Security Affairs

APRIL 2, 2025

In March 2018, security researchers at Antivirus firmDr.Web discovered that 42 models of low-cost Android smartphones were shipped with the Android.Triada.231 The most interesting characteristic of the Triada Trojan is its modular architecture, which gives it theoretically a wide range of abilities. 231 banking malware.

Malware 121

Malware Cryptocurrency Mobile Firmware 121

Anton on Security

JUNE 17, 2022

For example, in my analyst days, I built a maturity model for a SOC (2018) , a SIEM deployment (2018) and vulnerability management (2017). Thanks to Google SOAR Solution Architecture Manager Oleg Siminel , and others from the Siemplify field team, for their support here. Guess which one is missing? The one for SOAR!

Architecture 246

Architecture Technology Phishing 246

Security Affairs

NOVEMBER 2, 2024

Since 2018, Sophos has faced increasingly aggressive campaigns, including the India-based Sophos subsidiary Cyberoam, where attackers exploited a wall-mounted display for initial access. The first documented attack against a Sophos facility is the one that targeted Cyberoam in 2018. ” concludes the report.

Firmware 121

Firmware Government Firewall Malware 121

Schneier on Security

OCTOBER 3, 2019

Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.]. MIPS is both the most common CPU architecture and least hardened on average. Their website contains the raw data.

IoT 234

IoT Firmware Data collection Architecture 234

Security Affairs

MARCH 20, 2025

DCRat first appeared in the threat landscape in 2018, but a year later it was redesigned and relaunched. The modular architecture of the malware allows to extend its functionalities for multiple malicious purposes, including surveillance, reconnaissance, information theft, DDoS attacks, and arbitrary code execution.

Computers and Electronics 108

Computers and Electronics Telecommunications Malware Surveillance 108

SiteLock

AUGUST 27, 2021

While we love every event we attend, we’ve rounded some of our favorites from the past year so you can start marking the calendar for opportunities that fit your business or personal needs (hence the title—SiteLock Reviews: Events We Love in 2018). Previous Date: March 2, 2018 in Tampa, FL. Check out our WordCamp US 2017 recap here.

Education 98

Education Architecture Marketing Mobile 98

Security Affairs

JULY 4, 2019

Kaspersky experts discovered that Sodinokibi, aka Sodin, Ransomware currently also exploits the CVE-2018-8453 vulnerability to elevate privileges in Windows. To escalate privileges, Sodin leverages the vulnerability in win32k.sys, then it executes of two shellcode options contained in the Trojan body depending on the processor architecture.

Ransomware 107

Ransomware Encryption Advertising Malware 107

Security Affairs

AUGUST 18, 2024

Both networks used a deep convolutional GAN architecture and were trained adversarially with a Wasserstein loss function and RMSProp optimizer at a learning rate of 0.00005. The researchers trained two generator networks using the Wasserstein GAN (WGAN) algorithm to create synthetic fingerprints.

Architecture 140

Architecture Hacking Risk Information Security 140

Dark Reading

DECEMBER 18, 2017

Cloud security architecture skills to customer-service savvy are among the key IT security skills needed next year as CIOs ramp up hiring.

Architecture 103

Architecture Cybersecurity 103

Security Affairs

JANUARY 21, 2025

The experts used a diagnostic software to analyze the vehicle architecture, scan the Electronic Control Unit (ECU), identify its version, and test diagnostic functions. The experts focused their analysis on the Mercedes-Benz User Experience (MBUX) infotainment system, which was first presented by the carmaker in 2018.

Software 132

Software Architecture Media Engineering 132

Schneier on Security

OCTOBER 13, 2020

On October 25, 2018, police obtained records showing that Molina’s Honda had been impounded earlier that year after Molina’s stepfather was caught driving the car without a license. We have knowingly and willingly built the architecture of a police state, just so companies can show us ads.

Surveillance 363

Surveillance Wireless Accountability Architecture 363

SiteLock

AUGUST 27, 2021

Drilling down in specificity supports the DRY methodology and helps you keep your sanity in modern content architectures growing in complexity. Blocks & Triangles: Front-end Architecture in the Gutenberg Era. With my longtime love for Information Architecture and Content Strategy, this man was talkin’ my language!

Architecture 98

Architecture Internet Internet 98

SecureWorld News

FEBRUARY 20, 2025

Experts warn that organizations must act decisively to protect against this growing threat by implementing Zero Trust architectures, patching vulnerabilities, and strengthening identity security.

