Security Affairs

FEBRUARY 22, 2024

US FTC charged cyber security firm Avast with harvesting consumer web browsing data through its browser extension and antivirus and sold it. The antivirus firm is accused of selling the data to advertising companies without user consent. ” re ads the FTC’s complaint. FTC will also fine Avast $16.5

Advertising 104

Advertising Antivirus Data collection Mobile 104

Security Affairs

MARCH 4, 2021

FireEye researchers spotted a new sophisticated second-stage backdoor that was likely linked to threat actors behind the SolarWinds hack. based entity to a public malware repository in August 2020.” SecurityAffairs – hacking, SolarWinds). The new malware is dubbed Sunshuttle , and it was “uploaded by a U.S.-based

Malware 116

Malware Hacking Antivirus Information Security 116

Security Affairs

OCTOBER 16, 2022

The vulnerability is due to the method (cpio) in which Zimbra’s antivirus engine (Amavis) scans inbound emails. The experts pointed out that the vulnerability is due to the method ( cpio ) used by Zimbra’s antivirus engine ( Amavis ) to scan the inbound emails. SecurityAffairs – hacking, Zimbra). reported Rapid7.

Hacking 119

Hacking Antivirus Telecommunications Engineering 119

Security Affairs

FEBRUARY 24, 2020

We have tracking Lampion activity from the beginning, and we noticed that since February 12th – 2020, the malware has been presented with a new “visual” but maintaining the same modus operandi. 2020-02-13] #Lampion v2 #portugal #malware #ATA 0998f6473004e0ba54ead5784ba62db8 h}//vrau-x.s3.us-east-2.amazonaws.[com/0.zip com/P-14-7.dll

Malware 78

Malware Banking Antivirus Advertising 78

The Last Watchdog

JUNE 21, 2020

The epidemic went truly mainstream with the release of CryptoLocker back in 2013, and it has since transformed into a major dark web economy spawning the likes of Sodinokibi, Ryuk, and Maze lineages that are targeting the enterprise on a huge scale in 2020. In early 2020, several cybercriminals groups followed suit.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

MARCH 11, 2020

Antivirus maker Avast has disabled a core component of its antivirus to address a severe vulnerability that would have allowed attackers to control users’ PC. link] — Tavis Ormandy (@taviso) March 11, 2020. Ormandy pointed out that the main Avast antivirus process, AvastSvc.exe, which, runs as SYSTEM.

Engineering 113

Engineering Antivirus Advertising Hacking 113

Security Affairs

APRIL 21, 2024

The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 106

Ransomware Encryption Antivirus VPN 106

SC Magazine

JUNE 18, 2021

The Blackbaud data breach was the largest health care-related incident of 2020, impacting an estimated two dozen providers and well over 10 million patients. In February 2020, threat actors hacked into its self-hosted environment, stealing data as they proliferated across the network. Photo captured from Alina Lodge website ).

Data breaches 80

Data breaches Ransomware Encryption Insurance 80

Security Affairs

APRIL 22, 2021

Cybersecurity firm Trend Micro revealed that a threat actor is actively exploiting a flaw, tracked as CVE-2020-24557, in its antivirus solutions to gain admin rights on Windows systems. The CVE-2020-24557 vulnerability affects the Apex One and OfficeScan XG enterprise security products. Pierluigi Paganini.

Antivirus 124

Antivirus Hacking Cybersecurity Information Security 124

SecureList

FEBRUARY 26, 2021

The state of stalkerware in 2020 (PDF). Kaspersky’s data shows that the scale of the stalkerware issue has not improved much in 2020 compared to the last year: The number of people affected is still high. In total, 53,870 of our mobile users were affected globally by stalkerware in 2020. between 2015 and 2020.

Mobile 80

Mobile Surveillance Software Passwords 80

Security Affairs

JULY 22, 2021

Cybersecurity and Infrastructure Security Agency (CISA) published a security alert related to the discovery of 13 malware samples on compromised Pulse Secure devices, many of which were undetected by antivirus products. Some of the files discovered on hacked Pulse Connect Secure devices were modified versions of legitimate scripts.

Malware 130

Malware Antivirus Passwords Firewall 130

SecureWorld News

JULY 19, 2021

As detailed in public charging documents unsealed in October 2018 and July and September 2020, hackers with a history of working for the PRC Ministry of State Security (MSS) have engaged in ransomware attacks, cyber enabled extortion, crypto-jacking, and rank theft from victims around the world, all for financial gain.

