Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Malware 123

Malware Phishing Antivirus Hacking 123

Security Affairs

APRIL 30, 2021

The weaponized RTF documents generated with the exploit builder are able to trigger the CVE-2017-11882 , CVE-2018-0798 , CVE-2018-0802 vulnerabilities in Microsoft’s Equation Editor. ” The report published by the experts also includes MITRE ATT&CK Matrix, researchers could contact the security firm for IoCs.

Phishing 130

Phishing Malware Antivirus Encryption 130

The Last Watchdog

JANUARY 28, 2019

And the malware that subsequently gets installed continues to get more stealthy and capable with each advancing iteration. Researchers recently flushed out a new variety of the Xbash family of malware tuned to seek out administrators’ rights and take control of Linux servers. Apps from other sources can carry malware or spyware.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

OCTOBER 4, 2021

In March, the cyberespionage group was observed leveraging ProxyShell against targets in 10 countries and used a variety of malware in its campaign. FRP, Cobalt Strike Beacon, and Tiny Shell) and previously undetected malware tracked as ProxyT, BeaconLoader and the DoorMe backdoor. ” reads the analysis published by the experts.

Energy and Utilities 88

Energy and Utilities Malware Technology Antivirus 88

Security Affairs

DECEMBER 28, 2021

Check Point researchers have published a detailed analysis of the DoubleFeature tool used to log post-exploitation activities in attacks conducted by the Equation Group and involving the DanderSpritz malware framework. The tool also includes features to bypass Antivirus engines and perform other malicious activities. .

Antivirus 91

Antivirus Malware Hacking Engineering 91

Security Affairs

FEBRUARY 16, 2021

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware. Javali trojan is active since November 2017 and targets users of financial and banking organizations geolocated in Brazil and Mexico. From here, the malware executes a new thread when specific and hardcoded web-browsers are opened.

Antivirus 118

Antivirus Malware Banking Internet 118

Security Affairs

JANUARY 29, 2021

Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to ZINC, a DPRK-affiliated and state-sponsored group, based on observed tradecraft, infrastructure, malware patterns, and account affiliations.” Not all visitors to the site were infected. ” concludes Microsoft.

Malware 113

Malware Antivirus Hacking Accountability 113

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The first half of 2019 saw a 10-fold increase in the number of password-protected objects, such as documents and archive files, being used to deliver malware. Another trend was disguising malware in emails.

Ransomware 70

Ransomware Antivirus Malware Banking 70

The Last Watchdog

JUNE 21, 2020

Balaban This ransomware was doing the rounds over spam generated by the Gameover ZeuS botnet, which had been originally launched in 2011 as a toolkit for stealing victim’s banking credentials and was repurposed for malware propagation. These included PClock, CryptoLocker 2.0, Crypt0L0cker, and TorrentLocker.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

MAY 23, 2019

The third one is related to binary payloads abusing code signature tricks to evade traditional security controls. Sample information. As study case we chosen a Word document containing the CVE-2017-0199 exploit, which allows the document to download and execute arbitrary code at opening time. The Broken Doc. Spoofed Signature.

Antivirus 82

Antivirus Malware Advertising Cyber Attacks 82

Security Affairs

JUNE 23, 2020

Fxmsp gained worldwide fame in May 2019, after it was reported that the networks belonging to leading antivirus software companies had been compromised. Fxmsp included one of his Jabber accounts, in his contact information on the forum which helped Group-IB researchers to establish his presumed identity. Geography and victims.

Antivirus 83

Antivirus Advertising Hacking Banking 83

Security Affairs

DECEMBER 7, 2019

US DoJ charged two Russian citizens for deploying the Dridex malware and for their involvement in international bank fraud and computer hacking schemes. The Bugat malware a multifunction malware package designed to automate the theft of confidential personal and financial information. Attorney Brady.

Banking 65

Banking Malware Cybercrime Accountability 65

Security Affairs

JUNE 27, 2019

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. ” continues the report.