Ransomware 113

Ransomware IoT Encryption Social Engineering 113

Security Affairs

AUGUST 28, 2018

According to the threat intelligence firm Volexity, the CVE-2018-11776 vulnerability is already being abused in malicious attacks in the wild. Just yesterday I wrote about the availability online of the exploit code for the recently discovered Critical remote code execution vulnerability CVE-2018-11776 in Apache Struts 2.

Architecture 73

Architecture Cryptocurrency Advertising Wireless 73

Security Affairs

OCTOBER 22, 2018

The OS supports more than 40 hardware architectures, it is used in a broad range of products, including appliances, sensors, electricity meters, fitness trackers, industrial automation systems, cars, electricity meters, and any microcontroller-based devices. CVE-2018-16522. CVE-2018-16525. CVE-2018-16526. CVE-2018-16528.

IoT 111

IoT Cyber Attacks Internet Internet 111

Security Affairs

MAY 30, 2024

ThreatFabric observed threat actors using two publicly available exploits (CVE-2018-4233, CVE-2018-4404) to deliver macOS implants. The experts noticed that a portion of the CVE-2018-4404 exploit is likely borrowed from the Metasploit framework. The flaw resides in WebKit and impacts macOS version 10.13.3

Spyware 137

Spyware Malware Surveillance Mobile 137

Security Affairs

MARCH 2, 2024

from April 29, 2018, to May 10, 2020). The Judge, however, decided that NSO Group would not be forced to reveal the names of its clients or information about its server architecture. In September 2018, a report published by Citizen Lab revealed that the NSO Pegasus spyware was used against targets across 45 countries worldwide.

Spyware 143

Spyware Surveillance Software Architecture 143

Security Affairs

APRIL 17, 2022

The botnet targets multiple architectures, including arm, bsd, x64, and x86. Then the script downloads the actual Enemybot binary which is compiled for the target device’s architecture. The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion.

DDOS 145

DDOS Architecture Malware Cybercrime 145

Security Affairs

SEPTEMBER 22, 2018

Security experts at ESET have recently observed a surge in activity of DanaBot banking Trojan that is now targeting Poland, Italy, Germany, Austria, and as of September 2018, Ukraine. “Further to this development, on September 8, 2018, ESET discovered a new DanaBot campaign targeting Ukrainian users.”

Banking 110

Banking Advertising VPN Architecture 110

Krebs on Security

SEPTEMBER 5, 2023

LastPass says that since 2018 it has required a twelve-character minimum for master passwords, which the company said “greatly minimizes the ability for successful brute force password guessing.” In February 2018, LastPass changed the default to 100,100 iterations. And very recently, it upped that again to 600,000.

Cryptocurrency 361

Cryptocurrency Passwords Encryption Accountability 361

Security Affairs

MAY 14, 2019

. “MDS may allow a malicious user who can locally execute code on a system to infer the values of protected data otherwise protected by architectural mechanisms.” “Refer to the MDS table in Deep dive: CPUID Enumeration and Architectural MSRs for a list of processors that may be affected by MDS.

Architecture 111

Architecture Advertising Encryption Passwords 111

Security Affairs

APRIL 10, 2019

Palo Alto Networks researchers discovered a new variant of the Mirai malware that is targeting more processor architectures than previous ones. Mirai botnet continues to be one of the most dangerous malware in the threat landscape, experts at Palo Alto Networks discovered a new variant that targets more processor architectures than before.

Architecture 111

Architecture DDOS IoT Internet 111

Security Affairs

SEPTEMBER 20, 2020

. “Our analysis of this particular sample indicates the file executes on microprocessor without interlocked pipelined stages (MIPS) architecture. This is an extension understood by machines running reduced instruction set computer (RISC) architecture, which is prevalent on many IoT devices.” ” continues the analysis.

IoT 145

IoT DDOS Architecture Passwords 145

Security Affairs

JULY 11, 2019

According to the experts, the new versions have been active at least since 2018, one of the samples analyzed by Kaspersky was used last month in Myanmar, where local government is accused of violating human rights. The implant analyzed by the experts contained binary files for ARMv7 and ARM64 CPU architectures.

Spyware 111

Spyware Advertising Mobile Architecture 111

Security Affairs

DECEMBER 22, 2022

the malware operators have removed CVE-2018-12613, a phpMyAdmin vulnerability that could allow threat actors to view or execute files. Zerobot targets multiple architectures, including i386, amd64, arm, arm64, mips, mips64, mips64le, mipsle, ppc64, ppc64le, riscv64, and s390x. . “Since the release of Zerobot 1.1,

IoT 127

IoT DDOS Malware Firmware 127

Security Affairs

SEPTEMBER 13, 2019

The attackers were able to exploit CVE-2018-1000861 to gain a foothold and install the Watchbog malware on the affected systems.” Then determines whether it can write to various directories, checks the system architecture, and then makes three attempts to download and install a ‘kerberods’ dropper using wget or curl.

