Security Affairs

JUNE 15, 2022

Hertzbleed attack: Researchers discovered a new vulnerability in modern Intel and AMD chips that could allow attackers to steal encryption keys. The experts will present their findings at the 31st USENIX Security Symposium that will take place in Boston, 10–12 August 2022. SecurityAffairs – hacking, Hertzbleed).

Encryption 66

Encryption Hacking Cybersecurity Information Security 66

The Last Watchdog

JULY 18, 2023

July 18, 2022 – Around 30,000 websites get hacked every day , with the majority of those cyberattacks due to human error. A new study by HostingAdvice, the premier authority on web hosting, found that 32% of Americans say they’ve gotten hacked from visiting a sketchy website and of those, 53% got a computer virus.

Hacking 100

Hacking DDOS Small Business Spyware 100

Security Affairs

APRIL 16, 2023

One of the encryptors developed by Lockbit, named ‘locker_Apple_M1_64’, can encrypt files of Mac systems running on the Apple silicon M1. The MacOS variant has been available since November 11th, 2022. The MacOS variant has been available since November 11th, 2022. It appears we are late to the game.

Encryption 97

Encryption Architecture Ransomware Education 97

Security Boulevard

MAY 5, 2022

OpenSSL Patches New Bug Targeting Encryption [Lessons from Heartbleed]. Thu, 05/05/2022 - 12:26. C VE-2022-0778 is described as an infinite loop DoS attack discovered by Google vulnerability researcher Tavis Ormandy. Because OpenSSL is everywhere, infiltrating it is like hitting the hacking jackpot. brooke.crothers.

Encryption 52

Encryption Software Media Authentication 52

Security Affairs

APRIL 20, 2023

Threat actors are hacking poorly secured and Interned-exposed Microsoft SQL servers to deploy the Trigona ransomware. Threat actors are hacking into poorly secured and public-facing Microsoft SQL servers to deploy Trigona ransomware. _locked” extension to the filename of encrypted files. ” concludes the report.

Ransomware 83

Ransomware Malware Encryption Hacking 83

Security Affairs

APRIL 27, 2023

The encryptor uses a combination of ECDH on Curve25519 (asymmetric encryption) and Chacha20 (symmetric encryption) to encrypt files. The researchers discovered that the samples contain a self-delete mechanism which is invoked once the victim’s device is encrypted. ” reads the analysis published by Uptycs.

Encryption 86

Encryption Ransomware Malware Education 86

Security Boulevard

MAY 4, 2022

Elon Musk Wants End-to-End Encryption for Twitter Direct Messages: Too soon or Too Late? Wed, 05/04/2022 - 14:51. Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages,” Musk said in a tweet. Because they are not end-to-end encrypted, Twitter itself has access to them.

Encryption 64

Encryption Surveillance Media Government 64

Security Affairs

APRIL 10, 2022

NB65 hacking group created its ransomware based on the leaked source code of the Conti ransomware and targets Russia. According to BleepingComputer , NB65 hacking group is targeting Russian organizations with ransomware that they have developed using the leaked source code of the Conti ransomware. F**k Vladimir Putin.

Ransomware 96

Ransomware Hacking Encryption Cybersecurity 96

Security Affairs

JUNE 12, 2022

Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). SecurityAffairs – hacking, newsletter). To nominate, please visit:?.

Ransomware 114

Ransomware DNS Cybercrime Hacking 114

Security Affairs

APRIL 3, 2023

FortiGuard Labs researchers observed an ongoing hacking campaign targeting Cacti ( CVE-2022-46169 ) and Realtek ( CVE-2021-35394 ) vulnerabilities to spread ShellBot and Moobot malware. Since September 2022, Moobot botnet was spotted targeting vulnerable D-Link routers. It executes the Moobot with the parameter realtek.<Filename>.”

DDOS 83

DDOS Malware Hacking Education 83

Security Affairs

MAY 26, 2022

The root cause of the alert is a couple of critical zero-day issues, tracked as CVE-2022-1802 and CVE-2022-1529, in the Firefox browser that was addressed by Mozilla in May. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. ” reads the advisory. .

Surveillance 105

Surveillance Passwords Hacking Encryption 105

Security Affairs

NOVEMBER 2, 2022

The OpenSSL project has issued security updates to address a couple of high-severity vulnerabilities, tracked as CVE-2022-3602 and CVE-2022-3786 , in its cryptography library. ” reads the advisory published by the CVE-2022-3786. SecurityAffairs – hacking, encryption). The flaws impact versions 3.0.0

Encryption 104

Encryption Authentication Hacking Software 104

Security Affairs

JULY 11, 2022

The ransomware operation has been active at least since May 2022 and already claimed to have breached multiple organizations. 0mega extension to the encrypted file’s names and creates for each victim a customized ransom note named DECRYPT-FILES.txt. pic.twitter.com/xQs34oKPAy — Amigo-A (@Amigo_A_) July 9, 2022.

