Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “Recently, a new infection vector that cracks Windows machines through SMB password brute force is on the rise” reads the analysis published by AVAST.

DNS 128

DNS Cryptocurrency Internet Internet 128

Krebs on Security

APRIL 2, 2019

Yet the list of features and plugins advertised for this RAT includes functionality that goes significantly beyond what one might see in a traditional remote administration tool, such as DDoS-for-hire capabilities, and the ability to disable the light indicator on webcams so as not to alert the target that the RAT is active. “It

Advertising 225

Advertising Malware Marketing Software 225

SecureList

FEBRUARY 10, 2022

Q4 2021 saw the appearance of several new DDoS botnets. A zombie network, named Abcbot by researchers, first hit the radar in July, but at the time it was little more than a simple scanner attacking Linux systems by brute-forcing weak passwords and exploiting known vulnerabilities. In some cases, DNS amplification was also used.

DDOS 119

DDOS Cryptocurrency Marketing Accountability 119

Elie

DECEMBER 2, 2017

distributed Denial of service attacks (DDoS). Mirai represents a turning point for DDoS attacks: IoT botnets are the new norm. OVH DDoS attack. At that time, It was propelled in the spotlight when it was used to carry massive DDoS attacks against. Krebs on Security. via massive. Krebs on Security attack. August 2016.

IoT 107

IoT DDOS Internet Internet 107

eSecurity Planet

FEBRUARY 16, 2021

In 2017, more than 300,000 WordPress websites were affected by a malicious plugin that allowed an attacker to place embedded hidden links on victim websites. Always change the default passwords for any IoT devices you install before extended use. Good password hygiene is one of the best ways to prevent access to keyloggers.

Malware 105

Malware Adware Spyware Antivirus 105

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. The OOXML files have an external reference to the attacker’s server and download an RTF document exploiting the CVE-2017-11882 vulnerability. The attack targets victims with spear-phishing emails containing malicious OOXML files.

Malware 137

Malware Firmware Government Phishing 137

SecureList

NOVEMBER 18, 2022

The former threatened files accessible from the internet over SMB protocol and protected by a weak account password. Most of the network threats detected in Q3 2022 were again attacks associated with brute-forcing passwords for Microsoft SQL Server, RDP, and other services. Attacks via web resources.

Mobile 96

Mobile Malware Ransomware IoT 96