Security Affairs

JULY 22, 2021

Multiple major websites, including Steam, AWS, Amazon, Google, and Salesforce, went offline due to Akamai DNS global outage. A software configuration update triggered a bug in the Akamai DNS which took offline major websites, including Steam, the PlayStation Network, AWS, Google, and Salesforce. SecurityAffairs – hacking, DNS).

Software 137

Software DNS DDOS Technology 137

Security Affairs

AUGUST 30, 2021

Who is behind the massive and prolonged Distributed Denial of Service (DDoS) attack that hit the Philippine human rights alliance Karapatan? The traces lead us to an Israeli firm offering access to millions of proxies in mobile operators, data centers and residential buildings – a perfect infrastructure to hide the source of DDoS attacks.

DDOS 127

DDOS DNS Mobile Authentication 127

SecureList

NOVEMBER 26, 2021

IT threat evolution Q3 2021. IT threat evolution in Q3 2021. IT threat evolution in Q3 2021. While tracking this threat actor in spring 2021, we discovered a newer version. Targeted attacks exploiting CVE-2021-40444. PC statistics. Mobile statistics. Targeted attacks. WildPressure targets macOS.

Malware 135

Malware Banking Energy and Utilities Accountability 135

Security Affairs

MAY 18, 2021

Uptycs’ threat research team discovered a new botnet, tracked as Simps botnet, attributed to Keksec group, which is focused on DDOS activities. Uptycs’ threat research team has discovered a new Botnet named ‘Simps’ attributed to Keksec group primarily focussed on DDOS activities. Discovery of Simps Botnet. see Figure 7).

DDOS 141

DDOS Malware Architecture IoT 141

Security Affairs

JANUARY 19, 2021

The attacks aimed at compromising the tarted systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaign. CVE-2021-3007 – deserialization flaw that affects the Zend Framework (disclosed on January 3, 2021).

DDOS 145

DDOS DNS Malware Internet 145

Malwarebytes

JULY 14, 2022

Securing that many endpoints can get really complex, really fast, especially when you consider that the common wisdom that Macs don’t get malware simply isn’t true: in fact, the number of malware detections on Mac jumped 200% year-on-year in 2021. Use a DNS filter to stop web-based attacks. That’s where DNS filtering comes in.

DNS 132

DNS Adware Malware Antivirus 132

Security Affairs

JANUARY 5, 2022

” The experts also reported the dropping of additional RATs and reverse shells by exploiting the CVE-2021-44228 in human-operated attacks. The IT giant also confirmed that Webtoos DDoS malware was also deployed via the Log4Shell vulnerability. .

Malware 132

Malware DNS DDOS Cryptocurrency 132

Security Affairs

AUGUST 22, 2021

million customers Adobe addresses two critical vulnerabilities in Photoshop Hamburg’s data protection agency (DPA) states that using Zoom violates GDPR Kalay cloud platform flaw exposes millions of IoT devices to hack Fortinet FortiWeb OS Command Injection allows takeover servers remotely 1.9

Data breaches 107

Data breaches Mobile Ransomware Hacking 107

CyberSecurity Insiders

DECEMBER 16, 2021

Log4Shell is a high severity vulnerability (CVE-2021-44228) impacting Apache Log4j versions 2.0 It was discovered by Chen Zhaojun of Alibaba Cloud Security Team and disclosed via the project´s GitHub repository on December 9, 2021. in early December 2021. DDoS family Elknot. rmi|dns):/[^n]+' /var/log.

DDOS 104

DDOS DNS Internet Internet 104

Security Affairs

FEBRUARY 5, 2021

In January 2021, the cybercrime gang launched a new campaign targeting Kubernetes environments with the Hildegard malware, Palo Alto Networks warns. The malicious code also leverages other techniques to avoid detection, for example it modifies the system DNS resolvers and uses Google’s public DNS servers to bypass DNS monitoring tools.

Malware 122

Malware DNS Cryptocurrency Internet 122

Malwarebytes

SEPTEMBER 14, 2022

In fact, there were 50% more attack attempts per week on corporate networks globally in 2021 than in 2020. DNS filtering. The next technology you need to prevent cyberattacks is a DNS filter. But first, a little bit about what DNS (domain name system) is. The DNS server, in turn, tells the computer where to go.

Technology 88

Technology DNS Cyber Insurance Insurance 88

Cisco Security

OCTOBER 19, 2021

The goal of this analysis is to showcase the common threats that organizations encountered and blocked with Secure Firewall between April-September 2021 (Q2-Q3 2021). Simply looking at the raw numbers in this case would give the false impression that DDoS attacks have a far greater impact across the base of organizations.

Firewall 145

Firewall Authentication DNS Accountability 145

Security Affairs

SEPTEMBER 1, 2021

According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. By infecting routers, they can perform man-in-the-middle (MITM) attacks—via HTTP hijacking and DNS spoofing—to compromise endpoints and deploy ransomware or cause safety incidents in OT facilities. One botnet down more to go.

