Security Affairs

MARCH 26, 2024

A new variant of TheMoon malware infected thousands of outdated small office and home office (SOHO) routers and IoT devices worldwide. The Black Lotus Labs team at Lumen Technologies uncovered an updated version of “ TheMoon ” bot targeting end-of-life (EoL) small home/small office (SOHO) routers and IoT devices.

IoT 116

IoT Cybercrime Internet Internet 116

Security Affairs

OCTOBER 1, 2019

Security Labs discovered a new IOT bot named “GUCCI”. It seems like the IOT botnet is named after an Italian luxury brand of fashion and leather goods. The IOT threat detection engine picked the infection IP has shown below hosting number of bins for different architectures. Compromising C&C. Inference. Pierluigi Paganini.

IoT 71

IoT Advertising Engineering Architecture 71

Security Affairs

SEPTEMBER 2, 2019

Akamai researcher Larry Cashdollar reported that a cryptocurrency miner that previously hit only Arm-powered IoT devices it now targeting Intel systems. The researchers revealed that one of his honeypots was hit by this IoT malware that targets Intel machines running Linux. “This one seems to target enterprise systems.”

IoT 86

IoT Cryptocurrency Malware System Administration 86

Security Affairs

APRIL 26, 2019

Experts discovered security flaws in the iLnkP2P peer-to-peer (P2P) system that exposes millions of IoT devices to remote attacks. The iLnkP2P system allows users to remotely connect to their IoT devices using a mobile phone or a PC. Potentially affected IoT devices include cameras and smart doorbells. Pierluigi Paganini.

IoT 79

IoT Hacking Manufacturing Advertising 79

Security Affairs

JULY 16, 2018

A security researcher discovered that the IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs. The IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs, the discovery was made by security researcher Ankit Anubhav, Principal Researcher at NewSky Security.

IoT 55

IoT Engineering Passwords Firmware 55

Security Affairs

JULY 14, 2020

Researchers spotted a new version of the Mirai IoT botnet that includes an exploit for a vulnerability affecting Comtrend routers. Malware researchers at Trend Micro have discovered a new version of the Mirai Internet of Things (IoT) botnet that includes an exploit for the CVE-2020-10173 vulnerability impacting Comtrend routers.

IoT 93

IoT Advertising DDOS Authentication 93

Krebs on Security

JUNE 18, 2018

The attack content could be contained within malicious advertisements or even a tweet.” According to Tripwire, the location data leak stems from poor authentication by Google Home and Chromecast devices, which rarely require authentication for connections received on a local network.

IoT 190

IoT Internet Internet Wireless 190

Security Affairs

APRIL 27, 2019

An authenticated attacker could exploit the flaw by sending specially crafted HTTP requests to the targeted device. Other three flaws, rated as “high severity,” could be exploited by an authenticated attacker to change the user password and obtain plaintext passwords and other sensitive information. SecurityAffairs – IoT, hacking).

Wireless 95

Wireless Passwords IoT Retail 95

Security Affairs

JANUARY 24, 2019

Cisco released security updates for several products, including SD-WAN, Webex, Firepower, IoT Field Network Director, Identity Services Engine, and Small Business routers. The vulnerability could be exploited by a remote, authenticated attacker to cause a DoS condition and in some conditions to execute arbitrary code with root privileges.

Small Business 75

Small Business IoT Authentication Engineering 75

Security Affairs

JULY 27, 2020

In December 2018, security experts from Trend Micro discovered that some machine-to-machine (M2M) protocols can be abused to attack IoT and industrial Internet of Things (IIoT) systems. Change the default username and passwords for all network devices, especially IoT devices. Pierluigi Paganini. SecurityAffairs – hacking, FBI).

DDOS 106

DDOS IoT Internet Internet 106

Security Affairs

SEPTEMBER 17, 2019

Internet-connected embedded devices are often placed into a broader category referred to as IoT devices. According to the experts, the level of security for IoT devices is slightly improved since SOHOpelessly Broken 1.0, Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Manufacturing 83

Manufacturing IoT Advertising Authentication 83

Security Affairs

MARCH 21, 2020

are vulnerable to this pre-authentication command injection vulnerability. Multiple ZyXEL network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device.” The vendor advisory is also available.