Ransomware 104

Ransomware Encryption Malware Hacking 104

Security Affairs

JUNE 10, 2022

The ransomware encrypts files on the targeted systems using the “.cuba” Researchers from Trend Micro have reported a surge in Cuba ransomware gang activity in March and April 2022. ” Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. cuba” extension.

Ransomware 123

Ransomware Malware Encryption Hacking 123

Security Affairs

MAY 31, 2022

These techniques include multiple obfuscation routines, encryption with unique keys for each malicious file, multi-layer malwares, memory-resident malwares and splitting infrastructure strings into different malware components.” The second half of the URL is encrypted inside the second stage HTA module. ” states Kaspersky.

Encryption 97

Encryption Malware Phishing Hacking 97

McAfee

OCTOBER 31, 2021

McAfee Enterprise and FireEye recently released its 2022 Threat Predictions. In this blog, we take a deeper dive into the continuingly aggressive role Nation States will play in 2022. The post Nation States Will Weaponize Social and Recruit Bad Guys with Benefits in 2022 appeared first on McAfee Blogs.

Cybercrime 115

Cybercrime Government Malware Media 115

Security Affairs

MAY 15, 2023

Once encrypted the victims files RA Group, the gang drops customized ransom notes (“How To Restore Your Files.txt.”), which include the victim’s name and a unique link to download the exfiltration proofs. The ransomware supports intermittent encryption to speed up the encryption process. ” continues the report.

Ransomware 84

Ransomware Encryption Cybercrime Insurance 84

The Last Watchdog

AUGUST 29, 2023

The threat of bad actors hacking into airplane systems mid-flight has become a major concern for airlines and operators worldwide. Back in 2015, a security researcher decided to make that very point when he claimed to have hacked a plane , accessed the thrust system, and made it fly higher than intended.

Software 264

Software Risk Artificial Intelligence Engineering 264

Security Affairs

MAY 2, 2022

The expert noticed that the sample does not encrypt files, it only adds a random extension to the victim’s files. Timestamp 2022-04-27, new config, new mutex, campaign ID, etc. Raw config for the REvil ransommware reborn: [link] [link] — Vitali Kremez (@VK_Intel) May 2, 2022. Tweets by WhichbufferArda.

Ransomware 86

Ransomware Encryption Cryptocurrency Malware 86

Security Affairs

DECEMBER 10, 2022

The human-operated Royal ransomware first appeared on the threat landscape in September 2022, it has demanded ransoms up to millions of dollars. “Royal is a human-operated ransomware that was first observed in 2022 and has increased in appearance. Starting from September 2022, the note was changed to Royal.

Healthcare 89

Healthcare Ransomware Encryption Malware 89

Security Affairs

JULY 20, 2022

The encryption scheme is unusual because it combines x25519 and AES. Researchers from Uptycs first reported the discovery of the new Black Basta ransomware variant that supports encryption of VMWare ESXi servers. “A trend, which we also discussed in our previous blog post , is that ESXi systems are increasingly targeted.

Ransomware 131

Ransomware Encryption Malware Advertising 131

Security Affairs

APRIL 9, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter newsletter) The post Security Affairs newsletter Round 414 by Pierluigi Paganini – International edition appeared first on Security Affairs. billion rubles.

Computers and Electronics 81

Computers and Electronics Backups Cybercrime Marketing 81

Kali Linux

AUGUST 1, 2022

This is the first part of a 3 part series of blog posts surrounding Kali usage on Raspberry Pi devices. We are no exception to this, and today, we are going to be revisiting our “drop box” machine, which has been encrypted thus making it harder to identify if discovered.

Encryption 52

Encryption Passwords Backups Firmware 52

Security Affairs

MAY 4, 2023

The human-operated Royal ransomware first appeared on the threat landscape in September 2022, it has demanded ransoms up to millions of dollars. FBI and CISA believe this variant, which uses its own custom-made file encryption program, evolved from earlier iterations that used “Zeon” as a loader.” reads the alert.

Ransomware 93

Ransomware Healthcare Education Encryption 93

Security Affairs

MAY 16, 2023

The company earned $770 million in 2022. The company said that some local infrastructures have been encrypted. “It should be noted that the activity of these three sites represents 19% of the group’s total sales in 2022. . Lacroix plans to resume production on May 22, 2023. ” reported Yahoo Finance.