IoT 105

IoT DNS Manufacturing Passwords 105

SecureList

DECEMBER 20, 2021

CVE-2021-44228 (initial vulnerability) – partly fixed in 2.15.0. CVE-2021-45046 (present in Log4j 2.15.0) – fixed in 2.16.0. CVE-2021-45105 (present in Log4j 2.16.0) – fixed in 2.17.0. The exploitation attempt will use different types of services like LDAP, RMI, DNS etc. Update to the latest version.

IoT 122

IoT Software Technology DNS 122

SC Magazine

JUNE 9, 2021

Financial services firms are fighting multiple threats, as evidenced by the top five security threats that respondents anticipate in the next 12 months: Internet of Things attacks (22%) Cloud vulnerabilities and misconfigurations (19%) Attacks to manipulate data and statistics (17%) DNS and DDoS attacks (15%) Phishing (13%) .

Financial Services 99

Financial Services Data breaches DNS Phishing 99

Herjavec Group

AUGUST 26, 2021

2000 — Mafiaboy — 15-year-old Michael Calce, aka MafiaBoy, a Canadian high school student, unleashes a DDoS attack on several high-profile commercial websites including Amazon, CNN, eBay and Yahoo! The DDoS attack is part of a political activist movement against the church called “Project Chanology.” billion dollars in damages.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

eSecurity Planet

JANUARY 26, 2022

Kentik’s solutions can protect core, edge, and cloud networks while adding DDoS and botnet protection, supply chain analytics, and synthetics. Catchpoint Features. Dynatrace offers a full-stack application performance monitoring and digital experience platform for modern hybrid environments. Kentik Features. SolarWinds.

Marketing 120

Marketing DDOS Threat Detection DNS 120

Cisco Security

MAY 12, 2022

Threat actors picking sides [1], group members turning against each other [2], some people handing out DDoS tools [3], some people blending in to turn it into profit [4], and many other stories, proving that this new frontier is changing daily, and its direct impact is not limited to geographical boundaries. 08/2020, 05/2021-02/2022.

Malware 144

Malware DNS DDOS Phishing 144

SecureList

MAY 27, 2022

The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. In the second half of 2021, the most affected countries were France, Japan, India, China, Germany and South Korea. Subsequently, DDoS attacks hit some government websites.

Phishing 133

Phishing Spyware Firmware Malware 133

SecureList

JULY 28, 2021

In terms of big news, Q2 2021 was relatively calm, but not completely eventless. For example, April saw the active distribution of a new DDoS botnet called Simps — the name under which it introduced itself to owners of infected devices. Another new DDoS vector has yet to be harnessed by cybercriminals.

DDOS 144

DDOS DNS IoT Marketing 144

SecureList

FEBRUARY 10, 2022

Q4 2021 saw the appearance of several new DDoS botnets. In October, the botnet was upgraded with DDoS functionality. This is further evidence that the same botnets are often used for mining and DDoS. In some cases, DNS amplification was also used. The channel was created in June and went live in August 2021.

DDOS 143

DDOS Cryptocurrency Marketing Accountability 143

Krebs on Security

APRIL 11, 2022

A dig into the Domain Name Server (DNS) records for Coinbase-x2[.]net Cryptohost says its service is backstopped by DDoS-Guard , a Russian company that has featured here recently for providing services to the sanctioned terrorist group Hamas and to the conspiracy theory groups QAnon/8chan. We don’t keep your logs!,”

Scams 243

Scams Cryptocurrency Media Hacking 243

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. We also identified two samples developed in December 2021 containing test strings and preceding revisions of the ransom note observed in Microsoft’s shared samples. … ?????? ??????!!! zip” (translation: “Virus… extremely dangerous!!! zip”).

Malware 145

Malware Firmware Government Phishing 145

Malwarebytes

APRIL 19, 2021

We announced the release of the Malwarebytes SMB Cybersecurity Trust & Confidence Report 2021 , a first-of-its-kind survey of the hardworking IT professionals on the front lines of the fight against cyberthreats. Source: Europol) New information was revealed about how the FBI managed to get into the San Bernardino shooter’s iPhone.

Artificial Intelligence 63

Artificial Intelligence Scams DDOS DNS 63

SecureList

NOVEMBER 18, 2022

Number of new ransomware modifications, Q3 2021 — Q3 2022 ( download ). The attempts at exploiting network services and other software via vulnerabilities in the Log4j library ( CVE-2021-44228 , CVE-2021-44832 , CVE-2021-45046 , and CVE-2021-45105 ) also continued. Number of users attacked by ransomware Trojans.

Mobile 121

Mobile Malware Ransomware IoT 121

Security Affairs

MAY 16, 2021

Every week the best security articles from Security Affairs free for you in your email box.

Ransomware 107

Ransomware Banking DNS DDOS 107