article thumbnail

Experts link the Black Basta ransomware operation to FIN7 cybercrime gang

Security Affairs

In order to weaken the security defenses installed on the target machine, Black Basta targets installed security solutions with specific batch scripts downloaded into the Windows directory. The DisableAntiSpyware parameter allows disabling the Windows Defender Antivirus in order to deploy another security solution.

article thumbnail

Weekly Vulnerability Recap – October 30, 2023 – Citrix & Cisco Haunted by Vulnerabilities

eSecurity Planet

ESET Research reported the vulnerability and recommends installing email security and endpoint protection technology to automatically block loading of JavaScript payloads in emails and to detect the exfiltration of emails to defend against future zero-day attacks.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Dutch police arrested the author of Dryad and Rubella Macro Builders

Security Affairs

The Rubella Macro Builder crimeware kit appeared in the threat landscape on April 2018 and rapidly gained popularity in the cybercriminal underground. The macro might also purposely attempt to bypass endpoint security defenses. .

Malware 72
article thumbnail

Who’s Behind the GandCrab Ransomware?

Krebs on Security

But GandCrab far eclipsed the success of competing ransomware affiliate programs largely because its authors worked assiduously to update the malware so that it could evade antivirus and other security defenses. In November 2018, a GandCrab affiliate posted a screenshot on the Exploit[.]in

article thumbnail

5 Major Cybersecurity Trends to Know for 2024

eSecurity Planet

While these solutions (such as [Microsoft365]) offer a level of protection and capabilities (antivirus, anti-spam, archiving, etc.), To fill this gap, organizations will look to integrated cloud email (ICE) security solutions that leverage data science (AI/ML) and organizational specific intelligence (indicators).”

article thumbnail

What Is Encryption? Definition, How it Works, & Examples

eSecurity Planet

In 2018, Australia passed a Telecommunications and Other Legislation Amendment that permits a five-year jail penalty to be applied to visitors that refuse to provide passwords for all digital devices when crossing the border into Australia. Pressure on both professional and personal encryption can also be seen in government legislation.

article thumbnail

APT trends report Q1 2021

SecureList

On February 24, the National Security Defense Council of Ukraine (NSDC) publicly warned that a threat actor had exploited a national documents circulation system (SEI EB) to distribute malicious documents to Ukrainian public authorities. Domestic Kitten is a threat group mainly known for its mobile backdoors.

Malware 139