Remove 2017 Remove Adware Remove Antivirus Remove Hacking
article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

article thumbnail

IT threat evolution Q1 2021. Non-mobile statistics

SecureList

The most common vulnerability in the suite remains CVE-2017-11882 , a stack buffer overflow that occurs when processing objects in the Equation Editor component. Updated adware for the new Macs also immediately appeared, in particular the Pirrit family (whose members placed high in our Top 20 threats for macOS). into the system.

Mobile 87
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IT threat evolution in Q2 2021. PC statistics

SecureList

Web antivirus recognized 675,832,360 unique URLs as malicious. Our file antivirus detected 68,294,298 unique malicious and potentially unwanted objects. Also seen in Q2 was the similar vulnerability CVE-2017-11882 , which causes a buffer overflow on the stack in the same component. Country*. % of attacked users**. Mauritania.

Adware 90
article thumbnail

IT threat evolution Q1 2021

SecureList

Further investigation of the Sunburst backdoor revealed several features that overlap with a previously identified backdoor known as Kazuar , a.NET backdoor first reported in 2017 and tentatively linked to the Turla APT group. Most malicious objects detected for the macOS platform are adware. Secondhand news.

Malware 93
article thumbnail

IT threat evolution Q3 2022

SecureList

All of them were ordinary people using our free antivirus solution, seemingly unconnected with any organization of interest to a sophisticated attacker of this kind. In another, they were able to compromise a WebLogic server through an exploit for the CVE-2017-10271 vulnerability, which ultimately allowed them to run a script.

Malware 99