Security Affairs

SEPTEMBER 10, 2020

ESET researchers discovered a new piece of malware dubbed CDRThief targets a specific Voice over IP system to steal call data records (CDR). The VoIP platform Linknat VOS2009 and VOS3000 targeted by the malware is used by two China-produced softswitches (software switches). ” reads the analysis published by ESET.

Malware 64

Malware Encryption Advertising Passwords 64

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. Experts at MalwareHunterTeam uncovered a new malspam campaign exploiting the fear in the Coronavirus (COVID-19) to deliver malware. states the analysis published by FireEye.

Malware 117

Malware Scams Social Engineering Phishing 117

Security Affairs

JANUARY 5, 2020

DeathRansom was considered fake ransomware due to the fact that it did not implement an effective encryption process, but now things are changing. DeathRansom is a ransomware family that was initially classified as a joke because it did not implement an effective encryption scheme. ru website. ” continues the report. .

Encryption 61

Encryption Ransomware Malware Scams 61

Security Affairs

JULY 28, 2020

US and UK cybersecurity agencies issued a joint advisory about the spread of QSnatch Data-Stealing Malware that already infected over 62,000 QNAP NAS devices. The QSnatch malware implements multiple functionalities, such as: . These are encrypted with the actor’s public key and sent to their infrastructure over HTTPS.

Malware 100

Malware Firmware Advertising Manufacturing 100

Security Affairs

AUGUST 2, 2020

The Taiwanese vendor QNAP urges its users to update the Malware Remover app following the alert on the QSnatch malware. The Taiwanese company QNAP is urging its users to update the Malware Remover app to prevent NAS devices from being infected by the QSnatch malware. Webshell functionality for remote access.

Malware 98

Malware Advertising Passwords Manufacturing 98

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. The Archiveus Trojan from 2006 was the first one to use RSA cipher, but it was reminiscent of a proof of concept and used a static 30-digit decryption password that was shortly cracked.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

OCTOBER 3, 2020

Facebook shared details about a long-running ad-fraud campaign that’s been ongoing since 2016 targeting Facebook users with SilentFade malware. The social network giant revealed that malware has a Chinese origin and allowed hackers to siphon $4 million from users’ advertising accounts. .

Malware 101

Malware Advertising Accountability Authentication 101

Security Affairs

JUNE 29, 2021

Like other ransomware gangs, Lorenz operators also implement double-extortion model by stealing data before encrypting it and threatening them if the victim doesn’t pay the ransom. Lorenz sends the name of the infected system to a C2 before encrypting the file. Lorenz places a header before the encrypted file instead.

Ransomware 115

Ransomware Encryption Passwords Malware 115

Security Affairs

FEBRUARY 24, 2019

The Fbot malware was first discovered by 360Netlab researchers, according to the experts, the root problem might be a specific OEM application running on top of the HiSilicon devices. “ After that, Fbot Loader (185.61.138.13) logs in to the target device web port through the device default password “admin/empty password”.

Malware 81

Malware Passwords Advertising Manufacturing 81

Security Affairs

FEBRUARY 24, 2020

Raccoon Malware is a recently discovered infostealer that can extract sensitive data from about 60 applications on a targeted system. Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. ” reads the report published by CyberArk.

Cybercrime 86

Cybercrime Malware Cryptocurrency Advertising 86

Security Affairs

SEPTEMBER 6, 2020

Baka is a sophisticated e-skimmer developed by a skilled malware developer that implements a unique obfuscation method and loader. The skimmer loads dynamically to avoid static malware scanners and uses unique encryption parameters for each victim to obfuscate the malicious code.” ” reads the alert published by VISA.

eCommerce 127

eCommerce Malware Encryption Advertising 127

Security Affairs

SEPTEMBER 23, 2019

Kaspersky experts spotted a new piece of ATM malware, dubbed ATMDtrack, that was developed and used by North Korea-linked hackers. Kaspersky researchers discovered a new piece of ATM malware, tracked as ATMDtrack, that was developed and used by North Korea-linked hackers. ” reads the analysis published by Kaspersky.

Malware 82

Malware Banking Advertising Encryption 82

Security Affairs

NOVEMBER 4, 2019

Security experts warn of a new piece of malware dubbed QSnatch that already infected thousands of QNAP NAS devices worldwide. A new piece of malware dubbed QSnatch is infecting thousands of NAS devices manufactured by the Taiwanese vendor QNAP. Gather all usernames and passwords related to the device and sent them to the C2 server.