DDOS 102

DDOS Authentication Advertising Firmware 102

Krebs on Security

MARCH 13, 2019

Online advertising firm Sizmek Inc. [ NASDAQ: SZMK ] says it is investigating a security incident in which a hacker was reselling access to a user account with the ability to modify ads and analytics for a number of big-name advertisers. Pappachen asked KrebsOnSecurity what else could have prevented this. ” PASSWORD SPRAYING.

Accountability 220

Accountability Passwords Advertising Penetration Testing 220

Security Affairs

MARCH 9, 2019

The researchers discovered that the APIs for both applications failed to authenticate requests allowing attackers to take over customers’ accounts due to insecure direct object references (IDORs) issues. “We’ve seen easy to exploit IDORs in IoT APIs on many occasions. ” conclude the expert. Pierluigi Paganini.

Hacking 103

Hacking Accountability Engineering Advertising 103

Security Affairs

SEPTEMBER 25, 2020

The researchers set up a compromised IoT device that initiates MITM attack using ARP Poisoning, then Forticlient initiates VPN connection. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the warning.

VPN 111

VPN Hacking IoT Advertising 111

Security Affairs

APRIL 17, 2020

The flaws affect the REST API and could be exploited by a remote, unauthenticated attacker to bypass authentication or conduct directory traversal attacks. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Big data 92

Big data Wireless Advertising Firmware 92

Security Affairs

MAY 21, 2020

Passwords associated with external authentication systems such as AD or LDAP are unaffected. Login credentials associated with external authentication systems (i.e. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firewall 128

Firewall Ransomware Passwords VPN 128

Security Affairs

OCTOBER 22, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Authentication 78

Authentication Advertising Architecture Cybercrime 78

Security Affairs

OCTOBER 9, 2021

UpLift Media, launched by Sky and Molson Coors in 2015, is an in-venue digital screen advertising network that operates digital screens in bars and other leisure venues across the UK. Anyone who knew where to look could have accessed the data during that period and abused the authentication credentials found in the configuration file.

IoT 106

IoT Media Engineering Education 106

Security Affairs

JANUARY 7, 2019

The hot tubs could be remotely controlled by an app, dubbed Balboa Water App, that lack of authentication mechanisms. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – IoT, hacking). Pierluigi Paganini.

Hacking 102

Hacking Cyber Attacks IoT Mobile 102

Security Affairs

OCTOBER 30, 2018

Jha’s attacks effectively shut down Rutgers University’s central authentication server, which maintained, among other things, the gateway portal through which staff, faculty, and students delivered assignments and assessments,” reads the press release from the US Justice Department. Pierluigi Paganini.

DDOS 86

DDOS IoT Advertising Malware 86

Security Affairs

FEBRUARY 21, 2019

” The second issue is an unauthenticated root access bug (CVE-2019-1664 ) in the hxterm service of the software caused insufficient authentication controls, it could allow an attacker to gain root access to all member nodes of the HyperFlex cluster. “The vulnerability is due to insufficient authentication controls. .

Software 81

Software Authentication Advertising IoT 81

Security Affairs

OCTOBER 7, 2019

We rated this as a critical issue since the vulnerability can be triggered remotely without authentication.” “The vulnerability begins with a bad authentication check. “ The experts discovered that it is possible to execute code remotely, even without the necessary privileges, due to bad authentication check.

Authentication 91

Authentication Advertising Firmware Hacking 91

Security Affairs

JULY 29, 2018

.” The Samsung SmartThings Hub is a central controller that could be used to manage a broad range of internet-of-things (IoT) devices in a smart home, including smart plugs, LED light bulbs , thermostats , and cameras. Other chains identified by the researchers could be exploited only by an authenticated attacker.

