article thumbnail

Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

eSecurity Planet

Update and patch operating systems, software, and firmware as soon as updates and patches are released. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. or Windows Server (2008 R2 SP1, 2012 Gold) allows attackers to execute arbitrary code via crafted HTTP requests.

article thumbnail

StripedFly: Perennially flying under the radar

SecureList

This archive is discreetly hosted on legitimate websites, cleverly disguised as firmware binaries for enigmatic devices labeled “m100” The Bitbucket repository was created on June 21, 2018, under the account of Julie Heilman, and it remains the sole repository associated with this profile. 8, 15.0.0.0/8, 8, 16.0.0.0/8,

Malware 114
article thumbnail

Mobile malware evolution 2020

SecureList

The manufacturer of the mobile device preloads an adware application or a component with the firmware. In particular, advertisers can display targeted offerings, and attackers can access accounts with various services, such as online banking. LPE exploits, relevant to Android versions 4 through 7, accounted for most of the growth.

Mobile 138