Security Affairs

APRIL 9, 2019

LimeRAT is a powerful Remote Administration Tool publicly available to any internet user, it is an open-source project freely available on Github. Also, the attacker behind this sample leans on the Dynamic DNS service “warzonedns.com”, pointing to the 213.183.58[.10 10 IP address located in Russia. 1986[@gmail[.com”,

Malware 72

Malware Advertising DNS Antivirus 72

Elie

DECEMBER 2, 2017

This post provides a retrospective analysis of Mirai — the infamous Internet-of-Things botnet that took down major websites via massive distributed denial-of-service using hundreds of thousands of compromised Internet-Of-Things devices. This blog post recounts Mirai’s tale from start to finish. Mirai takedown the Internet.

IoT 107

IoT DDOS Internet Internet 107

LRQA Nettitude Labs

APRIL 16, 2024

Unfortunately, when the PuTTY developers repurposed this DSA implementation for ECDSA in 2017, they made an oversight. via DNS spoofing) to redirect the user to a malicious SSH server would be able to capture signatures in order to exploit this vulnerability if the user ignores the SSH key fingerprint change warning.

Authentication 69

Authentication DNS Software Encryption 69

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. SCA detected 289 alerts including Suspected Port Abuse, Internal Port Scanner, New Unusual DNS Resolver,and Protocol Violation (Geographic).

Wireless 62

Wireless DNS Mobile Technology 62

eSecurity Planet

FEBRUARY 8, 2021

According to security firm Gemini Advisory, the Fin7 hacker group stole data on more than five million credit and debit cards that had been used at HBC credit card terminals beginning in May 2017. Evolving threats. vSkimmer malware, a successor to Dexter, dates back to 2013. Errors to avoid.

Retail 52

Retail Encryption Malware Artificial Intelligence 52

SecureList

APRIL 27, 2021

Further investigation of the Sunburst backdoor revealed several features that overlap with a previously identified backdoor known as Kazuar , a.NET backdoor first reported in 2017 and tentatively linked to the Turla APT group. In November and December 2020, two public blog posts were published about this campaign.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

OCTOBER 26, 2021

In June, more than six months after DarkHalo had gone dark, we observed the DNS hijacking of multiple government zones of a CIS member state that allowed the attacker to redirect traffic from government mail servers to computers under their control – probably achieved by obtaining credentials to the control panel of the victims’ registrar.

Malware 143

Malware Government Surveillance Spyware 143