Security Affairs

SEPTEMBER 7, 2020

The French national cyber-security agency published an alert to warn of a significant increase of Emotet attacks targeting the private sector and public administration entities in France. The Emotet banking trojan has been active at least since 2014, the botnet is operated by a threat actor tracked as TA542. Send the samples (.doc

Malware 112

Malware Advertising Antivirus Banking 112

The Last Watchdog

JUNE 21, 2020

The CryptoLocker wave went into a decline in June 2014 as a result of the so-called Operation Tovar , an initiative orchestrated by law enforcement agencies from multiple countries. The newsmaking emergence of CTB-Locker in 2014 and the CryptoWall ransomware in 2015 fully demonstrated this multi-pronged shift. pharma giant ExecuPharm.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

SEPTEMBER 20, 2019

Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. Experts revealed that the botnet was used by the TA505 cybercrime gang to distribute the FlawedAmmy RAT and some email stealers. Pierluigi Paganini.

Phishing 82

Phishing Social Engineering Malware Advertising 82

SecureWorld News

JANUARY 28, 2021

This is a unique and new approach to effectively disrupt the activities of the facilitators of cybercrime.". EMOTET gained notoriety for being one of the most professional and longest lasting cybercrime services to exist. Most antivirus programs look for known malware codes, making a code change difficult to be detected.

Cybercrime 52

Cybercrime Malware Antivirus Banking 52

Security Affairs

MARCH 19, 2020

Operators behind the Pysa ransomware, also employed a version of the PowerShell Empire penetration-testing tool, they were able to stop antivirus products. “On one of the compromised information systems, experts found encrypted files with the extension “ newversion.” SecurityAffairs – Pysa ransomware, cybercrime).

Government 106

Government Ransomware Encryption Penetration Testing 106

Security Affairs

JANUARY 26, 2020

Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Cisco Webex flaw allows unauthenticated remote attackers to join private meetings.

Data breaches 81

Data breaches Advertising Antivirus DDOS 81

Security Affairs

SEPTEMBER 22, 2020

The malicious code was initially advertised on many hacking forums for up to $300, later other threat actors started offering it for less than $80 in the cybercrime underground. Below the list of mitigations: Maintain up-to-date antivirus signatures and engines. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 65

Malware Passwords Advertising Antivirus 65

Security Affairs

SEPTEMBER 16, 2019

The researchers provided evidence that the threat actors sold the purchased certificates to a cybercrime gang that used them to spread malware. The verification is done using a public antivirus scanning service, then the threat actors use the file scan record as “a clean bill of health” for potential buyers. Pierluigi Paganini.

Adware 80

Adware Advertising Marketing Antivirus 80

Security Affairs

DECEMBER 1, 2020

Since at least 2014, experts at FireEye have observed APT32 targeting foreign corporations with an interest in Vietnam’s manufacturing, consumer products, and hospitality sectors. The APT32 also targeted peripheral network security and technology infrastructure corporations, and security firms that may have connections with foreign investors.

Cryptocurrency 96

Cryptocurrency Antivirus Manufacturing Government 96

Security Affairs

AUGUST 24, 2020

For instance, to disable built-in antivirus software, the attackers used Defender Control and Your Uninstaller. Group-IB’s technological leadership is built on the company’s 17 years of hands-on experience in cybercrime investigations around the world and 60 000 hours of cyber security incident response accumulated in one of ???

Threat Detection 86

Threat Detection Ransomware Advertising Cybercrime 86

Security Affairs

DECEMBER 7, 2019

“According to the indictment, Bugat is a malware specifically crafted to defeat antivirus and other protective measures employed by victims. For over a decade, Maksim Yakubets and Igor Turashev led one of the most sophisticated transnational cybercrime syndicates in the world,” said U.S. Attorney Brady. Pierluigi Paganini.

Banking 65

Banking Malware Cybercrime Accountability 65

Security Affairs

OCTOBER 12, 2019

The group that has been active since late 2015 targeted businesses worldwide to steal payment card information. In August 2018, three members of the notorious cybercrime gang have been indicted and charged with 26 felony counts of conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft.

