Remove 2017 Remove Firewall Remove Firmware Remove Internet
article thumbnail

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

Ax with firmware 1.04b12 and earlier. CVE-2017-6077. NETGEAR DGN2200 devices with firmware through 10.0.0.50. Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.2, Affected products include: NAS326 before firmware V5.21(AAZF.7)C0 7)C0 NAS520 before firmware V5.21(AASZ.3)C0

Malware 85
article thumbnail

US dismantled the Russia-linked Cyclops Blink botnet

Security Affairs

“The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used for command and control (C2) of the underlying botnet.” The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017, causing billions worth of damage.

Malware 87
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

Maintain minimal exposure to the Internet on Linux servers and IoT devices and use a properly configured firewall. Install security and firmware upgrades from vendors, as soon as possible. 4000898: AV EXPLOIT Netgear DGN2200 ping.cgi – Possible Command Injection ( CVE-2017-6077 ). Recommended actions. Conclusion.

Malware 81
article thumbnail

Silex malware bricks thousands of IoT devices in a few hours

Security Affairs

Cashdollar explained that the Silex malware trashes the storage of the infected devices, drops firewall rules and wipe network configurations before halting the system. The only way to recover infected devices is to manually reinstall the device’s firmware. pic.twitter.com/Ue661ku0fy — Larry W. ” reported ZDnet.

IoT 103
article thumbnail

GUEST ESSAY: The story behind how DataTribe is helping to seed ‘Cybersecurity Valley’ in Maryland

The Last Watchdog

Bureau of Labor Statistics, the Baltimore metropolitan area alone had more than 61,000 people working in computer and mathematical occupations as of May 2017, almost all in IT-related fields. ReFirm Labs, meanwhile, has developed a radically new approach to securing heretofore insecure connected devices through firmware validation.

article thumbnail

Millions of Arris routers are vulnerable to path traversal attacks

Malwarebytes

This web server is present in Arris firmware which can be found in several router models. ISP customer premise equipment (CPE) often uses this web server, and ISP subscribers will typically get these routers in loan for telephony and Internet access. Unfortunately the Arris firmware is based on the vulnerable version of muhttpd.

Firmware 144
article thumbnail

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

Security Affairs

To perform the experiment, we used Internet of Things (IoT) search engines to search for open devices that utilized common printer ports and protocols. After filtering out most of the false positives, we were left with more than 800,000 printers that had network printing features enabled and were accessible over the internet.

Hacking 143