Security Affairs

APRIL 11, 2024

Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware Microsoft addressed two zero-day vulnerabilities, tracked as CVE-2024-29988 and CVE-2024-26234, that threat actors are exploiting to deliver malware.

Malware 108

Malware DNS Mobile Software 108

Security Affairs

DECEMBER 21, 2023

Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882, to spread the Agent Tesla malware. Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882 (CVSS score: 7.8), as part of phishing campaigns to spread the Agent Tesla malware.

Malware 91

Malware Phishing Spyware Cyber threats 91

CyberSecurity Insiders

JULY 27, 2022

A novel malware named CosmicStrand is said to be targeting the old motherboards offered by Asus and Gigabyte and the crux is that it can survive operating system re-installs and it survives in Unified Extensible Firmware Interface (UEFIs) unlike just the storage drive.

Malware 129

Malware Firmware Antivirus Marketing 129

The Hacker News

APRIL 10, 2023

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites.

Malware 132

Malware 132

Tech Republic Security

FEBRUARY 15, 2022

Dubbed TA2541 by Proofpoint researchers, the group has been attacking targets in several critical industries since 2017 with phishing emails and cloud-hosted malware droppers. The post Researchers discover common threat actor behind aviation and defense malware campaigns appeared first on TechRepublic.

Malware 140

Malware Phishing 140

Krebs on Security

MAY 18, 2020

Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals. RedBear’s profile on the Russian-language xss[.]is

Malware 306

Malware Cybercrime Ransomware Marketing 306

Security Affairs

FEBRUARY 2, 2024

The Computer Emergency Response Team in Ukraine (CERT-UA) reported that a PurpleFox malware campaign had already infected at least 2,000 computers in the country. Experts defined DirtyMoe as a complex malware that has been designed as a modular system. ” reads the alert published by CERT-UA.

Malware 93

Malware Internet Internet DDOS 93

The Hacker News

JULY 28, 2023

The threat actors linked to the malware loader known as IcedID have made updates to the BackConnect (BC) module that's used for post-compromise activity on hacked systems, new findings from Team Cymru reveal.

Malware 93

Malware Banking Hacking 93

SiteLock

AUGUST 27, 2021

2017 was a big year for malware, hacks, and data breaches. The second is a strain of malware found in pirated premium WordPress themes , which adds a backdoor account to a site that can be used to execute attacks at a later time. Your hosts discuss the facts and what happens next.

Hacking 98

Hacking Encryption Data breaches Malware 98

SiteLock

AUGUST 27, 2021

SiteLock is proud to share the latest installment of our quarterly security report, The SiteLock Website Security Insider Q3 2017 ! Featuring exciting new research, the SiteLock Website Security Insider Q3 2017 reveals that cybercriminals continue to become more ambitious. of infections. of infections.

Media 52

Media Malware Risk Engineering 52

The Hacker News

JANUARY 16, 2023

Central Intelligence Agency (CIA)'s Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017. Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S.

Malware 137

Malware 137

The Hacker News

DECEMBER 20, 2023

Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla.

Malware 87

Malware Phishing 87

Security Affairs

DECEMBER 15, 2023

Experts uncovered a new Go-based multi-platform malware, tracked as NKAbuse, which is the first malware abusing NKN technology. Researchers from Kaspersky’s Global Emergency Response Team ( GERT ) and GReAT uncovered a new multiplatform malware dubbed NKAbuse. ” reads the report published by Kaspersky.

Malware 104

Malware Architecture Technology DDOS 104

Security Affairs

OCTOBER 16, 2023

Researchers uncovered an ongoing campaign abusing popular messaging platforms Skype and Teams to distribute the DarkGate malware. The threat actors abused popular messaging platforms such as Skype and Teams to deliver a script used as a loader for a second-stage payload, which was an AutoIT script containing the DarkGate malware.