Manufacturing 85

Manufacturing Ransomware Cyber Attacks Backups 85

Security Affairs

APRIL 19, 2022

The sample analyzed by the experts was compiled in February 2022, a circumstance that suggests the artifacts are part of new development. The SolarMarker backdoor communicates with the C2 server through the encrypted channel. SecurityAffairs – hacking, SolarMarker). To nominate, please visit:? Pierluigi Paganini.

Encryption 87

Encryption Malware Engineering Passwords 87

Security Affairs

APRIL 14, 2023

The threat actor was able to access the nightly backups containing all public forum posts, team forum posts, messages sent through the user-to-user messaging system, and user information such as forum username, email address used for notifications, and an encrypted (hashed and salted) password generated by the MyBB software.

Data breaches 92

Data breaches Backups Passwords Accountability 92

Security Affairs

MAY 13, 2023

Unlike most ransom campaigns, CheckMate, discovered in 2022, has been quiet throughout its operations. After gaining access to SMB shares, threat actors encrypt all files and leave a ransom note demanding payment in exchange for the decryption key. To the best of our knowledge, it doesn’t operate a data leak site.

Ransomware 90

Ransomware Encryption Passwords Internet 90

eSecurity Planet

OCTOBER 3, 2022

ZINC, a sub-group of the notorious North Korean Lazarus hacking group, has implanted malicious payloads in open-source software to infiltrate corporate networks, Microsoft’s threat hunting team has reported. Then they moved the conversation away from the platform to encrypted messaging apps like WhatsApp.

Software 127

Software Social Engineering Engineering Phishing 127

SecureList

JANUARY 18, 2023

The trend for personal data leaks grew rapidly in 2022 and will continue into 2023. We often see people use work email addresses to register with third-party sites and services, which can be hacked and exposed to a data leak, putting the security of the company that owns the email at risk.

Media 108

Media Social Engineering Ransomware Hacking 108

Security Affairs

APRIL 23, 2022

The analysis of encryption techniques employed in the attack allowed the government experts to associate the campaign with the cybercrime group Trickbot. SecurityAffairs – hacking, Ukraine). To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook. Follow me on Twitter: @securityaffairs and Facebook.

Phishing 87

Phishing Cybercrime Ransomware Encryption 87

Security Affairs

FEBRUARY 28, 2024

“As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” Since September 2022, Moobot botnet was spotted targeting vulnerable D-Link routers. ” reads the joint report. ” continues the report.

Energy and Utilities 96

Energy and Utilities Government Firewall Malware 96

Security Affairs

APRIL 25, 2023

The leaked Symphony application secret could have been used to decrypt previously encrypted data such as user cookies and session IDs. The private certificate, used in combination with the passphrase, was also stored on the same server.

Social Engineering 93

Social Engineering Education Media Marketing 93

Security Affairs

MAY 4, 2022

The security researcher John Page aka ( hyp3rlinx ) discovered that malware from multiple ransomware operations, including Conti , REvil , LockBit , AvosLocker , and Black Basta, are affected by flaws that could be exploited block file encryption. SecurityAffairs – hacking, DLL hijacking). To nominate, please visit:?

Ransomware 102

Ransomware Antivirus Malware Encryption 102

Security Affairs

APRIL 19, 2022

Kaspersky discovered a flaw in the encryption process of the Yanluowang ransomware that allows victims to recover their files for free. Researchers from Kaspersky discovered a vulnerability in the encryption process of the Yanluowang ransomware that can be exploited to recover the files encrypted by the malware without paying the ransom.

Ransomware 87

Ransomware Encryption DDOS Malware 87

Security Affairs

FEBRUARY 6, 2022

A zero-day vulnerability, tracked as CVE-2022-24348, in the Argo CD tool for Kubernetes could be exploited by attackers to steal sensi tive data from Kubernetes Apps , including passwords and API keys. The impact can especially become critical in environments that make use of encrypted value files (e.g. and 2.1.9. .

Encryption 91

Encryption Passwords Hacking Information Security 91

Security Affairs

MAY 12, 2023

The Bl00dy ransomware has been active since May 2022, it has been the first group that started using the leaked LockBit ransomware builder in attacks in the wild. As a result of some of these attacks, threat actors exfiltrated data of the victim systems and demanded the payment of a ransom for the decryption of encrypted files.

Education 82

Education Ransomware Encryption Malware 82