Security Affairs

MAY 1, 2024

The China-linked threat actors Muddling Meerkat are manipulating DNS to probe networks globally since 2019. Infoblox researchers observed China-linked threat actors Muddling Meerkat using sophisticated DNS activities since 2019 to bypass traditional security measures and probe networks worldwide.

DNS 119

DNS Firewall DDOS Hacking 119

Security Affairs

JUNE 13, 2019

Encrypted messaging service Telegram was hit by a major DDoS attack apparently originated from China, likely linked to the ongoing political unrest in Hong Kong. We’re currently experiencing a powerful DDoS attack, Telegram users in the Americas and some users from other countries may experience connection issues. Pierluigi Paganini.

DDOS 103

DDOS Advertising Surveillance Encryption 103

Security Affairs

OCTOBER 25, 2019

This week Amazon Web Services (AWS) suffered a major distributed denial-of-service (DDoS) attack that made it unavailable for some customers. This week, threat actors launched a massive DDoS attack against Amazon Web Services (AWS) causing the inability of some customers to access their AWS S3 buckets. SecurityAffairs – Amazon, DDoS).

DDOS 51

DDOS DNS Advertising Engineering 51

Security Affairs

DECEMBER 5, 2019

China is accused to have used the “Great Cannon” DDoS tool to launch attacks against LIHKG , a forum used by Hong Kong residents to organize protests. The last time the Great Cannon was used by the Chinese authorities was in 2017 when it was involved in DDoS attacks on the Mingjingnews.com site, a US-based Chinese media outlet.

DDOS 63

DDOS Firewall Advertising Government 63

Security Affairs

SEPTEMBER 9, 2019

The popular free online encyclopedia Wikipedia was not reachable following what it has described as a “malicious attack” Popular online reference website Wikipedia went down in several countries after the server of the Wikimedia Foundation that host it were hit by a “massive” Distributed Denial of Service (DDoS) attack.

DDOS 79

DDOS Advertising Engineering Information Security 79

Security Affairs

NOVEMBER 1, 2021

The botnet was created to launch DDoS attacks and to insert advertisements in the legitimate HTTP traffic of the victims, most of which are in China (96%). ” The experts first analyzed the bot on November 21, 2019 after they received a sample from the security community. million devices.

Architecture 122

Architecture DDOS Advertising Firmware 122

Security Affairs

OCTOBER 12, 2021

The botnet appeared on the threat landscape in November 2020, the attacks aimed at compromising the target systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaigns. CVE-2019-12725 – Zeroshell 3.9.0. from visual-tools.com. P4410-V2-1.28

DDOS 95

DDOS Surveillance Hacking Internet 95

Security Affairs

OCTOBER 5, 2020

Security researchers at Netlab, the network security division Qihoo 360, have published a report that details an IoT botnet dubbed Ttint. The experts are monitoring the Mirai-based botnet since November 2019 and observed it exploiting two Tenda router 0-day vulnerabilities to spread a Remote Access Trojan (RAT).

IoT 138

IoT Firmware DNS Advertising 138

Security Affairs

SEPTEMBER 20, 2020

The Mozi botnet accounted for 90% of the IoT network traffic observed between October 2019 and June 2020, IBM reported. Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. reads the analysis published by the experts.

IoT 124

IoT DDOS Architecture Passwords 124

Security Affairs

FEBRUARY 16, 2023

Once the attacker gains control of a vulnerable device in this manner, they could take advantage by including the newly compromised devices in their botnet to conduct further attacks such as DDoS.” ” concludes the report. “Therefore, it is highly recommended that patches and updates are applied when possible.”

IoT 97

IoT DDOS Encryption Malware 97

Security Affairs

DECEMBER 22, 2022

com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December. The Go-based botnet spreads by exploiting two dozen security vulnerabilities in the internet of things (IoT) devices and other applications. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT 114

IoT DDOS Malware Firmware 114

Security Affairs

NOVEMBER 21, 2019

“Fast forwarded to October 11, 2019, our Anglerfish honeypot captured another suspicious ELF sample, and it turned out to be the Downloader of the previous suspicious ELF sample.” T he experts first spotted the Roboto botnet in August when they detected a suspicious ELF file. ” reads the analysis published by 360 Netlab.