Malware 102

Malware Cryptocurrency Accountability Cybercrime 102

Heimadal Security

OCTOBER 27, 2022

The North Korean cyberespionage group known as Kimsuky has been observed exploiting three different Android malware targeted specifically at South Korean users. Kimsuky, also known as Velvet Chollima, Thallium, or Black Banshee, is a North Korean-based cybercrime group with operations going back to 2017.

Malware 113

Malware Cybercrime Cybersecurity 113

Security Boulevard

MAY 31, 2023

Throughout the day we will have a chance to meet dozens of more than 350 strategic buyers and […] The post Seceon to Participate In AGC Partners’ 2017 Boston Technology Growth Conference appeared first on Seceon. The post Seceon to Participate In AGC Partners’ 2017 Boston Technology Growth Conference appeared first on Security Boulevard.

Technology 52

Technology Artificial Intelligence Spyware DDOS 52

Security Boulevard

MAY 31, 2023

Throughout the day we will have a chance to meet dozens of more than 350 strategic buyers and […] The post Seceon to Participate In AGC Partners’ 2017 Boston Technology Growth Conference appeared first on Seceon. The post Seceon to Participate In AGC Partners’ 2017 Boston Technology Growth Conference appeared first on Security Boulevard.

Technology 52

Technology Artificial Intelligence Spyware DDOS 52

SiteLock

AUGUST 27, 2021

We are excited to announce that SiteLock ® INFINITY™ was recently recognized as a winner of the 2017 Cloud Computing Excellence Awards by TMC’s Cloud Computing Magazine. INFINITY is a state of the art malware and vulnerability remediation service featuring unique, patent-pending technology.

Surveillance 52

Surveillance Malware Internet Internet 52

CyberSecurity Insiders

JANUARY 17, 2022

Microsoft has issued an official warning to all IT and not-for-profit organizations, along with some critical government organizations across Ukraine, that their digital infrastructure could be targeted by a dreaded data wiping malware campaign.

Malware 139

Malware Government Technology Authentication 139

CyberSecurity Insiders

JANUARY 4, 2022

A new malware developed by China is on the prowl on the web and is seen targeting Japanese companies for now. First it sneaks into the network to evaluate the target defense-line and then a second stage malware is then induced and executed to conduct espionage, data steal and such.

Malware 132

Malware Manufacturing Media Phishing 132

The Hacker News

AUGUST 20, 2021

ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017.

Malware 145

Malware 145

Krebs on Security

APRIL 19, 2019

Marcus Hutchins, a 24-year-old blogger and malware researcher arrested in 2017 for allegedly authoring and selling malware designed to steal online banking credentials, has pleaded guilty to criminal charges of conspiracy and to making, selling or advertising illegal wiretapping devices.

Banking 166

Banking Malware Advertising Government 166

Security Affairs

APRIL 23, 2020

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. The name ‘Nazar’ comes from the debug paths he found in the dump alongside Farsi resources in some of the malware droppers. ” continues the expert. . Pierluigi Paganini.

Hacking 102

Hacking Advertising Malware Engineering 102

Security Affairs

JULY 2, 2019

US Cyber Command posted on Twitter an alert about cyber attacks exploiting the CVE-2017-11774 vulnerability in Outlook. Yesterday I was using Twitter when I noticed the following alert issued by the account managed by the US Cyber Command : USCYBERCOM has discovered active malicious use of CVE-2017-11774 and recommends immediate #patching.

Energy and Utilities 78

Energy and Utilities Malware Advertising InfoSec 78

SiteLock

AUGUST 27, 2021

We’re excited to announce that SiteLock INFINITY was recently recognized as a finalist in the Cybersecurity Excellence Awards in the Anti-Malware category! INFINITY is a state of the art malware and vulnerability remediation service featuring unique, patent-pending technology. About SiteLock INFINITY.

Cybersecurity 52

Cybersecurity Malware Technology Information Security 52

Heimadal Security

JULY 15, 2021

Dubbed “the malware that signs you up for pricey services”, Joker has been flooding Android markets for the last few years, generally infecting apps on Google’s Play Store. Back in April, however, the malware also occurred on Huawei’s platform, infecting more than 500,000 users.

