Advertising, Firmware, Information Security and Internet

QNAP urges users to update NAS firmware and app to prevent infections

Security Affairs

SEPTEMBER 29, 2020

While the AgeLocker ransomware continues to target QNAP NAS systems, the Taiwanese vendor urges customers to update the firmware and apps. Taiwanese vendor QNAP is urging its customers to update the firmware and apps installed on their network-attached storage (NAS) devices to prevent AgeLocker ransomware infections.

Firmware

Firmware Encryption Ransomware Advertising

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

Chaput said the spammers used more than 1,500 Internet addresses across 400 providers to register new accounts, which then followed popular accounts on Mastodon and sent private mentions to the followers of those accounts. Quotpw/Ahick/Edgard/ципа advertising his coding services in this Google-translated forum posting.

Scams

Scams DDOS Cryptocurrency Accountability

Multiple DDoS botnets were observed targeting Zyxel devices

Security Affairs

JULY 22, 2023

The cause of the vulnerability is the improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35. reads the alert published by Rapid7.

DDOS

DDOS Firmware VPN Firewall

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service. WHO’S BEHIND SOCKSESCORT?

Malware

Malware VPN Internet Internet

3.5m IP cameras exposed, with US in the lead

Security Affairs

DECEMBER 14, 2022

The number of internet-facing cameras in the world is growing exponentially. Businesses and homeowners increasingly rely on internet protocol (IP) cameras for surveillance. New research by Cybernews shows an exponential rise in the uptake of internet-facing cameras. Surge in internet-facing cameras.

Surveillance

Surveillance Manufacturing Passwords Internet

T95 Android TV Box sold on Amazon hides sophisticated malware

Security Affairs

JANUARY 16, 2023

Milisic discovered pre-loaded malware into its firmware. Milisic purchased the T95 Android TV box to run Pi-hole , which is a Linux network-level advertisement and Internet tracker blocking application. The malicious code embedded in the firmware of the device acts like the Android CopyCat malware.

Malware

Malware Firmware DNS Internet

79 Netgear router models affected by a dangerous Zero-day

Security Affairs

JUNE 18, 2020

79 Netgear router models are vulnerable to a severe unpatched security vulnerability that can be exploited by remote attackers to take over devices. A whopping 79 Netgear router models are vulnerable to a severe security flaw that can let hackers take over devices remotely. ” reads the analysis published by GRIMM.

Firmware

Firmware Internet Internet Advertising

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Security Affairs

DECEMBER 8, 2021

The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert pointed out that every firmware developed since 2016 has been tested and found to be vulnerable.

Firmware

Firmware DDOS Malware IoT

Researchers found allegedly intentional backdoors in FTTH devices from Chinese vendor C-Data

Security Affairs

JULY 10, 2020

Two security researchers have discovered undocumented Telnet admin account accounts in 29 Fiber-To-The-Home (FTTH) devices from Chinese vendor C-Data. Some of the devices support multiple 10-gigabit uplinks and provide Internet connectivity to up to 1024 ONTs (clients). ” reads the analysis published by the experts.

Firmware

Firmware Accountability Advertising Manufacturing

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

According to the experts, Tenda routers running a firmware version between AC9 to AC18 are vulnerable to the attack. “We recommend that Tenda router users check their firmware and make necessary update.” ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

IoT

IoT Firmware DNS Advertising

Tails OS version 4.5 supports the Secure Boot

Security Affairs

APRIL 10, 2020

The Tails OS allows to use the Internet anonymously and circumvent censorship by using the Tor Network, it leaves no trace on the computer users are using and uses the state-of-the-art cryptographic tools to encrypt files, emails and instant messaging. The security feature is part of the UEFI 2.3.1 ” reads the Tails website.

Firmware

Firmware Advertising Encryption Internet

Hacking IoT & RF Devices with BürtleinaBoard

Security Affairs

JULY 28, 2020

Flashing Firmware: Flashing BUSSide firmware inside the NodeMCU is quick and easy: # apt-get install esptool # git clone [link] # esptool --port /dev/ttyUSB0 write_flash 0x00000 BUSSide/FirmwareImages/*.bin. his majesty, the Firmware). In a couple of minutes you should get extracted the firmware. What do you do?

IoT

IoT Hacking Firmware Advertising

Expert found multiple critical issues in MoFi routers

Security Affairs

SEPTEMBER 8, 2020

. “Multiple critical vulnerabilities have been discovered in the MoFi4500 router, an OpenWRT based wireless router that provides Internet access via LTE. “Several firmware versions have been released, but some of the vulnerabilities have not been fully patched.” ” continues the report. Pierluigi Paganini.

