Security Affairs

JULY 7, 2019

Firefox finally addressed the Antivirus software TLS Errors. LooCipher: The New Infernal Ransomware. China installs a surveillance app on tourists phones while crossing in the Xinjiang. Sodin Ransomware includes exploit for Windows CVE-2018-8453 bug. Godlua backdoor, the first malware that abuses the DNS over HTTPS (DoH).

Scams 47

Scams Spyware DNS Advertising 47

SecureList

MAY 31, 2021

We believe this is a continuation of a campaign last summer, reported by Avast , in which the malware masqueraded as the Malwarebytes antivirus installer. Ransomware encrypting virtual hard disks. Ransomware gangs are exploiting vulnerabilities in VMware ESXi to target virtual hard disks and encrypt the data stored on them.

Malware 101

Malware Adware Encryption Architecture 101

SecureList

NOVEMBER 26, 2021

In June, more than six months after DarkHalo had gone dark, we observed the DNS hijacking of multiple government zones of a CIS member state that allowed the attacker to redirect traffic from government mail servers to computers under their control – probably achieved by obtaining credentials to the control panel of the victims’ registrar.

Malware 92

Malware Banking Energy and Utilities Accountability 92