article thumbnail

Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla

Malwarebytes

In the past couple of weeks, we have observed an ongoing campaign targeting system administrators with fraudulent ads for popular system utilities. We have observed several different advertiser accounts which were all reported to Google. dll (Nitrogen).

article thumbnail

FBI and CISA published a new advisory on AvosLocker ransomware

Security Affairs

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. AvosLocker affiliates use legitimate software and open-source remote system administration tools to compromise the victims’ networks.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cisco fixes a static default credential issue in Smart Software Manager tool

Security Affairs

The CVE-2020-3158 flaw is related to the presence of a system account that has a default and static password in the Smart Software Manager tool. “The vulnerability is due to a system account that has a default and static password and is not under the control of the system administrator.”

Software 108
article thumbnail

Malvertiser copies PC news site to deliver infostealer

Malwarebytes

This type of website is often visited by geeks and system administrators to read the latest computer reviews, learn some tips and download software utilities. The advertiser shows as Scott Cooper and is likely a compromised or fake identity. info/account/hdr.jpg ivcgroup[.]in/temp/Citrix-x64.msix com realvnc[.]pro

Software 137
article thumbnail

Microsoft warns of Human-Operated Ransomware as a growing threat to businesses

Security Affairs

“They exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.” ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” continues Microsoft.

article thumbnail

Backdoored Webmin versions were available for download for over a year

Security Affairs

Webmin is an open-source web-based interface for system administration for Linux and Unix. It allows users using web browsers to set up user accounts, Apache, DNS, file sharing and much more. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

article thumbnail

Google will shut down consumer version of Google+ earlier due to a bug

Security Affairs

Google initially announced plans to shut down Google+ after discovered a bug that exposed private data in as many as 500,000 accounts. “A list of impacted users in those domains is being sent to system administrators, and we will reach out again if any additional impacted users or issues are discovered.