Security Affairs

APRIL 24, 2024

A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners. Avast researchers discovered and analyzed a malware campaign that exploited the update mechanism of the eScan antivirus to distribute backdoors and crypto miners.

Antivirus 101

Antivirus Malware DNS Cryptocurrency 101

Security Affairs

NOVEMBER 26, 2019

Researchers at SEC Consult Vulnerability Lab discovered multiple issues in several security products from Fortinet, including hardcoded key and encryption for communications. “ Fortinet products, including FortiGate and Forticlient regularly send information to Fortinet servers (DNS: guard.fortinet.com) on.

Encryption 115

Encryption Antivirus DNS Advertising 115

Security Affairs

AUGUST 31, 2022

At the time of publication, this particular file is undetected by all antivirus vendors according to VirusTotal” The Base64 encoded payload, once decrypted, is a Windows 64-bit executable (1.7MB) called “msdllupdate.exe.”. “This technique works by sending an encrypted string appended to the DNS query set as a subdomain.

Malware 83

Malware DNS Antivirus Encryption 83

Security Affairs

OCTOBER 12, 2019

. “The first of FIN7’s new tools is BOOSTWRITE – an in-memory-only dropper that decrypts embedded payloads using an encryption key retrieved from a remote server at runtime. The messages sent to the victims were also dropping the backdoor DNSbot that primarily operates over DNS traffic. ” concludes the report.

Identity Theft 76

Identity Theft Hacking Advertising DNS 76

Security Affairs

FEBRUARY 4, 2021

“The encryption algorithm implemented in this botnet and the process of obtaining C2 are nested in layers, like Russian nesting dolls.For this reason we named it Matryosh.” The Matryosh initially decrypts the remote hostname and uses the DNS TXT request to obtain TOR C2 and TOR proxy, then it connects with the TOR proxy.

DDOS 130

DDOS DNS Antivirus Malware 130

eSecurity Planet

APRIL 26, 2024

Server: Provides powerful computing and storage in local, cloud, and data center networks to run services (Active Directory, DNS, email, databases, apps). Virtual private networks (VPNs): Secure remote user or branch office access to network resources through encrypted connections to firewalls or server applications.

Architecture 103

Architecture Network Security Firewall Risk 103

eSecurity Planet

DECEMBER 3, 2021

Here are the top Twitter accounts to follow for the latest commentary, research, and much-needed humor in the ever-evolving information security space. Russian software engineer Eugene Kaspersky’s frustration with the malware of the 80s and 90s led to the founding of antivirus and cybersecurity vendor Kaspersky Lab.

Accountability 134

Accountability Cybersecurity Penetration Testing InfoSec 134