article thumbnail

Mobile malware evolution 2020

SecureList

In 2020, Kaspersky mobile products and technologies detected: 5,683,694 malicious installation packages, 156,710 new mobile banking Trojans, 20,708 new mobile ransomware Trojans. It just so happened that the year 2020 gave hackers a large number of powerful news topics, with the COVID-19 pandemic as the biggest of these.

Mobile 138
article thumbnail

BotenaGo botnet targets millions of IoT devices using 33 exploits

Security Affairs

Below is the list of exploits used by the bot: Vulnerability Affected devices CVE-2020-8515 DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices CVE-2015-2051 D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier CVE-2016-1555 Netgear WN604 before 3.3.3

IoT 122
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

As of the publishing of this article, BotenaGo currently has low antivirus (AV) detection rate with only 6/62 known AVs seen in VirusTotal: (Figure 1). Example 1: main_infectFunctionGponFiber function, exploits CVE-2020-8958. The function exploiting the vulnerability CVE-2020-10173 is shown in figure 9. CVE-2020-8515.

Malware 85
article thumbnail

Ranzy Locker ransomware hit tens of US companies in 2021

Security Affairs

The gang has been active since at least 2020, threat actors hit organizations from various industries. Install and regularly update antivirus software on all hosts, and enable real time detection. Install updates/patch operating systems, software, and firmware as soon as updates/patches are released.

article thumbnail

New Cring ransomware deployed targeting unpatched Fortinet VPN devices

Security Affairs

. “The primary causes of the incident include the use of an outdated and vulnerable firmware version on the Fortigate VPN server (version 6.0.2 “The lack of timely antivirus database updates for the security solution used on attacked systems also played a key role, preventing the solution from detecting and blocking the threat.

VPN 97
article thumbnail

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

As of the publishing of this article, antivirus (AV) vendor detection for BotenaGo and its variants remains behind with very low detection coverage from most of AV vendors. Figure 4 shows the implementation of CVE-2020-10987. Figure 5 shows the implementation of CVE-2020-10173. Recommended actions. Conclusion.

Malware 81
article thumbnail

FBI and CISA are warning of APT actors targeting Fortinet FortiOS servers

Security Affairs

The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591. The joint alert also states that attackers scanning also enumerated devices for the CVE-2020-12812 and CVE-2019-5591 flaws. hard drive, storage device, the cloud).