Firmware

Firmware Wireless Authentication Advertising

Juniper Networks addressed many issues in its products

Security Affairs

JULY 10, 2020

The company published a list of security advisories to inform its customers of the vulnerabilities in its products. Some of the issues also affected third-party components, including OpenSSL, Intel firmware, Bouncy Castle, Java SE, Apache software, and others. Pierluigi Paganini. SecurityAffairs – hacking, Juniper).

Firmware

Firmware Advertising Firewall Internet

QSnatch malware infected over 62,000 QNAP NAS Devices

Security Affairs

JULY 28, 2020

The experts observed that once a device has been infected, the malicious code can prevent the installation of firmware updates. According to the alert, the malware is relatively sophisticated and attackers demonstrate an awareness of operational security. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware

Malware Firmware Advertising Manufacturing

USBAnywhere BMC flaws expose Supermicro servers to hack

Security Affairs

SEPTEMBER 3, 2019

Researchers at firmware security firm Eclypsium discovered multiple vulnerabilities referred as USBAnywhere that could be exploited to potentially allow an attacker to take over the baseboard management controller (BMC) for three different models of Supermicro server boards: the X9, X10, and X11. ” concludes Eclypsium.

Hacking

Hacking Firmware Media Authentication

DoS attack the caused disruption at US power utility exploited a known flaw

Security Affairs

SEPTEMBER 9, 2019

“Have as few internet facing devices as possible,” NERC urged in its report.” ” The flaw allowed the attackers to trigger a DoS condition in the internet-facing firewalls that were all perimeter devices used to implement the outer security layer. The case offered a stark demonstration of the risks U.S.

Energy and Utilities

Energy and Utilities Firewall Firmware Advertising

Maze ransomware operators claim to have breached LG Electronics

Security Affairs

JUNE 25, 2020

“One of the screenshots seems to consist of LG Electronics official firmware or software update releases that assist their hardware products to work more efficiently.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Computers and Electronics

Computers and Electronics Ransomware Mobile Telecommunications

DarkHotel APT uses VPN zero-day in attacks on Chinese government agencies

Security Affairs

APRIL 6, 2020

The security firm reported the zero-day vulnerability to Sangfor on April 3, the vendor confirmed that Sangfor VPN servers running firmware versions M6.3R1 and M6.1 Sangfor plans to release a security patched within tomorrow. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. are vulnerable.

VPN

VPN Government Advertising Firmware

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Security Affairs

FEBRUARY 6, 2020

The bridge discovers the hacker-controlled bulb with updated firmware, and the user adds it back onto their network. The company released firmware p atches for the device in January. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Hacking

Hacking IoT Wireless Firmware

QNAP addresses 2 critical flaws that can allow hackers to take over NASs

Security Affairs

OCTOBER 8, 2020

Recently QNAP published a security advisory urging its customers to update the firmware and apps installed on their network-attached storage (NAS) devices to prevent AgeLocker ransomware infections. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The application is updated. Pierluigi Paganini.

Encryption

Encryption Firmware Advertising Ransomware

Pink Botnet infected over 1.6 Million Devices, it is one of the largest botnet ever seen

Security Affairs

NOVEMBER 1, 2021

The botnet was created to launch DDoS attacks and to insert advertisements in the legitimate HTTP traffic of the victims, most of which are in China (96%). This architecture was implemented to make the botnet resilient to takedowns by law enforcement and security firms with the support of the vendors of the infected devices.

Architecture

Architecture DDOS Advertising Firmware

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Security Affairs

OCTOBER 30, 2019

A Russian security researcher accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders. The Russian security researcher Anna Prosvetova, from Saint Petersburg, has accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders.

Hacking

Hacking Firmware Advertising DDOS

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

The number of sensors and smart devices connected to the internet is exponentially rising, which are the 5 Major Vulnerabilities for IoT devices. A hacker managed to identify a weak spot in a security camera model. Unfortunately, at that moment, there were over 300,000 of those cameras connected to the internet.

IoT

IoT Cybersecurity Manufacturing Internet

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

Security Affairs

SEPTEMBER 10, 2019

The hardware of the terminals is equipped with Shenzen technology, while the firmware is based on BusyBox Linux Debian. . Automatic updates are available via Wi-Fi and can be installed by setting IoT radio devices back to factory settings and downloading the latest firmware version. . ” continues the experts. Pierluigi Paganini.

IoT

IoT Hacking Firmware Advertising

USBsamurai for Dummies: How To Make a Malicious USB Implant & Bypass Air-Gapped Environments for 10$. The Dumb-Proof Guide.

Security Affairs

SEPTEMBER 26, 2019

With this article I wanna bring more light regarding: Which are the differences between C-U0007 & C-U0012 How to Build USBsamurai with a C-U0012 How to flash the C-U0012 with the LIGHTSPEED Firmware How to Flash the C-U0007 with the G700 firmware to achieve better performances and get the Air-Gap Bypass feature How to setup LOGITacker.

