called BadBazaar and new variants of the MOONSHINE surveillance software discovered by Citizen Lab in 2019 and employed in attacks against Tibetan activists. . We named this malware family BadBazaar in response to an early variant that posed as a third-party app store titled “APK Bazar.”

Surveillance 96

Surveillance Spyware Malware Mobile 96

Security Affairs

SEPTEMBER 27, 2023

BlackTech is a Chinese APT group that has been active since at least 2010 and that known for conducting cyber espionage campaigns in Asia aimed at entities in Hong Kong, Japan, and Taiwan. The nation-state actors employed multiple custom malware families targeting Windows, Linux, and FreeBSD operating systems.

Firmware 121

Firmware Telecommunications System Administration Malware 121

SecureWorld News

SEPTEMBER 10, 2022

Although the same tactics have been applied in both attacks, the resulting malware implants deployed have been distinct from one another, indicating the wide variety of implants available at the disposal of Lazarus. There are also overlapping IOCs between the campaign described by AhnLab and the current campaign, such as the IP address 84[.]38.133[.]145,

Malware 96

Malware Cryptocurrency Hacking Cybersecurity 96

SecureList

JUNE 8, 2022

Number of router vulnerabilities according to cve.mitre.org, 2010–2022 ( download ). Number of router vulnerabilities according to nvd.nist.gov, 2010–2022 ( download ). Router-targeting malware. To find out why cybercriminals attack routers, it is first worth looking at the Top 10 malware detected by our IoT traps in 2021.

DDOS 89

DDOS Passwords IoT Firmware 89

The Last Watchdog

FEBRUARY 3, 2020

Samide and other experts say what’s coming next is very likely to be a series of varied attacks as combatants on all sides leverage footholds gained from ongoing intelligence gathering and malware planting. cyber ops capability is Stuxnet , the self-spreading Windows worm found insinuating itself through Iranian nuclear plants in 2010.

Energy and Utilities 330

Energy and Utilities Malware Hacking Passwords 330

Security Affairs

OCTOBER 13, 2022

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. The cyber espionage group leverage both readily available tools and custom malware in their operations, many tools are available for years, but in recent attacks, their code was updated. based organization.

Penetration Testing 137

Penetration Testing Financial Services Surveillance Manufacturing 137