Identity Theft 81

Identity Theft Hacking System Administration Advertising 81

Security Affairs

APRIL 26, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 94

Spyware Hacking Advertising Antivirus 94

Security Affairs

AUGUST 24, 2020

In some attacks, they attempted to elevate privileges using exploit for CVE-2017-0213. For instance, to disable built-in antivirus software, the attackers used Defender Control and Your Uninstaller. Interestingly, the threat actors likely didn’t have a clear plan on what to do with the compromised networks.

Threat Detection 85

Threat Detection Ransomware Advertising Cybercrime 85

CyberSecurity Insiders

JANUARY 31, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Malware 107

Malware Computers and Electronics Adware Spyware 107

eSecurity Planet

DECEMBER 3, 2021

Here are the top Twitter accounts to follow for the latest commentary, research, and much-needed humor in the ever-evolving information security space. Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. Brian Krebs | @briankrebs.

Accountability 134

Accountability Cybersecurity Penetration Testing InfoSec 134

Spinone

NOVEMBER 15, 2016

Information Technology research and advisory company, Gartner, presented its top predictions for the cybersecurity industry for 2017 earlier this year. Previously Separate Security Policies Must Overlap and Converge Information security, IT security, and physical security are no longer separate concepts.

Cybersecurity 40

Cybersecurity Software Internet Internet 40

The Last Watchdog

FEBRUARY 28, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Security Affairs

JULY 8, 2020

Once the hacker gained access to the network, the deployed password-stealing malware and remote access trojans (RATs) to harvest credentials and establish persistence in the system. The name Fxmsp refers a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information.

Hacking 72

Hacking Antivirus Advertising Cybercrime 72

The Last Watchdog

AUGUST 15, 2019

A survey of local media reports by Recorded Future tallied 38 ransomware attacks against cities in 2017, rising to 53 attacks in 2018. While reporting for USA Today in 2009, I wrote about how fraudsters launched scareware campaigns to lock up computer screens as a means to extract $80 for worthless antivirus protection.

Ransomware 196

Ransomware Internet Internet Hacking 196

Security Affairs

NOVEMBER 28, 2020

Once the hacker gained access to the network, they deployed password-stealing malware and remote access trojans (RATs) to harvest credentials and establish persistence in the system. The name Fxmsp refers a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information.

Accountability 104

Accountability Cybercrime Hacking Retail 104

Security Affairs

NOVEMBER 21, 2019

There is misleading information circulating about Microsoft Teams, along with references to RDP (BlueKeep), as ways in which this malware spreads.” “Our security research teams have investigated and found no evidence to support these claims. SecurityAffairs – DoppelPaymer ransomware, malware).

Ransomware 81

Ransomware Social Engineering Malware Advertising 81

Security Affairs

JULY 7, 2019

Firefox finally addressed the Antivirus software TLS Errors. US Cyber Command warns of Iran-linked hackers exploiting CVE-2017-11774 Outlook flaw. Magento fixed security flaws that allow complete site takeover. Cryptomining Campaign involves Golang malware to target Linux servers. LooCipher: The New Infernal Ransomware.

Scams 48

Scams Spyware DNS Advertising 48

Security Affairs

APRIL 28, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 95

Cybercrime Spyware Data breaches Antivirus 95

eSecurity Planet

NOVEMBER 7, 2022

In the ever-evolving world of malware , rootkits are some of the most dangerous threats out there. Because of how deeply embedded kernel-mode rootkits are within a computer’s system, they can be one of the most damaging types of malware out there. Looking for More About Malware? Check Out What is Malware?

Firmware 109

Firmware Malware Antivirus Firewall 109

Security Affairs

DECEMBER 11, 2022

The first MuddyWater campaign was observed in late 2017 when targeted entities in the Middle East. HTML attachments are often delivered to the recipients and not blocked by antivirus and email security solutions. The experts pointed out that the campaign exhibits updated TTPs.

Antivirus 91

Antivirus Hacking Information Security Malware 91