Firmware 50

Firmware IoT Advertising Wireless 50

Security Affairs

OCTOBER 8, 2018

“The vulnerabilities include CVE-2018-1156 — an authenticated remote code execution (RCE) — as well as a file upload memory exhaustion (CVE-2018-1157), a www memory corruption (CVE-2018-1159) and a recursive parsing stack exhaustion (CVE-2018-1158). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Authentication 84

Authentication Advertising Hacking Passwords 84

Security Affairs

AUGUST 4, 2019

Sonicwall warns of a spike in the number of attacks involving encrypted malware and IoT malware. WordPress Plugin Facebook Widget affected by authenticated XSS. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 60

Data breaches eCommerce Hacking Malware 60

Security Affairs

JUNE 3, 2019

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication. An attacker could broadcast any video without any authentication, the worst case attacker could leverage this vulnerability to broadcast a fake emergency message (Scary right?).

Hacking 68

Hacking Authentication Advertising Cybersecurity 68

Security Affairs

JULY 23, 2020

In May, Malwarebytes researchers observed the Mac version of Dacls being distributed via a Trojanized two-factor authentication application for macOS called MinaOTP, mostly used by Chinese speakers. MATA is also able to target Linux-based diskless network devices, including such as routers, firewalls, or IoT devices.

Malware 99

Malware Ransomware Advertising Encryption 99

Security Affairs

DECEMBER 17, 2019

TP-Link addressed a critical zero-day vulnerability ( CVE-2017-7405 ) in its TP-Link Archer routers that could be exploited by attackers to remotely take their control over LAN via a Telnet connection without authentication. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Archer MR200v4: [link].

Passwords 90

Passwords Advertising Firmware Authentication 90

Malwarebytes

MAY 13, 2021

To send properly authenticated retrieval requests the researcher used an AppleMail plugin, a trick that was also described in the German research. The easiest to imagine use case would be uploading data from remote IoT devices without a broadband modem, SIM card, data plan or Wi-Fi connectivity, but it could also be used in sneakier ways.

Internet 115

Internet Internet Firmware Mobile 115

Security Affairs

OCTOBER 1, 2018

“Just like the regular dnschanger , this campaign attempts to guess the password on the router’s web authentication page or bypass the authentication through the dnscfg. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Security Affairs – GhostDNS, IoT ). Pierluigi Paganini.

DNS 72

DNS Malware Firmware Phishing 72

Security Affairs

JULY 20, 2018

“Like any other IoT device, these robot vacuum cleaners could be marshalled into a botnet for DDoS attacks, but that’s not even the worst-case scenario, at least for owners. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firmware 42

Firmware Surveillance Authentication Technology 42

Security Affairs

AUGUST 7, 2019

Most of the exploits allow the botnet to compromise unpatched IoT devices, but experts warn that enterprise apps Oracle WebLogic and VMware SD-Wan are also potential targets. Authentication Bypass / Remote Command Execution EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Cashdollar will be at Defcon (@_larry0) August 6, 2019.

Wireless 79

Wireless IoT Advertising Surveillance 79

Security Affairs

AUGUST 31, 2020

An unauthenticated, remote attacker could exploit the flaw to achieve authentication using the authLogout.cgi executable because it doesn’t filter out special characters from the input before invoking the system function to run the command string. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firmware 114

Firmware Advertising Malware Internet 114

Security Affairs

MAY 6, 2019

An authenticated attacker could exploit the flaw by sending specially crafted HTTP requests to the targeted device. The flaw could be exploited sending specially crafted authenticated HTTP request to the vulnerable devices resulting in remote code execution. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Wireless 69

Wireless Authentication Advertising Encryption 69

CyberSecurity Insiders

SEPTEMBER 21, 2021

Remember to use Multi-Factor Authentication (MFA) on accounts wherever it is available, especially on accounts that have financial information such as online banking, credit card, and retirement accounts. Review your passwords, updating them as needed, and ensuring they are strong. Establish a unique password for each account.

Cybersecurity 80

Cybersecurity Small Business Penetration Testing Cybercrime 80

Security Affairs

JUNE 22, 2019

In September 2018, researchers observed the Hide and Seek (HNS) IoT botnet targeting Android devices with ADB option enabled. This attack takes advantage of the way open ADB ports don’t have authentication by default, similar to the Satori botnet variant we previously reported.” Pierluigi Paganini.

Cryptocurrency 63

Cryptocurrency Malware Advertising Firmware 63