Malware 59

Malware Firmware Advertising Encryption 59

Security Affairs

MARCH 17, 2020

In this campaign, crooks are exploiting the interest in the Coronavirus (COVID-19) outbreak to deliver a couple of malware, the CoronaVirus Ransomware and the Kpot information-stealing Trojan. The website was distributing a file named WSHSetup.exe, it is the downloader for both the CoronaVirus Ransomware and the Kpot password-stealer.

Ransomware 94

Ransomware Cryptocurrency Advertising Passwords 94

Krebs on Security

APRIL 22, 2019

The owner of a Swedish company behind a popular remote administration tool (RAT) implicated in thousands of malware attacks shares the same name as a Swedish man who pleaded guilty in 2015 to co-creating the Blackshades RAT , a similar product that was used to infect more than half a million computers with malware, KrebsOnSecurity has learned.

Advertising 203

Advertising Antivirus Software Malware 203

eSecurity Planet

JUNE 16, 2022

Cyber criminals may damage, destroy, steal, encrypt, expose, or leak data as well as cause harm to a system. Encrypted threats spiked 167%, ransomware increased 105%, and 5.4 billion malware attacks were identified by the report. Also read: Mobile Malware: Threats and Solutions. Ransomware.

Backups 145

Backups Ransomware Firewall Malware 145

SecureWorld News

MARCH 24, 2022

What was compromised: names, email addresses, and passwords. A majority of the passwords were protected by the weak SHA-1 hashing algorithm, which resulted in 99% of the credentials being posted by LeakSource.com in 2016. They then gained access to a customer service database and uploaded malware to capture sensitive information.

Data breaches 114

Data breaches Passwords Accountability Government 114

Fox IT

MAY 4, 2021

In this post we provide some history, analysis and observations on this most pernicious family of banking malware targeting Oceania, the UK, Germany and Italy. Despite its long and rich history in the cyber-criminal underworld, the Gozi malware family is surrounded with mystery and confusion. Introduction.

Banking 98

Banking Malware Encryption Architecture 98

Security Affairs

OCTOBER 17, 2018

Yoroi security firm uncovered a targeted attack against one of the most important companies in the Italian Naval Industry leveraging MartyMcFly Malware. At a first sight, the office document had an encrypted content available on OleObj.1 And why the attacker used an encrypted payload if the victim cannot open it? 1 and OleObj.2.

Malware 85

Malware Computers and Electronics Encryption Penetration Testing 85

Security Affairs

MAY 27, 2020

The new ransomware was first spotted by the malware researcher JamesWT_MHT that shared samples with the malware community. Upon executing the malware it displays a fake Coronavirus Map from the Center for Systems Science and Engineering at Johns Hopkins University.

Ransomware 111

Ransomware Encryption Advertising Malware 111

Adam Levin

NOVEMBER 23, 2020

in 2015 when BBB began collecting data. Public Wi-Fi networks are not secure and can expose you to malware and hackers. It’s best to do your banking and shopping at home, but if you have to use public Wi-Fi, consider using a VPN (virtual private network) that encrypts your activity. Change your passwords. Bottom line.

Scams 239

Scams Banking Retail Consumer Protection 239

Security Affairs

AUGUST 2, 2020

“Once an actor has infiltrated a network with Netwalker, a combination of malicious programs may be executed to harvest administrator credentials, steal valuable data, and encrypt user files. . Install and regularly update anti-virus or anti-malware software on all hosts. Use two-factor authentication with strong passwords.

Ransomware 126

Ransomware VPN Advertising Government 126

Security Affairs

OCTOBER 13, 2020

This type of malware attack is called a botnet attack. It’s powered by hundreds of bots carrying malware and infecting thousands of IoT devices simultaneously. Simple or reused passwords are still a problem. Instead, people come up with passwords that are comfortable. Malware, phishing, and web. Poor credentials.

IoT 129

IoT Cybersecurity Manufacturing Internet 129

Security Affairs

OCTOBER 19, 2020

A threat actor has breached the forum of Albion Online and stole usernames and password hashes from its database. On top of that, the attacker gained access to encrypted passwords (in technical terms: hashed and salted passwords).” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 101

Hacking Data breaches Passwords Advertising 101

Security Affairs

JUNE 28, 2020

” “We use Facebook and LinkedIn for account login and do not store any passwords on our system. If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. Members of the E27 are recommended to change their password as soon as possible.