DDOS 80

DDOS System Administration Advertising DNS 80

Security Affairs

JANUARY 19, 2020

According to ZDNet that first published the news, the list was leaked on a popular hacking forum by the operator of a DDoS booter service. “As ZDNet understands, the list was published online by the maintainer of a DDoS-for-hire (DDoS booter ) service.” ” reported ZDNet.

IoT 88

IoT DDOS InfoSec Internet 88

SC Magazine

MARCH 3, 2021

A financial literacy, wellness, and resilience survey conducted by the TIAA Institute in 2019 demonstrated a 17% lag in financial literacy among African Americans compared to whites. DDoS attacks are an issue. Cyberattacks increase after major racial incidents.

DDOS 119

DDOS Cybersecurity Education Cyber threats 119

Security Affairs

JUNE 22, 2023

Since March 2023, researchers at Palo Alto Networks Unit 42 have observed a new variant of the Mirai botnet targeting multiple vulnerabilities in popular IoT devices. The list of targeted devices includes routers, DVRs, access control systems, and Solar power generation monitoring systems.

IoT 87

IoT Malware Encryption DDOS 87

Security Affairs

MAY 30, 2022

The botnet was first discovered by Fortinet in March, the DDoS botnet targeted several routers and web servers by exploiting known vulnerabilities. The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. The botnet targets multiple architectures, including arm, bsd, x64, and x86.

Malware 141

Malware DDOS IoT Cybercrime 141

Security Affairs

AUGUST 20, 2021

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks.

IoT 103

IoT DNS Manufacturing Firmware 103

Security Affairs

MARCH 21, 2022

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts defined DirtyMoe as a complex malware that has been designed as a modular system. The executioner loads two modules, a Monero miner and a module for worming replication.

Malware 74

Malware Passwords DDOS Internet 74

Security Affairs

JUNE 15, 2019

” The AESDDoS malware is active since at least since 2014 and it was used to build large DDoS botnet. ” The malware also collects system information and send it back to the C2, depending on the specific hardware configuration the attackers can choose which kind of activity to carry out (i.e. ” states the report.

DDOS 92

DDOS Malware Advertising Cryptocurrency 92

Security Affairs

MAY 26, 2021

The attack took place in 2019, but it was discovered only in March. In early May , a massive distributed denial of service (DDoS) attack hit most of the Belgium government ’s IT network, according to the media the attack also knocked offline internal systems.

Cyber Attacks 120

Cyber Attacks Education Government DDOS 120

Security Affairs

NOVEMBER 17, 2019

Experts warn of spike in TCP DDoS reflection attacks targeting Amazon, SoftLayer and telco infrastructure. Microsoft Patch Tuesday updates fix CVE-2019-1429 flaw exploited in the wild. CVE-2019-3648 flaw in all McAfee AV allows DLL Hijacking. DDoS-for-Hire Services operator sentenced to 13 months in prison.

DDOS 50

DDOS Spyware Advertising Ransomware 50

Security Affairs

NOVEMBER 26, 2021

Wi-Fi 6 officially arrived in late 2019, and Wi-Fi 6 enabled hardware was released throughout 2020. It’s not the 1st time TP-Link has faced critical vulnerabilities in their product line up, such bugs are widely leveraged by threat actors building IoT-based botnets like Mirai for further DDoS attacks and other malicious activities.

IoT 140

IoT Wireless DDOS VPN 140

Security Affairs

FEBRUARY 9, 2020

Attackers are hacking NSC Linear eMerge E3 building access systems to launch DDoS attacks. Sudo CVE-2019-18634 flaw allows Non-Privileged Linux and macOS Users run commands as Root. Google mistakenly shared private videos of some users with others in 2019. Apollon Darknet market is allegedly pulling an exit scam.

Banking 83

Banking Advertising Ransomware DDOS 83

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 122

DDOS Marketing Cryptocurrency IoT 122

Security Affairs

DECEMBER 18, 2019

Experts revealed details on the tools and techniques used by the botnet to compromise Linux devices and recruit them in launching distributed denial-of-service (DDoS) attacks. The C&C servers were live as recently as November 18 2019.” ” reads the analysis published by TrendMicro. ” concludes the analysis.

Malware 62

Malware DDOS DNS Advertising 62

Security Affairs

JANUARY 26, 2020

Citrix releases permanent fixes for CVE-2019-19781 flaw in ADC 11.1 For the second time in a few days, Greek Government websites hit by DDoS attacks. Bot list with Telnet credentials for more than 500,000 servers and IoT devices leaked online. Hackers patch Citrix servers to deploy their own backdoor. Pierluigi Paganini.