Firmware

Firmware Encryption Advertising Engineering

Hacking Radio Blasting Systems for Fun & Explosions

Security Affairs

AUGUST 5, 2019

While driving to work I have seen the advertisement of a Fireworks Festival that’s going to happen in the city. A quick search on the internet returned many products related to the topic. Which means, we can easily bruteforce and thus exhaust the space between them with the main WHID Elite Firmware. And guess what?

Hacking

Hacking Firmware Engineering Advertising

For nearly a year, Brazilian users have been targeted with router attacks

Security Affairs

JULY 13, 2019

A router CSRF attack could be launched by tricking victims into visiting a compromised website with malicious advertising ( malvertising ) typically served through third-party ad networks to the site. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” states the analysis published by Avast.

DNS

DNS Passwords Advertising Banking

TP-Link Archer routers allow remote takeover without passwords

Security Affairs

DECEMBER 17, 2019

TP-Link has already addressed the flaw with the release of the following security patches for Archer C5 V4, Archer MR200v4, Archer MR6400v4, and Archer MR400v3 routers: Firmware for Archer C5 V4: [link]. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Archer MR200v4: [link]. Archer MR6400v4: [link].

Passwords

Passwords Advertising Firmware Authentication

SweynTooth Bluetooth flaws affect devices from major system-on-a-chip (SoC) vendors

Security Affairs

FEBRUARY 15, 2020

These issues usually occur due to some improper synchronization between user code and the SDK firmware distributed by the SoC vendor, Security Bypass : Vulnerabilities that could be exploited by attackers in radio range to bypass the latest secure pairing mode of BLE. 2.60 (CVE-2019-16336) and NXP KW41Z 3.40 Pierluigi Paganini.

IoT

IoT Firmware Advertising Hacking

Mozi Botnet is responsible for most of the IoT Traffic

Security Affairs

SEPTEMBER 20, 2020

“Once the attacker gains full access to the device through the botnet, the firmware level can be changed and additional malware can be planted on the device.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT

IoT DDOS Architecture Passwords

Expert found a critical RCE zero-day in TP-Link Wi-Fi Extenders

Security Affairs

JUNE 18, 2019

” The RCE flaw affects TP-Link Wi-Fi Extender models RE365, RE650, RE350 and RE500 running firmware version 1.0.2, TP-Link already released security patches to address the zero-day flaw, the vendor published separated updates for each of the impacted models of Wi-Fi extenders ( RE365 , RE500 , RE650 , RE350 ). build 20180213.

Architecture

Architecture Advertising Firmware IoT

Silex malware bricks thousands of IoT devices in a few hours

Security Affairs

JUNE 26, 2019

The only way to recover infected devices is to manually reinstall the device’s firmware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. pic.twitter.com/Ue661ku0fy — Larry W. Cashdollar (@_larry0) June 25, 2019.

IoT

IoT Malware Advertising Firmware

Bad News: AI and 5G Are Expected to Worsen Cybersecurity Risks

Security Affairs

NOVEMBER 10, 2019

More specifically, their three top concerns were that there would be an increase in attacks associated with Internet of Things (IoT) networks, that the 5G network would create a wider attack surface and that 5G hardware and firmware would lack security by design. SecurityAffairs – secure email gateways, malware).

Risk

Risk Cybersecurity Artificial Intelligence Education

Over 600k GPS trackers left exposed online with a default password of ‘123456’

Security Affairs

SEPTEMBER 6, 2019

Attackers could spy on the users, listen conversations made in the environment surrounding the GPS tracker, get and spoof the location of the tracker, send an SMS message to an arbitrary number to obtain the telephone number of the device and use SMS as an attack vector, replace the firmware of the device. Pierluigi Paganini.

Passwords

Passwords Manufacturing Advertising Firmware

CISA warns of critical flaws in Prima FlexAir access control system

Security Affairs

JULY 31, 2019

The attacker could then download the database and disclose login information, then use it to gain full access to the system. “To update to the latest firmware, each user should select the “Check for Upgrade” option in the “Centrals” menu in the GUI. Also recognize that VPN is only as secure as the connected devices.”

Backups

Backups Authentication Advertising Firmware

Security experts disclosed Wyze data leak

Security Affairs

DECEMBER 29, 2019

According to Twelve Security , the exposed data includes: User name and email of those who purchased cameras and then connected them to their home 24% of the 2.4 As an additional step, we are taking action to improve camera security which will cause your camera to reboot in the coming days.” ” concludes Wyze.

IoT

IoT Accountability Advertising Wireless

FBI warns about high-impact Ransomware attacks on U.S. Organizations

Security Affairs

OCTOBER 3, 2019

Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) warns organizations about high-impact ransomware attacks. Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) issued organizations about high-impact ransomware attacks. ” reads the public service announcement published by the IC3.

