Security Affairs

JUNE 27, 2021

“While the Windows system is in safe mode antivirus software doesn’t work. The researchers started investigating the threat after they became aware that the malware was disabling and uninstalling its antivirus from infected devices. “It also uses WQL to query all antivirus software installed SELECT * FROM AntiVirusProduct.”

Antivirus 113

Antivirus Cryptocurrency Malware Software 113

Security Affairs

APRIL 7, 2021

Attackers are actively exploiting the CVE-2018-13379 flaw in Fortinet VPN to deploy the Cring ransomware to organizations in the industrial sector. was used at the time of the attack), which enabled the attackers to exploit the CVE-2018-13379 vulnerability and gain access to the enterprise network.” ” continues Kaspersky.

VPN 102

VPN Ransomware Antivirus Firmware 102

Security Affairs

NOVEMBER 26, 2019

Security researchers from SEC Consult Vulnerability Lab discovered that multiple Fortinet products use a weak encryption cipher (“XOR” with a static key) and cryptographic keys to communicate with the FortiGuard Web Filter, AntiSpam and AntiVirus cloud services. SecurityAffairs – Fortinet, hacking). Pierluigi Paganini.

Encryption 118

Encryption Antivirus DNS Advertising 118

SecureWorld News

JULY 19, 2021

As detailed in public charging documents unsealed in October 2018 and July and September 2020, hackers with a history of working for the PRC Ministry of State Security (MSS) have engaged in ransomware attacks, cyber enabled extortion, crypto-jacking, and rank theft from victims around the world, all for financial gain.

Hacking 87

Hacking Government Antivirus Healthcare 87

Security Affairs

APRIL 19, 2021

The antivirus company Avast analyzed the case of a simple malware dubbed HackBoss and how it allowed its operators to earn more $560K worth of cryptocurrency since November 2018. The tools were published on a Telegram channel named Hack Boss that was created on November 26, 2018, and has over 2,500 subscribers.

Cryptocurrency 144

Cryptocurrency Malware Hacking Banking 144

Security Affairs

SEPTEMBER 2, 2020

Experts warn of the KryptoCibule Windows malware that has been active since late 2018 and has targeted users in the Czech Republic and Slovakia. The malware has been active since at least December 2018, it targets cryptocurrency users as a triple threat. SecurityAffairs – hacking, KryptoCibule). ” concludes ESET.

Cryptocurrency 134

Cryptocurrency Antivirus Malware Advertising 134

Krebs on Security

APRIL 22, 2019

” But critics say WebMonitor is far more likely to be deployed on “pwned” devices, or those that are surreptitiously hacked. court to computer hacking and to creating, marketing and selling Blackshades , a RAT that was used to compromise and spy on hundreds of thousands of computers.

Advertising 192

Advertising Antivirus Software Malware 192

Security Affairs

FEBRUARY 7, 2020

The operators behind the infamous RobbinHood ransomware are exploiting a vulnerable GIGABYTE driver to kill antivirus products. Ransomware operators leverage a custom antivirus killing p ackage that is delivered to workstations to disable security solution before starting encryption. . Pierluigi Paganini.

Software 128

Software Ransomware Antivirus Encryption 128

Security Affairs

APRIL 11, 2019

Unfortunately this isn’t the first time that the VSDC site has been hacked. In July 2018, experts from Chinese security firm Qihoo 360 Total Security discovered that attackers hijacked the download links of the VSDC website. SecurityAffairs – hacking, VSDC). Pierluigi Paganini.

Software 68

Software Hacking Banking Malware 68

Security Affairs

JUNE 23, 2021

One of the fathers of antivirus software, the entrepreneur John McAfee has been found dead in a Barcelona prison cell while he was waiting for extradition to the US. The authorities claim that the McAfee failed to file tax returns for incomes related to a period between 2014 and 2018. SecurityAffairs – hacking, McAfee).

Cryptocurrency 136

Cryptocurrency Banking Accountability Antivirus 136

Security Affairs

NOVEMBER 3, 2022

Sentinel Labs found evidence that links the Black Basta ransomware gang to the financially motivated hacking group FIN7. The DisableAntiSpyware parameter allows disabling the Windows Defender Antivirus in order to deploy another security solution. SecurityAffairs – hacking, FIN7). Pierluigi Paganini.

Cybercrime 99

Cybercrime Ransomware Antivirus Malware 99

Krebs on Security

SEPTEMBER 30, 2023

The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. Details after contacting on jabber: truniger@xmpp[.]jp.”

