The Last Watchdog

JUNE 21, 2020

The above-mentioned AIDS Trojan hailing from the distant pre-Internet era was the progenitor of the trend, but its real-world impact was close to zero. The WannaCry and NotPetya outbreaks in May and June 2017, respectively, were the most devastating in history.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

MARCH 29, 2020

The source code of the infamous Dharma ransomware is now available for sale on two Russian-language hacking forums. The source code of one of the most profitable ransomware families, the Dharma ransomware , is up for sale on two Russian-language hacking forums. The source is offered for a price as low as $2,000, as reported by ZDNet.

Ransomware 109

Ransomware Hacking Advertising Malware 109

Security Affairs

APRIL 19, 2021

Among the most clamorous attacks against industrial organizations, there is the 2015 attack against the electric grid in Ukraine and the 2017 Triton attack against a Saudi petrochemical plant. ” If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, smart meters).

Hacking 118

Hacking Phishing Accountability Internet 118

Security Affairs

MARCH 26, 2024

The activity of the TheMoon botnet was first spotted in 2014, and since 2017 its operators added to the code of the bot at least 6 IoT device exploits. The researchers believe that the malware connects the NTP to verify the infected device’s internet connection and confirm it is not operating within a sandbox environment.

IoT 123

IoT Cybercrime Internet Internet 123

Security Affairs

OCTOBER 5, 2022

Narelle Devine, the company’s chief information security officer for the Asia Pacific region, added that no customer account information was stored on the third-party platform. It seems that the security breach also impacted other companies. SecurityAffairs – hacking, Telstra Telecom). Pierluigi Paganini.

Data breaches 87

Data breaches Telecommunications Accountability Information Security 87

Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. ” reads the advisory published by the CERT-UA. “Note (!) .’ “Note (!)

Telecommunications 106

Telecommunications Authentication Data collection Passwords 106

Krebs on Security

JUNE 22, 2022

last week said they dismantled the “ RSOCKS ” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. Authorities in the United States, Germany, the Netherlands and the U.K.

Advertising 267

Advertising Cybercrime System Administration Hacking 267

Security Affairs

JANUARY 5, 2024

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. The Kyivstar mobile network serves about 26 million mobile customers and more than 1 million broadband fixed internet customers in the country. All mobile communications and internet access were temporarily interrupted.

Mobile 89

Mobile Telecommunications Cyber Attacks Internet 89

Security Affairs

JUNE 26, 2020

A new botnet, tracked as Lucifer, appeared in the threat landscape, it leverages close to a dozen exploits to hack Windows systems. Once compromised the system, the attacker can execute arbitrary commands on the infected device, experts noticed that the bot could target Windows hosts on both the internet and intranet.

DDOS 127

DDOS Malware Advertising Passwords 127

Security Affairs

JANUARY 19, 2020

According to ZDNet that first published the news, the list was leaked on a popular hacking forum by the operator of a DDoS booter service. The list appears to be the result of an Internet scan for devices using default credentials or easy-to-guess passwords. SecurityAffairs – Telnet credentials, hacking). Pierluigi Paganini.

IoT 88

IoT DDOS InfoSec Internet 88

Security Affairs

AUGUST 20, 2021

The master decryption keys work for victims that were infected between July 2017 and early 2021. The keys have been verified as authentic by Michael Gillespie , a malware analyst at security firm Emsisoft and the creator of the ID-Ransomware service.”. SecurityAffairs – hacking, SynAck). Pierluigi Paganini.

Ransomware 109

Ransomware Encryption Authentication Internet 109

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. SecurityAffairs – hacking, botnet). The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT 115

IoT DDOS Malware Firmware 115

Security Affairs

JUNE 26, 2021

million unique records containing customers’ info, including customer names, addresses, emails, phone numbers, and some purchased vehicle information to determine the impact. Data belongs to individuals that provided their information to Mercedez-Benz and dealer websites between 2014 and 2017. Pierluigi Paganini.

Data breaches 111

Data breaches Internet Internet Engineering 111

Security Affairs

FEBRUARY 6, 2020

Below the attack chain that was visible in the video PoC: The attacker takes control over the smart bulb by exploiting a vulnerability in smart light bulbs in 2017. SecurityAffairs – Smart Light Bulbs, hacking). The post Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs appeared first on Security Affairs.

