Remove 2022 Remove Cybercrime Remove DDOS Remove Firmware
article thumbnail

Reassessing cyberwarfare. Lessons learned in 2022

SecureList

At this point, it has become cliché to say that nothing in 2022 turned out the way we expected. Similarly, at the beginning of February 2022, we noticed a huge spike in the amount of activity related to Gamaredon C&C servers. It directly affected satellite modems firmwares , but was still to be understood as of mid-March.

DDOS 136
article thumbnail

APT trends report Q2 2022

SecureList

This is our latest installment, focusing on activities that we observed during Q2 2022. In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). The most remarkable findings.

Malware 136
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IT threat evolution Q1 2022

SecureList

IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019).

Phishing 110
article thumbnail

Beastmode Mirai botnet now includes exploits for Totolink routers

Security Affairs

Operators behind the Mirai-based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) added exploits for Totolink routers. The Mirai -based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) now includes exploits for Totolink routers. CVE-2022-26186 targets TOTOLINK N600R and A7100RU.

DDOS 81
article thumbnail

Interview With a Crypto Scam Investment Spammer

Krebs on Security

Shortly after that, those same servers came under a sustained distributed denial-of-service (DDoS) attack. Chaput said whoever was behind the DDoS was definitely not using point-and-click DDoS tools, like a booter or stresser service. A DIRECT QUOT The domain quot[.]pw “On Twitter, more spam and crypto scam.”

Scams 252
article thumbnail

APT trends report Q1 2022

SecureList

This is our latest installment, focusing on activities that we observed during Q1 2022. Subsequently, DDoS attacks hit several government websites. In late February 2022, we identified two archives submitted from network addresses in Ukraine to an online multi-scanner service. We named this malware Elections GoRansom.

Malware 135
article thumbnail

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December. The Zerobot botnet first appeared in the wild in November 2022 targeting devices running on Linux operating system. “Since the release of Zerobot 1.1, ” reads the analysis published by Microsoft.

IoT 112