Identity Theft 75

Identity Theft Hacking Advertising DNS 75

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. Another technique used by cybercriminals to bypass antivirus systems is a targeted attack, in which malicious email are delivered outside regular working hours. More than 80% of all malicious files were disguised as .zip

Ransomware 71

Ransomware Antivirus Malware Banking 71

Security Affairs

MARCH 24, 2020

No benign files MalwareBazaar is not a multi antivirus scanning engine You can upload and download as many malware samples as you want It’s completely free! “ ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 53

Malware Adware Cyber threats Advertising 53

Security Affairs

NOVEMBER 11, 2021

0)b31 router distributed by TrueOnline CVE-2014-2321 ZTE F460 and F660 cable modems CVE-2017-6334 NETGEAR DGN2200 devices with firmware through 10.0.0.50. BotenaGo was written in Golang (Go) and at the time of the report published by the experts, it had a low antivirus (AV) detection rate (6/62). v001 / 3.40(ULM.0)b31

IoT 123

IoT Firmware Malware Wireless 123

Security Affairs

JUNE 23, 2020

Fxmsp gained worldwide fame in May 2019, after it was reported that the networks belonging to leading antivirus software companies had been compromised. Fxmsp took his first steps in the cybercrime scene in September 2016 when he registered on an underground forum, fuckav[.]ru. mln appeared first on Security Affairs.

Antivirus 84

Antivirus Advertising Hacking Banking 84

Security Affairs

AUGUST 28, 2019

Earlier this year, malware researchers from Avast antivirus firm discovered a design flaw in the C&C protocol of the botnet that could have been exploited to remove the malware from infected computers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Malware 85

Malware Advertising Antivirus Cryptocurrency 85

Security Affairs

JULY 19, 2019

The macro might also purposely attempt to bypass endpoint security defenses. . The Rubella Macro Builder is cheap, fast and easy to use, the malware it generated can evade antivirus detection. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Malware 70

Malware Social Engineering Advertising Antivirus 70

Security Affairs

JULY 28, 2020

The purpose of this report is to deliver a devastating blow to cybercrime by uncovering key organizations sponsoring pirates and exposing the entire criminal structure of online piracy. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Marketing 66

Marketing Banking Advertising Cybercrime 66

Security Affairs

MAY 29, 2019

Analyzing it in depth, we discover it actually is the RMS (Remote Manipulator System) client by TektonIT , encrypted using the MPress PE compressor utility, a legitimate tool, to avoid antivirus detection. Information about MPress packer used in “winserv.exe” payload. Comparison between infection chains. Conclusion. Pierluigi Paganini.

Retail 68

Retail Banking Advertising Encryption 68

Security Affairs

APRIL 10, 2019

That file was delivered via malscam campaigns around the world and its source-code is obfuscated in order to evade antivirus detection and complicate its analysis. When the malware is executed without any restrictions, i.e., upon a non-virtualized environment, some information from the victim’s computer is send to C2 server.

Banking 60

Banking Malware Antivirus Cyber threats 60

Security Affairs

JULY 23, 2019

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Experts spotted P2P worm spreading Crypto-Miners in the wild appeared first on Security Affairs. Then it runs installer.bat (the filename) with the parameter “ 0?

Malware 73

Malware Advertising Antivirus Architecture 73

Security Affairs

SEPTEMBER 7, 2020

A recently discovered cybercrime gang, tracked as Epic Manchego , is using a new technique to create weaponized Excel files that are able to bypass security checks. Some antivirus solutions specifically analyze this section look for malicious VBA code in the Excel docs. Pierluigi Paganini. SecurityAffairs – hacking, Norway).

Cybercrime 97

Cybercrime Phishing Advertising Antivirus 97

Security Affairs

JULY 8, 2020

The name Fxmsp refers a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information. Since March 2019, Fxmsp announced in cybercrime forums the availability of information stolen from major antivirus companies located in the U.S. Attorney Brian T.

Hacking 73

Hacking Antivirus Advertising Cybercrime 73

Security Affairs

NOVEMBER 21, 2019

Microsoft has shared more information on ransomware and how to stay safe online here , it urges organizations to: • Keep your Windows Operating System and antivirus up-to-date. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 81

Ransomware Social Engineering Malware Advertising 81

Security Affairs

APRIL 9, 2020

To trick antivirus software, threat actors include the passwords for accessing the content in the email subject line, in the archive name, or in subsequent correspondence with the victim. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Group-IB is a member of the World Economic Forum. .

Phishing 106

Phishing Malware Spyware DDOS 106

Security Affairs

JULY 7, 2019

Firefox finally addressed the Antivirus software TLS Errors. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Security Affairs newsletter Round 221 – News of the week appeared first on Security Affairs.

Scams 48

Scams Spyware DNS Advertising 48