Hacking 90

Hacking Government Antivirus Healthcare 90

Security Affairs

JUNE 27, 2021

“While the Windows system is in safe mode antivirus software doesn’t work. The researchers started investigating the threat after they became aware that the malware was disabling and uninstalling its antivirus from infected devices. “It also uses WQL to query all antivirus software installed SELECT * FROM AntiVirusProduct.”

Antivirus 109

Antivirus Cryptocurrency Malware Software 109

Security Affairs

AUGUST 12, 2021

In April, the security firm revealed that attackers were actively exploiting a vulnerability, tracked as CVE-2020-24557, in its antivirus solutions to gain admin rights on Windows systems. The CVE-2020-24557 vulnerability affects the Apex One and OfficeScan XG enterprise security products. . Pierluigi Paganini.

Antivirus 106

Antivirus Authentication Hacking Information Security 106

Security Affairs

JUNE 22, 2021

DirtyMoe is a Windows botnet that is rapidly growing, it passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. Experts pointed out that the number of infected systems could be far greater because data provided by AVAST are only related to systems running their antivirus solution.

DNS 128

DNS Cryptocurrency Internet Internet 128

Krebs on Security

JUNE 1, 2023

Megatraffer explained that malware purveyors need a certificate because many antivirus products will be far more interested in unsigned software, and because signed files downloaded from the Internet don’t tend to get blocked by security features built into modern web browsers. “Antivirus software trusts signed programs more.

Malware 242

Malware Cybercrime Software Antivirus 242

Security Affairs

DECEMBER 18, 2023

They may use various tactics to evade antivirus and other security measures. Ransomware was discovered in late 2020, while info stealer was discovered in June 2021. Info stealers can be delivered through various means, including malicious email attachments, infected websites, or as a payload delivered by other types of malware.

Banking 115

Banking Cybercrime Malware Accountability 115

CyberSecurity Insiders

JANUARY 6, 2023

billion in 2020, a 43% increase. billion in payment card-related losses occurred in 2020 (over one-third of them in the U.S.). Requirement 5: It is no longer sufficient to just have standard antivirus software. Census Bureau’s latest  Annual Retail Trade Survey  reports e-commerce expenditures rose from $571.2

Antivirus 138

Antivirus Retail Software Accountability 138

Security Affairs

APRIL 26, 2020

SecurityAffairs – newsletter, hacking). Are Maze operators behind the attack on the IT services giant Cognizant? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 95

Spyware Hacking Advertising Antivirus 95

Security Affairs

SEPTEMBER 23, 2020

Even today, less than half of the known antivirus engines are flagging the infection on VirusTotal , as observed by BleepingComputer: The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide.

Antivirus 109

Antivirus Government Malware Advertising 109

Security Affairs

MARCH 18, 2020

The first issue, tracked as CVE-2020-8467 , impacts the migration tool component of Apex One and OfficeScan. The second vulnerability exploited in the wild, tracked as CVE-2020-8468 is a content validation escape issue that affects the agents for Worry-Free Business Security, Apex One and OfficeScan. ” reads the advisory.

Authentication 104

Authentication Advertising Antivirus Cybercrime 104

Security Affairs

NOVEMBER 11, 2021

Below is the list of exploits used by the bot: Vulnerability Affected devices CVE-2020-8515 DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices CVE-2015-2051 D-Link DIR-645 Wired/Wireless Router Rev. CVE-2020-10173 Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m

IoT 123

IoT Firmware Malware Wireless 123

Security Affairs

OCTOBER 6, 2020

The alert published by CISA was based on data provided by the Multi-State Information Sharing & Analysis Center (MS-ISAC) and the CISA itself since July 2020. pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020. SecurityAffairs – hacking, CISA). Pierluigi Paganini.

Government 136

Government Banking Advertising Malware 136

SecureList

JULY 1, 2021

In 2020, the number of gamers worldwide surpassed 2.7 They dropped off slightly after reaching the all-time peak in May 2020 mentioned in our last year’s report. The number of web attacks exploiting gaming themes from January 2020 to May 2021. They played, they play, and they’ll keep playing.

Antivirus 120

Antivirus Malware Accountability Mobile 120

Security Affairs

OCTOBER 26, 2021

The gang has been active since at least 2020, threat actors hit organizations from various industries. Install and regularly update antivirus software on all hosts, and enable real time detection. SecurityAffairs – hacking, Ranzy Locker ransomware). Disable hyperlinks in received emails. Pierluigi Paganini.