Hacking 118

Hacking IoT Wireless Firmware 118

Security Affairs

JUNE 26, 2020

On August 2018, Schuchman has been indicted on federal computer hacking charges after rival hackers fingered him as the creator of a Mirai variant dubbed Satori that infected at least 500,000 internet routers around the word. Schuchman, Vamp, and Drake created the Satori botnet in between July and August 2017.

DDOS 144

DDOS IoT Advertising Internet 144

Security Affairs

FEBRUARY 15, 2021

The French security agency ANSSI is warming of a series of attacks targeting Centreon monitoring software used by multiple French organizations and attributes them to the Russia-linked Sandworm APT group. The first attack spotted by ANSSI experts dates back to the end of 2017 and the campaign continued until 2020. Pierluigi Paganini.

VPN 124

VPN Software Internet Internet 124

The Security Ledger

AUGUST 27, 2018

In this week’s episode (#110): the second major flaw in Apache Struts 2 in as many years and has put the information security community on alert. But is this vulnerability as serious as the last, which resulted in the hack of the firm Equifax? But what would happen if someone figured out to how to hack electricity demand?

IoT 40

IoT Hacking Information Security Internet 40

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. The module that implements the warm capabilities was spotted scanning the internet and performing password brute-force attacks against Windows systems with SMB port open online.

DNS 128

DNS Cryptocurrency Internet Internet 128

Pen Test

OCTOBER 12, 2023

Introduction Radio Frequency (RF) penetration testing, popularly referred to as RF pentesting, stands as a vital domain within ethical hacking. In contemporary times, with the exponential growth of the Internet of Things (IoT), smart homes, connected cars, and wearable devices, the importance of RF pentesting has soared significantly.

Penetration Testing 52

Penetration Testing Wireless IoT Technology 52

Security Affairs

DECEMBER 15, 2023

The protocol enables secure and low-cost data transfer. It is designed to address the limitations of current Internet infrastructure, which is centralized, inefficient, and vulnerable to censorship. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ransomware)

Malware 110

Malware Architecture Technology DDOS 110

Security Affairs

NOVEMBER 30, 2021

Experts from Qihoo 360’s Network Security Research Lab discovered a new botnet, dubbed EwDoor , that targets AT&T customers using EdgeMarc Enterprise Session Border Controller (ESBC) edge devices that are publicly exposed to the Internet. SecurityAffairs – hacking, EwDoor ). Pierluigi Paganini.

DDOS 133

DDOS Backups Engineering Encryption 133

Security Affairs

MAY 27, 2022

This exposure of sensitive credential and network access information, especially privileged user accounts, could lead to subsequent cyber attacks against individual users or affiliated organizations.” Crooks obtain the information by conducting spear-phishing and ransomware attacks, or other means. To nominate, please visit:?.

Cybercrime 130

Cybercrime Education Accountability Phishing 130

Security Affairs

JUNE 13, 2021

According to the experts, the BackdoorDiplomacy APT group has been active since at least 2017. The attack chain starts with exploits for vulnerable internet-exposed systems such as web servers and management interfaces for networking equipment. SecurityAffairs – hacking, APT). Pierluigi Paganini.

Telecommunications 115

Telecommunications Hacking Media Encryption 115

Security Affairs

DECEMBER 11, 2022

Truebot has been active since 2017 and some researchers linked it to the Silence Group , while a recent investigation linked it to threat actor TA505 (aka Evil Corp). SecurityAffairs – hacking, TrueBot). The post TrueBot infections were observed in Clop ransomware attacks appeared first on Security Affairs.

Ransomware 120

Ransomware Malware Internet Internet 120

Security Affairs

NOVEMBER 9, 2023

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. The APT group was first observed in the victim’s environment in June 2022, at the time the attackers deployed the Neo-REGEORG webshell on an internet-facing server. ” continues the report.

Telecommunications 108

Telecommunications Hacking Technology Internet 108

Security Affairs

FEBRUARY 17, 2021

The French security agency ANSSI recently warned of a series of attacks targeting Centreon monitoring software used by multiple French organizations and attributes them to the Russia-linked Sandworm APT group. The first attack spotted by ANSSI experts dates back to the end of 2017 and the campaign continued until 2020.

