article thumbnail

Fake DDoS protection pages on compromised WordPress sites lead to malware infections

Security Affairs

Threat actors compromise WordPress sites to display fake Cloudflare DDoS protection pages to distribute malware. DDoS Protection pages are associated with browser checks performed by WAF/CDN services which verify if the site visitor is a human or a bot. The file poses as a tool required to bypass the DDoS verification.

DDOS 92
article thumbnail

Security Affairs newsletter Round 381

Security Affairs

Twilio hackers also breached the food delivery firm DoorDash Unprecedented cyber attack hit State Infrastructure of Montenegro Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus Critical flaw impacts Atlassian Bitbucket Server and Data Center Iran-linked Mercury APT exploited Log4Shell in SysAid Apps for initial access GoldDragon (..)

DDOS 72
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

‘Spam Nation’ Villain Vrublevsky Charged With Fraud

Krebs on Security

When I first began writing about Vrublevsky in 2009 as a reporter for The Washington Post , ChronoPay and its sister firm Red & Partners (RNP) were earning millions setting up payment infrastructure for fake antivirus peddlers and spammers pimping male enhancement drugs. In 2013, Vrublevsky was sentenced to 2.5 Some pay, some don’t.

Banking 191
article thumbnail

Security Affairs newsletter Round 210 – News of the week

Security Affairs

A new DDoS technique abuses HTML5 Hyperlink Audit Ping in massive attacks. Avast, Avira, Sophos and other antivirus solutions show problems after. Marcus Hutchins pleads guilty to two counts of banking malware creation. Romanian duo convicted of fraud Scheme infecting 400,000 computers.

article thumbnail

IT threat evolution Q3 2021

SecureList

We have seen targeted attacks exploiting the vulnerability to target companies in research and development, the energy sector and other major industries, banking, the medical technology sector, as well as telecoms and IT. It also includes a Bitcoin wallet stealing module. This happened recently with FMWhatsApp, a popular WhatsApp mod.

Malware 93
article thumbnail

IT threat evolution Q1 2021. Non-mobile statistics

SecureList

Attempts to run malware designed to steal money via online access to bank accounts were stopped on the computers of 118,099 users. At the end of last year, the number of users attacked by malware designed to steal money from bank accounts gradually decreased, a trend that continued in Q1 2021. Top 10 banking malware families.

Mobile 91
article thumbnail

Pirate Ship Sailing to Developing World: Group-IB Uncovers Real Captains of Online Piracy Crew

Security Affairs

For instance, major pirate CDNs and online casinos, whose owners reside in Ukraine, resort to the services of Russia-based hosting services and banks, using tensions and weak links between the two states to avoid criminal proceedings. The analysis revealed that up to 23% of pirate resources posed risks to users. million.