article thumbnail

New CACTUS ransomware appeared in the threat landscape

Security Affairs

Researchers warn of a new ransomware family called CACTUS that exploits known vulnerabilities in VPN appliances to gain initial access to victims’ networks. The ransomware identifies user accounts by viewing successful logins in Windows Event Viewer, it also uses a modified variant of the open-source PSnmap Tool.

article thumbnail

Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

eSecurity Planet

Major cybersecurity events in the last week make clear that hackers just keep getting savvier — and security teams need to be vigilant to keep up. Unpatched devices can give attackers privileged access to networks, particularly those set up as VPN virtual servers, ICA proxies, RDP proxies, or AAA servers.

VPN 96
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Enhancing Cybersecurity Awareness: A Comprehensive Guide

CyberSecurity Insiders

Avoid sharing sensitive information on public Wi-Fi networks and use a virtual private network (VPN) when connecting to public networks. In the event of a cyber attack or data breach, having up-to-date backups ensures that you can restore your information and minimize potential losses.

article thumbnail

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

eSecurity Planet

They then authenticated to the victim’s VPN to initiate a remote desktop protocol (RDP) connection to the domain controllers. This unfortunate turn of events shows how adversaries can quickly sneak into a system and exploit vulnerabilities to escalate privileges and compromise the whole network. Security Best Practices.

VPN 108
article thumbnail

Analysis of BlackGuard – a new info stealer malware being sold in a Russian hacking forum

Security Boulevard

BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients. BlackGuard detects antivirus processes. This allows it to bypass antivirus and string-based detection. String decryption technique. Whitelist CIS.

Malware 98
article thumbnail

A mysterious code prevents QNAP NAS devices to be updated

Security Affairs

The user ianch99 in the QNAP NAS community forum reported that the antivirus ClamAV was failing to update due to 0.0.0.0 “Since recent firmware updates, the ClamAV Antivirus fails to update due to 700+ clamav.net entries in /etc/hosts, all set to 0.0.0.0 clamav.net host file entries. e.g.” wrote the user ianch99.

article thumbnail

GUEST ESSAY: Securing your cryptocurrency — best practices for Bitcoin wallet security

The Last Watchdog

Wallet backups provide a safety net in the event that your device breaks down, is misplaced, or is stolen. To avoid potential vulnerabilities, keep your operating system, antivirus software, and other security tools up to date. A virtual private network (VPN) can offer an additional layer of encryption and security.