article thumbnail

Fake DDoS protection pages on compromised WordPress sites lead to malware infections

Security Affairs

Threat actors compromise WordPress sites to display fake Cloudflare DDoS protection pages to distribute malware. DDoS Protection pages are associated with browser checks performed by WAF/CDN services which verify if the site visitor is a human or a bot. The file poses as a tool required to bypass the DDoS verification.

DDOS 92
article thumbnail

NetDooka framework distributed via a pay-per-install (PPI) malware service

Security Affairs

The malware used a function called “DetectAV()” to determine the antivirus solution installed on the system and uninstall it. The malware accepts multiple arguments that indicate what action should be taken.” ” reads a report published by Trend Micro. ” concludes the analysis.

Malware 91
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Avoslocker ransomware gang targets US critical infrastructure

Security Affairs

In some cases, the gang also threatened and conducted distributed denial-of-service (DDoS) attacks during negotiations. In some cases, AvosLocker negotiators also threaten and launche distributed denial-of-service (DDoS) attacks during negotiations, likely when the victims are not cooperating, to convince them to comply with their demands.

article thumbnail

Security Affairs newsletter Round 248

Security Affairs

Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack. For the second time in a few days, Greek Government websites hit by DDoS attacks. Russian operator of Cardplanet carding site pleads guilty in the US. Cisco Webex flaw allows unauthenticated remote attackers to join private meetings.

article thumbnail

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

This post examines the activities of Khoroshev’s many alter egos on the cybercrime forums, and tracks the career of a gifted malware author who has written and sold malicious code for the past 14 years. was used by a Russian-speaking member called Pin on the English-language cybercrime forum Opensc. Dmitry Yuryevich Khoroshev.

article thumbnail

Security Affairs newsletter Round 210 – News of the week

Security Affairs

A new DDoS technique abuses HTML5 Hyperlink Audit Ping in massive attacks. Operator of Codeshop Cybercrime Marketplace Sentenced to 90 months in prison. Avast, Avira, Sophos and other antivirus solutions show problems after. Romanian duo convicted of fraud Scheme infecting 400,000 computers.

article thumbnail

Combatting ransomware: a holistic approach

IT Security Guru

Although cybercrime as a whole has seen a rise during the pandemic, arguably ransomware has been one of the more successful and lucrative attack types. Now the dust has settled somewhat – and remote working is here to stay for many – security teams need to look at implementing new security models to meet these challenges.