Antivirus Hacking System Administration 
Security Affairs
JANUARY 10, 2025
Since June 2023, MirrorFace has used the Windows Sandbox feature to execute LOADEINFO malware within an isolated environment, evading antivirus detection. The alert issued by Japan NPA recommends System Administrators to: Implement centralized log management to track breaches, as logs are critical for identifying causes and scope.
Security Affairs
OCTOBER 13, 2023
AvosLocker affiliates use legitimate software and open-source remote system administration tools to compromise the victims’ networks. bat) scripts [T1059.003] for lateral movement, privilege escalation, and disabling antivirus software. This joint CSA updates the advisory published by the US Government on March 17, 2022.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
JUNE 27, 2019
“The hacking campaign, known as “ Cloud Hopper ,” was the subject of a U.S. ” The report attributed the cyberespionage campaign to the China-linked APT10 (aka Menupass, and Stone Panda), the same group recently accused of hacking telco operators worldwide. SecurityAffairs – Cloud Hopper, hacking).
Security Affairs
MARCH 10, 2020
“They exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.” In many cases, some machines run without standard safeguards, like security updates and cloud-delivered antivirus protection.”
Krebs on Security
SEPTEMBER 30, 2023
The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. Details after contacting on jabber: truniger@xmpp[.]jp.”
Security Affairs
MAY 2, 2021
The researchers believe that the coder is an Italian vixer that previously created the “Zodiac Crypto Stealer” and “Spartan Crypter” for obfuscating malware to avoid antivirus detection. Organizations with effective spam filtering, proper system administration and up-to-date Windows hosts have a much lower risk of infection.”
Security Affairs
JUNE 14, 2022
Researchers from antivirus firm Avast spotted a new Linux rootkit, dubbed ‘Syslogk,’ that uses specially crafted “magic packets” to activate a dormant backdoor on the device. SecurityAffairs – hacking, Syslogk). Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.
Expert insights. Personalized for you.
78 
Let's personalize your content