Malware 98

Malware Marketing Mobile Cybersecurity 98

The Hacker News

MARCH 28, 2023

Multiple threat actors have been observed using two new variants of the IcedID malware in the wild with more limited functionality that removes functionality related to online banking fraud. IcedID, also known as BokBot, started off as a banking trojan in 2017. It's also capable of delivering additional malware, including ransomware.

Banking 75

Banking Malware Ransomware 75

Security Affairs

JANUARY 16, 2023

Netlab 360 observed unidentified threat actors using a new backdoor based on the US CIA’s Project Hive malware suite. Researchers from Qihoo Netlab 360 reported that unidentified threat actors using a new backdoor based on the US CIA’s Project Hive malware suite. SecurityAffairs – hacking, malware).

Malware 92

Malware Encryption Authentication Hacking 92

SiteLock

AUGUST 27, 2021

He shared what SiteLock has learned about malware since 2008, and from scanning 6 million websites daily. One example of the data shared was that 80% of malware is found within the first 25 pages of a website. Our very own Neill Feather , president of SiteLock, took a data-based approach to his presentation.

B2C 98

B2C eCommerce Malware Marketing 98

Security Affairs

JANUARY 7, 2023

Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware. Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. ” concludes the report.

Malware 87

Malware Phishing Banking Hacking 87

Security Affairs

AUGUST 31, 2023

Russia-linked threat actors have been targeting Android devices of the Ukrainian military with a new malware dubbed Infamous Chisel. The GCHQ’s National Cyber Security Centre (NCSC) and agencies in the United States, Australia, Canada, and New Zealand have published an analysis of the Android malware.

Malware 105

Malware Authentication Threat Detection Government 105

Malwarebytes

OCTOBER 28, 2021

Unlike traditional malware, which relies on a file being written to a disk, fileless malware is intended to be memory resident only, ideally leaving no trace after its execution. For an attacker, fileless malware has two major advantages: There is no file for traditional anti-virus software to detect. Is fileless malware new?

Malware 123

Malware Artificial Intelligence Software Ransomware 123

Penetration Testing

MARCH 19, 2024

One such threat, identified and analyzed by Juniper Threat Labs, is AndroxGh0st, a Python-based malware specifically... The post AndroxGh0st: The Python Malware Targeting Laravel Apps appeared first on Penetration Testing.

Malware 71

Malware Penetration Testing Cybersecurity 71

CyberSecurity Insiders

JUNE 28, 2022

The anti-malware firm is linking the attackers to a Chinese group of Threat Actors and confirmed that the threat actors have interests in targeting SMBs from Asian countries as often such companies do not have enough resources to tackle such attacks.

Malware 111

Malware Telecommunications Surveillance Cyber threats 111

CyberSecurity Insiders

MARCH 29, 2022

Details are in that Racoon Stealing malware aka password stealing malicious software was being distributed in a MAAS (malware as a service) service for a price range of $75 to $200 on monthly note. The post Racoon stealer malware suspends its operations due to war on Ukraine appeared first on Cybersecurity Insiders.

Malware 127

Malware Passwords Cryptocurrency Software 127

Schneier on Security

JANUARY 22, 2018

Kaspersky Labs is reporting on a new piece of sophisticated malware: We observed many web landing pages that mimic the sites of mobile operators and which are used to spread the Android implants. The activities continue: the most recently observed domain was registered on October 31, 2017. It seems to be Italian. BoingBoing post.

Malware 144

Malware Government Spyware Hacking 144

SiteLock

AUGUST 27, 2021

Kostas Nicolacopoulos (@KostasNi) November 4, 2017. Our experience as sponsors was top notch and allowed us to dive deep into conversations about our malware auto-removal , WAF , and CDN services. Because your ultimate goal should be to connect with your audience via your content, not just rank high in search results. Hey, that’s me !

Architecture 98

Architecture Marketing Malware Software 98