article thumbnail

Security Affairs newsletter Round 469 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

article thumbnail

Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

Krebs on Security

In contrast, WormGPT has promoted itself as a new, uncensored LLM that was created specifically for cybercrime activities. WormGPT was initially sold exclusively on HackForums , a sprawling, English-language community that has long featured a bustling marketplace for cybercrime tools and services.

Malware 220
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. Researchers recommend properly configuring the firewall to protect the devices exposed online, enable automatic updates, and monitor network traffic. The botnet targets multiple architectures, including arm, bsd, x64, and x86.

Malware 138
article thumbnail

What Is a Backdoor Attack?

SiteLock

As cybercrime increases, your security measures should, too. Backdoor attacks increased by 173% between 2017 and 2018. As cybercrime advances and backdoor attacks become even more prevalent, it’s vital that small businesses pay close attention to their cybersecurity efforts. million versus $4.25 How to Prevent Backdoor Attacks.

article thumbnail

Cybersecurity Year in Review and Our Predictions Moving Forward

SiteLock

In it, we identified the trends, threats, and innovations in cybercrime that small businesses need to know about in order to keep their websites secure. Even as the number of attacks rose, only 60,000 sites in our sample were actually compromised — which is comparable to our 2017 findings. Remove any unnecessary or outdated plug-ins.

article thumbnail

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

Security Affairs

The cybercrime group Rocke is using a new piece of cryptojacking malware called Pro-Ocean to target vulnerable Apache ActiveMQ, Oracle WebLogic, and Redis intalls. In our analysis, we found Pro-Ocean targeting Apache ActiveMQ (CVE-2016-3088), Oracle WebLogic (CVE-2017-10271) and Redis (unsecure instances).”

Malware 78
article thumbnail

Australian man charged with creating and selling the Imminent Monitor spyware

Security Affairs

The Australian Federal Police (AFP) launched an investigation into the case, codenamed Cepheus, in 2017 after it received information about a “suspicious RAT” from cybersecurity firm Palo Alto Networks and the U.S. The Imminent Monitor RAT is a hacking tool that allows threat actors to remotely control the victim’s computers.

Spyware 97