Ransomware 129

Ransomware Firmware Antivirus Accountability 129

Security Affairs

JULY 9, 2020

“Account accesses for antivirus programs garner the second-highest prices: around $21.67. According to the report, Sentry MBA is the most popular credential stuffing tool, but OpenBullet tool has accounted for 35 percent of references across cyber criminal forums so far in 2020. ” reads the report published by the experts.

Cybercrime 118

Cybercrime Antivirus Marketing Accountability 118

Security Affairs

JUNE 23, 2021

One of the fathers of antivirus software, the entrepreneur John McAfee has been found dead in a Barcelona prison cell while he was waiting for extradition to the US. On October 6, 2020, McAfee was arrested in Spain over tax evasion charges while he was about to board a plane to Turkey. . SecurityAffairs – hacking, McAfee).

Cryptocurrency 130

Cryptocurrency Banking Accountability Antivirus 130

Security Affairs

NOVEMBER 28, 2021

The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. In mid-2020, ZINC hackers created Twitter profiles for fake security researchers that were used to retweet security content and posting about vulnerability research. Pierluigi Paganini.

Malware 125

Malware Phishing Antivirus Hacking 125

Security Affairs

JANUARY 8, 2021

“In October 2020, Palo Alto Networks Unit42 identified new variants of the cryptomining malware used by TeamTNT named “Black-T.” . The decrypted payload is an ELF file packed with UPX, which is a known sample from TeamTNT, first seen in June 2020 ( e15550481e89dbd154b875ce50cc5af4b49f9ff7b837d9ac5b5594e5d63966a3 ).”

Malware 134

Malware Encryption Antivirus Passwords 134

Security Affairs

APRIL 7, 2021

“The lack of timely antivirus database updates for the security solution used on attacked systems also played a key role, preventing the solution from detecting and blocking the threat. It should also be noted that some components of the antivirus solution were disabled, further reducing the quality of protection.

VPN 97

VPN Ransomware Antivirus Firmware 97

Security Affairs

MAY 22, 2021

The attacks were spotted in 2020, threat actors leveraged spear-phishing attacks, exploitation of vulnerabilities in web applications, hacking the infrastructure of contractors to penetrate the infrastructure of the Russian federal executive authorities. SecurityAffairs – hacking, Russian federal agencies). Pierluigi Paganini.

Computers and Electronics 113

Computers and Electronics Malware Antivirus Government 113

Security Affairs

SEPTEMBER 7, 2020

link] — CERT-FR (@CERT_FR) September 7, 2020. Generally speaking, removal/cleaning by antivirus is not a sufficient guarantee. . Generally speaking, removal/cleaning by antivirus is not a sufficient guarantee. SecurityAffairs – hacking, botnet). Limit Internet access for all agents to a controlled white list.

Malware 112

Malware Advertising Antivirus Banking 112

The Last Watchdog

MAY 12, 2021

Criminal hacking rings have been hammering away at this latest of a long line of zero-day flaws discovered in a globally distributed system. The pattern is all too familiar: they marshal their hacking infrastructure to take advantage of the window of time when there is a maximum number of vulnerable systems just begging to be hacked.

Ransomware 153

Ransomware Hacking Firewall Digital transformation 153

Security Affairs

AUGUST 15, 2022

The package describes itself as “secrets matching and verification made easy,” it has a total of 93 downloads since August 6, 2020. SecurityAffairs – hacking, PyPI Package). “ Sonatype has identified a ‘secretslib’ PyPI package that describes itself as “secrets matching and verification made easy.””

Malware 73

Malware Antivirus Engineering Hacking 73

Security Boulevard

MARCH 31, 2021

How not to disclosure a Hack. UK fashion retailer FatFace angered customers in its handling of a customer data theft hack. In 2020 groups were demanding as much as $30 million to unlock a victim’s files and systems. High-end ransoms have gone up significantly too. UK Gov to Ramp up Cyber Offenses and Defences.

Energy and Utilities 122

Energy and Utilities Ransomware Banking Hacking 122

Security Affairs

APRIL 29, 2021

Experts from Kaspersky explained that in February 2019, multiple antivirus companies received a collection of malware samples, some of them cannot be associated with the activity of known APT groups. . Across the years, the researchers found analyzed multiple backdoors and hacking tools composing the arsenal of the cyberespionage group.

Malware 106

Malware Hacking Government Telecommunications 106

Security Affairs

MARCH 17, 2021

In March 2020, CERT France cyber-security agency warned about a new wave of ransomware attack that was targeting the networks of local government authorities. Operators behind the Pysa ransomware, also employed a version of the PowerShell Empire penetration-testing tool, they were able to stop antivirus products. Pierluigi Paganini.

Education 94

Education Ransomware Encryption Antivirus 94