Software 95

Software Hacking Cyber Attacks Internet 95

Security Affairs

AUGUST 30, 2020

The US DoJ has filed a civil forfeiture complaint with the intent to seize control over 280 Bitcoin and Ethereum accounts that are believed to be holding funds which are the proceeds of hacking campaigns conducted by North Korea-linked APT groups against two cryptocurrency exchanges. SecurityAffairs – hacking, North Korea).

Cryptocurrency 116

Cryptocurrency Hacking Advertising Accountability 116

The Last Watchdog

JANUARY 28, 2019

Consider that most of us spend more time navigating the Internet on our laptops and smartphones than we do behind the wheel of a car. The end game for this particular hacking ring is to install crypto currency mining routines on compromised Linux servers. Each of us have a responsibility to embrace best privacy and security practices.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

JUNE 17, 2019

The attackers are leveraging a still-unpatched zero-day vulnerability, tracked as CVE-2017-6526 , to gain full control over the targeted systems. The vulnerability in dnaLIMS was reported to the vendor in 2017, but it is still unpatched. SecurityAffairs – DNA sequencer applications, hacking). IP address that is located in Iran.

DDOS 78

DDOS Advertising IoT Marketing 78

Security Affairs

MARCH 21, 2022

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. SecurityAffairs – hacking, botnet). The post DirtyMoe modules expand the bot using worm-like techniques appeared first on Security Affairs. Pierluigi Paganini.

Malware 73

Malware Passwords DDOS Internet 73

Security Affairs

APRIL 1, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA) The post CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

Spyware 80

Spyware Surveillance Mobile Education 80

Security Affairs

DECEMBER 15, 2022

Unlike the CVE-2017-0144 flaw triggered by the EternalBlue exploit, which only affected the SMB protocol, the CVE-2022-37958 flaw could potentially affect a wider range of Windows systems due to a larger attack surface of services exposed to the public internet (HTTP, RDP, SMB) or on internal networks. Pierluigi Paganini.

Authentication 99

Authentication Internet Internet Hacking 99

Security Affairs

OCTOBER 20, 2022

Microsoft announced that sensitive data belonging to some of its customers were exposed on the Internet due to a misconfigured Microsoft server. The data leak was discovered by the security threat intelligence firm SOCRadar which notified the IT giant on September 24, 2022. The exposed data are dated from 2017 to August 2022.

Authentication 123

Authentication Internet Internet Hacking 123

Security Affairs

OCTOBER 30, 2022

As a result, the darkweb marketplace was shut down in 2017 by the BKA also arrested its operator and sentenced him to seven years in prison in 2018. The accused is suspected of operating a criminal trading platform on the Internet in accordance with Section 127 of the Criminal Code.” ” continues the announcement.

Marketing 94

Marketing Cybercrime Mobile Internet 94

Security Affairs

JUNE 18, 2022

Department of Justice, together with law enforcement partners in Germany, the Netherlands and the United Kingdom, have dismantled the infrastructure of a Russian botnet known as RSOCKS which hacked millions of computers and other electronic devices around the world.” SecurityAffairs – hacking, RSOCKS). ” continues DoJ.

Computers and Electronics 95

Computers and Electronics Internet Internet Manufacturing 95

Security Affairs

OCTOBER 29, 2020

ransomware, that was first spotted in late 2017 and was available for sale on the open market as of August 2018. Microsoft announced to have taken down 62 of the original 69 TrickBot C&C servers, seven servers that could not be brought down last week were Internet of Things (IoT) devices. SecurityAffairs – hacking, ransomware).

Healthcare 143

Healthcare Ransomware Cybercrime Advertising 143

Security Affairs

AUGUST 29, 2020

“According to the FBI’s Internet Crime Complaint Center (IC3), which provides the public with a means of reporting Internet-facilitated crimes, romance scams result in greater financial losses to victims when compared to other online crimes.” SecurityAffairs – hacking, romance scams). Pierluigi Paganini.

Scams 112

Scams Internet Internet Advertising 112