Ransomware 213

Ransomware Accountability Cybercrime Backups 213

Security Affairs

NOVEMBER 26, 2019

Kaspersky has addressed several vulnerabilities in the web protection features implemented in its antivirus solutions, including Internet Security, Total Security, Free Anti-Virus , Security Cloud, and Small Office Security products. As in: under some circumstances, antivirus would still crash. SecurityAffairs – Kaspersky, hacking).

Antivirus 84

Antivirus Advertising Password Management Passwords 84

Security Affairs

APRIL 30, 2021

The weaponized RTF documents generated with the exploit builder are able to trigger the CVE-2017-11882 , CVE-2018-0798 , CVE-2018-0802 vulnerabilities in Microsoft’s Equation Editor. SecurityAffairs – hacking, Russian defense contractor). ” reads the analysis published by Cybereason. Pierluigi Paganini.

Phishing 131

Phishing Malware Antivirus Encryption 131

The Last Watchdog

APRIL 26, 2021

I’ve written this countless times: keep your antivirus updated, click judiciously, practice good password hygiene. As part of this mindset, more consumers are subscribing to a personal VPN service which they use to shield themselves from disinformation sweeps and to protect themselves from Covid 19-related hacks and scams.

B2C 214

B2C VPN Marketing Antivirus 214

Security Affairs

AUGUST 3, 2020

The GandCrab ransomware-as-a-service first emerged from Russian crime underground in early 2018. The GandCrab was advertised in the Russian hacking community, researchers from LMNTRIX who discovered it noticed that authors was leveraging the RIG and GrandSoft exploit kits to distribute the malware. Pierluigi Paganini.

Ransomware 123

Ransomware Advertising Malware Hacking 123

CyberSecurity Insiders

JANUARY 6, 2023

First launched in 2004 and updated most recently in 2018, the PCI Data Security (PCI DSS) standard is continually updated to reflect the evolving challenges of the cyberthreat landscape. Requirement 5: It is no longer sufficient to just have standard antivirus software. The current version, PCI DSS v3.2.1,

Antivirus 138

Antivirus Retail Software Accountability 138

Krebs on Security

JULY 18, 2022

These two software are currently unknown to most if not all antivirus companies.” “FUD” in the ad above refers to software and download links that are “Fully UnDetectable” as suspicious or malicious by all antivirus software. The Exe Clean service made malware look like goodware to antivirus products.

VPN 297

VPN Computers and Electronics Antivirus Software 297

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts pointed out that the number of infected systems could be far greater because data provided by AVAST are only related to systems running their antivirus solution. Pierluigi Paganini.

DNS 133

DNS Cryptocurrency Internet Internet 133

Security Affairs

JUNE 11, 2021

million Windows systems between 2018 and 2020. The software includes illegal Adobe Photoshop 2018, a Windows cracking tool, and several cracked games.” SecurityAffairs – hacking, custom malware). Researchers from NordLocker have discovered an unsecured database containing 1.2-terabyte terabyte of stolen data.

Malware 115

Malware Computers and Electronics Software Financial Services 115

Krebs on Security

JULY 28, 2022

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

Advertising 210

Advertising Software Computers and Electronics Internet 210

CyberSecurity Insiders

JANUARY 5, 2023

Though Fortinet that is into the business of selling security solutions such as firewalls and antivirus solutions has fixed the flaw, it appears to be too late, as hackers are buying and selling details of compromised devices on some hacking forums. But for reasons they made the information public in Jan 2023.

VPN 52

VPN Ransomware Antivirus Firewall 52

Security Affairs

NOVEMBER 11, 2021

Beta, D6220, D6400, D7000 CVE-2018-10561, CVE-2018-10562 GPON home routers CVE-2013-3307 Linksys X3000 1.0.03 CVE-2018-10088 XiongMai uc-httpd 1.0.0 BotenaGo was written in Golang (Go) and at the time of the report published by the experts, it had a low antivirus (AV) detection rate (6/62). Beta, R6400 before 1.0.1.18.Beta,

IoT 125

IoT Firmware Malware Wireless 125

Security Affairs

FEBRUARY 7, 2020

Japanese defense contractors Pasco and Kobe Steel have disclosed security breaches that they have suffered back in 2016 and 2018. Kobe identified unauthorized access to its network in August 2016 and in June 2017, Pasco had detected the intrusion in May 2018. SecurityAffairs – Pasco and Kobe Steel, hacking). Pierluigi Paganini.