Ransomware

Ransomware Advertising Firmware Internet

IoT Secure Development Guide

Pen Test Partners

OCTOBER 9, 2023

In essence, it is a view of the application and its environment through the lens of security. Threat modeling can be applied to a wide range of things, including software, applications, systems, networks, distributed systems, Internet of Things (IoT) devices, and business processes. Deploy malicious firmware. Frameworks 2.1.

IoT

IoT Firmware Mobile Manufacturing

Expert found Russia’s SORM surveillance equipment leaking user data

Security Affairs

AUGUST 30, 2019

The Russian Government obliges national ISPs to purchase and install the probes used by SORM system that allows the Federal Security Service (FSB) to monitor Internet traffic including online communications. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the post published by Meduza.io

Surveillance

Surveillance Firmware Mobile Advertising

How to Reverse Engineer, Sniff & Bruteforce Vulnerable RF Adult Toys with WHID Elite

Security Affairs

AUGUST 2, 2019

With all these data we can finally compose the packet that is transmitted to trigger the Vibration mode: Now we are ready to give it a try with the Standalone Firmware of WHID Elite and see if it is able to decode them too. Which means, we can easily fuzz and thus exhaust the space between them with the main WHID Elite Firmware.

Engineering

Engineering Firmware InfoSec Advertising

Cyber Security Roundup for June 2021

Security Boulevard

JUNE 1, 2021

roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, May 2021. The UK National Cyber Security Centre (NCSC) published its Smart Cities (connected places) guidance for UK local authorities. VULNERABILITIES AND SECURITY UPDATES.

Ransomware

Ransomware Passwords Scams Cyber Attacks

Security Affairs newsletter Round 268

Security Affairs

JUNE 14, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firmware

Firmware Advertising Ransomware Hacking

What is Incident Response? Ultimate Guide + Templates

eSecurity Planet

JULY 25, 2023

Malvertising: Malicious advertisements that are distributed through legitimate ad networks can lead users to infected websites or trigger downloads of malware. Escalate to ISO: The procedure for reporting issues to higher-level management, such as the Information Security Officer (ISO).

Software

Software Data breaches DDOS Ransomware

QNAP urges users to update NAS firmware and app to prevent infections

Interview With a Crypto Scam Investment Spammer

Trending Sources

Multiple DDoS botnets were observed targeting Zyxel devices

Who and What is Behind the Malware Proxy Service SocksEscort?

3.5m IP cameras exposed, with US in the lead

T95 Android TV Box sold on Amazon hides sophisticated malware

79 Netgear router models affected by a dangerous Zero-day

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Researchers found allegedly intentional backdoors in FTTH devices from Chinese vendor C-Data

New Ttint IoT botnet exploits two zero-days in Tenda routers

Tails OS version 4.5 supports the Secure Boot

Hacking IoT & RF Devices with BürtleinaBoard

Expert found multiple critical issues in MoFi routers

Juniper Networks addressed many issues in its products

QSnatch malware infected over 62,000 QNAP NAS Devices

USBAnywhere BMC flaws expose Supermicro servers to hack

DoS attack the caused disruption at US power utility exploited a known flaw

Maze ransomware operators claim to have breached LG Electronics

DarkHotel APT uses VPN zero-day in attacks on Chinese government agencies

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

QNAP addresses 2 critical flaws that can allow hackers to take over NASs

Pink Botnet infected over 1.6 Million Devices, it is one of the largest botnet ever seen

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

USBsamurai for Dummies: How To Make a Malicious USB Implant & Bypass Air-Gapped Environments for 10$. The Dumb-Proof Guide.

Hacking Radio Blasting Systems for Fun & Explosions

For nearly a year, Brazilian users have been targeted with router attacks

TP-Link Archer routers allow remote takeover without passwords

SweynTooth Bluetooth flaws affect devices from major system-on-a-chip (SoC) vendors

Mozi Botnet is responsible for most of the IoT Traffic

Expert found a critical RCE zero-day in TP-Link Wi-Fi Extenders

Silex malware bricks thousands of IoT devices in a few hours

Bad News: AI and 5G Are Expected to Worsen Cybersecurity Risks

Over 600k GPS trackers left exposed online with a default password of ‘123456’

CISA warns of critical flaws in Prima FlexAir access control system

Security experts disclosed Wyze data leak

FBI warns about high-impact Ransomware attacks on U.S. Organizations

IoT Secure Development Guide

Expert found Russia’s SORM surveillance equipment leaking user data

How to Reverse Engineer, Sniff & Bruteforce Vulnerable RF Adult Toys with WHID Elite

Cyber Security Roundup for June 2021

Security Affairs newsletter Round 268

What is Incident Response? Ultimate Guide + Templates

Stay Connected