Data breaches 79

Data breaches Advertising Antivirus DDOS 79

Security Affairs

JUNE 15, 2019

CVE-2019-12735 – opening a specially crafted file in Vim or Neovim Editor could compromise your Linux system. CVE-2019-2725 Oracle WebLogic flaw exploited in cryptojacking campaign. Microsoft Patch Tuesday security updates for June 2019 fix 88 flaws. Facebook is going to stop Huawei pre-installing apps on mobile devices.

DDOS 54

DDOS Hacking Scams Data breaches 54

Security Affairs

JUNE 17, 2019

Starting from June 12, 2019, the researcher Ankit Anubhav from NewSky Security, observed threat actors targeting Web-based DNA sequencer applications. As a result,the number of such devices is not very high and might not help greatly in DDoS.” “The exact motives of the attacker(s) is unknown.

DDOS 78

DDOS Advertising IoT Marketing 78

Security Affairs

MARCH 1, 2020

FireEye Mandiant M-Trends 2020 report: 500+ new Malware strains in 2019. Silence Hacking Crew threatens Australian banks of DDoS attacks. ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia. FBI recommends using passphrases instead of complex passwords. Lampion malware v2 February 2020.

Banking 88

Banking Malware Advertising Ransomware 88

Security Affairs

OCTOBER 10, 2019

The vulnerability, tracked as CVE-2019-17059, was discovered by the security expert Rob Mardisalu that reported it to Sophos. “We’ve been working hard with internal and external security researchers to uncover serious remotely exploitable loopholes in SSL VPNs and Firewalls like Cyberoam, Fortigate and Cisco VPNs.”

Firewall 81

Firewall VPN Passwords Internet 81

Security Affairs

DECEMBER 8, 2019

China used the Great Cannon DDoS Tool against forum used by Hong Kong protestors. CVE-2019-14899 flaw allows hijacking VPN connections on Linux, Unix systems. Two malicious Python libraries were stealing SSH and GPG keys. CyrusOne, one of the major US data center provider, hit by ransomware attack. The evolutions of APT28 attacks.

Advertising 54

Advertising DDOS VPN Authentication 54

Security Affairs

SEPTEMBER 10, 2019

The security researcher Benjamin Kunz from Vulnerability-Lab disclosed zero-day flaws in Telestar Digital GmbH IoT radio devices that could be exploited by remote attackers to hijack devices without any user interaction. The vulnerabilities have been tracked as CVE-2019-13473 and CVE-2019-13474. .

IoT 84

IoT Hacking Firmware Advertising 84

Security Affairs

MAY 18, 2019

Researchers analyzed data collected by IBM’s X-Force threat intelligence unit between 2015 and 2019. Collected information shows a drop in the hacktivist attacks from 35 in 2015 to only 2 attacks in 2018. However, IBM experts only collected data on hacktivist attacks that resulted in quantifiable damage. ” continues IBM.

Advertising 69

Advertising Data collection DDOS Healthcare 69

Security Affairs

SEPTEMBER 1, 2021

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks.

IoT 77

IoT DNS Manufacturing Passwords 77

Security Affairs

JUNE 17, 2020

Tbps DDoS attack, the largest ever, which surpassed the previous record of 1.7 Amazon announced it has mitigated the largest ever DDoS attack of 2.3 ” The report didn’t name the target of the DDoS attack, AWS experts only revealed that the magnitude was obtained with CLDAP reflection attack. Pierluigi Paganini.

DDOS 117

DDOS Advertising Internet Internet 117

Security Affairs

JULY 4, 2019

Godlua is a DDoS bot that was already involved in attacks in the wild, such as the one that hit liuxiaobei[.]com At the time of writing, experts at Qihoo 360 are investigating infection vectors, they discovered that some Linux machines were infected by exploiting the Confluence exploit for CVE-2019-3396. com domain.

DNS 80

DNS Malware Advertising DDOS 80

Security Affairs

FEBRUARY 15, 2020

In September 2019, before the National Council election, the ÖVP was hit by a “very targeted hacker attack” on the party headquarters. In 2018, the websites of the parliament and various ministries in Austria were targeted by DDoS attacks (Distributed Denial of Service).

Cyber Attacks 111

Cyber Attacks Advertising DDOS Government 111