Architecture 106

Architecture Cryptocurrency Malware Advertising 106

Security Affairs

MAY 30, 2022

The botnet targets multiple architectures, including arm, bsd, x64, and x86. LFI CVE-2018-16763 Fuel CMS 1.4.1 LFI CVE-2018-16763 Fuel CMS 1.4.1 The botnet was first discovered by Fortinet in March, the DDoS botnet targeted several routers and web servers by exploiting known vulnerabilities.

Malware 145

Malware DDOS IoT Cybercrime 145

Adam Shostack

JULY 8, 2019

In the United States in 2018, an estimated 40,000 people lost their lives in car crashes, and 4.5 I also like Figure 27 & 28 (shown), showing risks associated with a generic architecture. It’s important to remember that driving is incredibly dangerous. million people were seriously injured. (I’ve

Risk 140

Risk Manufacturing Architecture Cybersecurity 140

Security Affairs

JANUARY 16, 2019

The GreyEnergy implant is also known as “FELIXROOT” backdoor: FireEye researchers published a technical article on July 2018 about a spear-phishing campaign trying to deliver the malware to undisclosed targets. The entire malware architecture is modular and very difficult to neutralize. and “KdfrJKN”.

Malware 92

Malware Architecture Advertising InfoSec 92

Security Affairs

NOVEMBER 11, 2020

Muhstik is a botnet that is known to use web application exploits to compromise IoT devices, it has been around for at least 2018. The bot includes exploits for Oracle WebLogic Server vulnerabilities CVE-2019-2725 and CVE-2017-10271 , and the Drupal RCE flaw tracked as CVE-2018-7600. y/pty2 hxxp://167.99.39.134/.x/pty3.

IoT 133

IoT Malware DDOS Architecture 133

Security Affairs

FEBRUARY 13, 2020

In November 2018, the Wall Street Journal reported that the US Government was urging its allies to exclude Huawei from critical infrastructure and 5G architectures. Huawei issued a statement on Wednesday denying any accusation, it “has never and will never covertly access telecom networks, nor do we have the capability to do so.”.

Manufacturing 145

Manufacturing Advertising Surveillance Architecture 145

SiteLock

AUGUST 27, 2021

2018 DrupalCon attendees, photo courtesy the Drupal Association. DrupalCon 2018 Exhibitors Hall, courtesy of the Drupal Association. DrupalCon 2018 window art in the Music City Hall lobby. In fact, decoupled architecture is such a hot topic right now that there is an entire conference in its second year dedicated to the topic.

Architecture 52

Architecture Government Mobile Media 52

Security Affairs

OCTOBER 12, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. CISA and FBI have observed attacks carried out by APT actors that combined two the CVE-2018-13379 and CVE-2020-1472 flaws.

VPN 145

VPN Government Authentication Advertising 145

The Last Watchdog

APRIL 23, 2019

billion in 2018. Tech vendors and their enterprise customers want to leverage distributed architectures and multiple cloud platforms to the hilt. We want to have a feedback loop that resonates with the workflows these new architectures deliver,” Naor told me. billion in 2021 , up from $40.8

Marketing 193

Marketing Firewall Architecture Software 193

SecureList

OCTOBER 15, 2024

SideWinder, aka T-APT-04 or RattleSnake, is one of the most prolific APT groups that began its activities in 2012 and was first publicly mentioned by us in 2018. Some infection routines do not check the architecture. The payloads are selected at runtime according to the system architecture, and merged before injection.

Malware 144

Malware Encryption Architecture Phishing 144

SecureList

APRIL 17, 2025

To us, this observed choice of victims wasn’t surprising, as back in 2018, we wrote that IronHusky, the actor related to this RAT, has a specific interest in targeting these two countries. It turned out that the implant has been actively used in cyberattacks all these years although not reported.

Malware 93

Malware Encryption Architecture Engineering 93

Security Affairs

JULY 25, 2022

Amadey Bot is a data-stealing malware that was first spotted in 2018, it also allows operators to install additional payloads. computer name, user name, OS version, architecture type, list of installed anti-malware products) to the operators. It also supports a feature to register itself to Task Scheduler for the same purpose.

Software 132

Software Malware Cybercrime VPN 132