Manufacturing 108

Manufacturing Data breaches Advertising Antivirus 108

Security Affairs

JANUARY 31, 2020

“In July 2018, we succeeded in decrypting encrypted communication with an infected server and an external server that was performing unauthorized communication, and stored it on our internal server for information sharing with other departments used by our defense business division 27,445 files were found to have been accessed illegally.

Data breaches 96

Data breaches Advertising Antivirus Encryption 96

Security Affairs

APRIL 27, 2020

The Shade infections increased during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size. SecurityAffairs – Shade Ransomware, hacking). Moth of the victims belongs to high-tech, wholesale and education sectors.

Ransomware 125

Ransomware Advertising Antivirus Education 125

Security Affairs

APRIL 17, 2019

The malicious code is under continuous enhancement, it is offered for sale on various hacking forums as a keylogger and stealer, it allows to monitor systems and exfiltrate information. The latest variant appeared in the cybercrime underground in December 2018, it was named HawkEye Reborn v9. ” continues the analysis.

Antivirus 85

Antivirus Malware Advertising Passwords 85

The Last Watchdog

JANUARY 28, 2019

The end game for this particular hacking ring is to install crypto currency mining routines on compromised Linux servers. Xbash gets rolling by infecting one device, which then serves as the launch pad for deeper hacking forays limited only by the attacker’s initiative. To be sure, it’s not as if the good guys aren’t also innovating.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

MARCH 19, 2019

rar) spread by #WinRAR exploit ( #CVE -2018-20250). The vulnerability, tracked as CVE-2018-20250, was discovered by experts at Check Point in February, it could allow an attacker to gain control of the target system. At the moment of writing, 29 antivirus engines detect JNEC.a a ransomware , hacking ).

Ransomware 73

Ransomware Antivirus Encryption Advertising 73

Security Affairs

FEBRUARY 27, 2019

The experts initially detected the specially-crafted PDF files in December 2018. “Since late December 2018, EdgeSpot has detected multiple PDF samples in the wild which exploit a Google Chrome zero-day flaw.” SecurityAffairs – zero-day, hacking). ” reads the analysis published by EdgeSpot. Pierluigi Paganini.

Advertising 110

Advertising Antivirus Internet Internet 110

Security Affairs

SEPTEMBER 22, 2018

The Latvian expert Ruslans Bondars (37), who developed and run the counter antivirus service Scan4You has been sentenced to 14 years in prison. Scan4you is a VirusTotal like online multi-engine antivirus scanning service that could be used by vxers to test evasion abilities of their malware against the major antiviruses. billion.

Malware 95

Malware Antivirus Retail Advertising 95

Malwarebytes

NOVEMBER 30, 2023

ScamClub is a threat actor who’s been involved in malvertising activities since 2018. To be clear, AP, ESPN, CBS and other sites were not hacked, but rather showed malicious ads. Chances are you probably ran into one of their online scams on your mobile device. That affiliate was previously reported but continues unabated.

Mobile 134

Mobile Scams Antivirus Malware 134

Security Affairs

MARCH 28, 2019

The discovery was made by experts at Kaspersky Lab, the campaign has been ongoing since at least November 2018, Kaspersky Lab reports. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. ” Kaspersky says. .

Cryptocurrency 91

Cryptocurrency Malware Advertising Antivirus 91

Security Affairs

APRIL 2, 2021

The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591. Install and regularly update antivirus and anti-malware software on all hosts. SecurityAffairs – hacking, Fortinet FortiOS). Disable hyperlinks in received emails. Pierluigi Paganini.

Passwords 68

Passwords Government Firmware Accountability 68

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The second half of 2018 saw a drop in the number of malicious programs downloaded via browsers reaching its minimum at less than 5%, while in the first half of 2019 only every 19 th download was initiated via means other than email.

Ransomware 71

Ransomware Antivirus Malware Banking 71

CyberSecurity Insiders

JANUARY 26, 2022

As of the publishing of this article, antivirus (AV) vendor detection for BotenaGo and its variants remains behind with very low detection coverage from most of AV vendors. In the same repository, we have found additional hacking tools collected from several different sources. Background. The original source of the code is yet unknown.

Malware 81

Malware IoT Authentication Antivirus 81

Krebs on Security

MARCH 22, 2022

When I first began writing about Vrublevsky in 2009 as a reporter for The Washington Post , ChronoPay and its sister firm Red & Partners (RNP) were earning millions setting up payment infrastructure for fake antivirus peddlers and spammers pimping male enhancement drugs. The latest document in the hacked archive is dated April 2021.

Banking 188

Banking Marketing DDOS Risk 188