Media 138

Media Hacking Passwords Data breaches 138

Security Affairs

JUNE 5, 2020

.” The investigation revealed that attackers disabled the organization’s anti-malware solution using the ProcessHacker utility and changed the passwords for Active Directory servers locking out the victim from its systems. A separate encryption thread will be created for each item in the path list.”continues

Ransomware 71

Ransomware Encryption Malware Advertising 71

Security Affairs

DECEMBER 4, 2018

Security experts reported a new strain of malware spreading in China, the malicious code rapidly infected over 100,000 PCs in just four days. “The document also steals information on tens of thousands of user passwords on platforms such as Taobao and Alipay.”

Ransomware 87

Ransomware Encryption Advertising Software 87

eSecurity Planet

SEPTEMBER 25, 2022

In 2013, for example, the FIDO Alliance was created to solve the world’s password problem by replacing login technology. By 2015, Microsoft joined, and in 2020, Apple followed. Apple has also promised that passwords will be a thing of the past, and passkeys will become available for iOS 16. See the Top Password Managers.

Passwords 122

Passwords Password Management Authentication Technology 122

Security Affairs

JANUARY 11, 2019

In this phase, the ransomware sends to the command and control server information on the encryption process, including a string that contains the Initialization Vector (IV) and a random password used by the ransomware to encrypt the files. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 92

Ransomware Encryption Advertising Passwords 92

Security Affairs

SEPTEMBER 20, 2019

Agent Tesla is a fully customizable password info-stealer offered as malware-as-a-service , many cyber criminals are choosing it as their preferred recognition tool. . Nowadays the Malware-As-A-Service is one of the criminal favorite ways to breach security perimeter. Agent Tesla is one of these “ commodity malware ”.

Malware 79

Malware Advertising Accountability Passwords 79

Security Affairs

JUNE 6, 2020

The ransomware, tracked by Intezer as “ QNAPCrypt ” and “ eCh0raix ” by Anomali, is written in the Go programming language and uses AES encryption to encrypt files. encrypt extension to filenames of encrypted files. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 106

Ransomware Encryption Advertising Manufacturing 106

Security Affairs

MAY 21, 2020

The data for any specific firewall depends upon the specific configuration and may include usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access.” Passwords associated with external authentication systems such as AD or LDAP are unaffected. ” concludes the report.

Firewall 128

Firewall Ransomware Passwords VPN 128

Security Affairs

SEPTEMBER 7, 2022

“As a variant, MooBot inherits Mirai’s most significant feature – a data section with embedded default login credentials and botnet configuration – but instead of using Mirai’s encryption key, 0xDEADBEEF, MooBot encrypts its data with 0x22.” ” At the time of the analysis, the C2 server was offline.

DDOS 97

DDOS Encryption Passwords Hacking 97

Security Affairs

FEBRUARY 25, 2021

“Once the malicious document is opened, the malware is dropped and proceeds to the next stage of the deployment process. The ThreatNeedle malware used in this campaign belongs to a malware family known as Manuscrypt, which belongs to the Lazarus group and has previously been seen attacking cryptocurrency businesses.”

Malware 92

Malware Cryptocurrency Password Management Encryption 92

SecureList

NOVEMBER 1, 2022

Since the malware in this incident was compiled on April 15, 2021, and compilation dates are the same for all known samples, this incident is likely to be the first involving Maui ransomware. This report included technical details of malware used in the campaign, such as Ecipekac, SodaMaster, P8RAT, FYAnti and QuasarRAT.

Malware 141

Malware Ransomware Spyware Encryption 141

SecureList

JUNE 16, 2021

Ferocious Kitten is an APT group that since at least 2015 has been targeting Persian-speaking individuals who appear to be based in Iran. We were able to trace the implant back to at least 2015, where it also had variants intended to hijack the execution of the Telegram and Chrome applications as a persistence method. Background.

Surveillance 137

Surveillance Malware Password Management Passwords 137

SecureWorld News

DECEMBER 29, 2020

What was compromised: names, email addresses, and passwords. A majority of the passwords were protected by the weak SHA-1 hashing algorithm, which resulted in 99% of the credentials being posted by LeakSource.com in 2016. They then gained access to a customer service database and uploaded malware to capture sensitive information.

Data breaches 96

Data breaches Passwords Accountability Government 96