The Hacker News

AUGUST 20, 2023

The threat actors behind the HiatusRAT malware have returned from their hiatus with a new wave of reconnaissance and targeting activity aimed at Taiwan-based organizations and a U.S. military procurement system.

Malware 94

Malware Architecture 94

The State of Security

JULY 17, 2022

To safeguard their network systems and entire security architecture, […]… Read More. The post The State of Security: Malware in 2022 appeared first on The State of Security. This proves beyond any doubt that enterprises are experiencing increasing threats and full-on attacks to their information technology systems.

Malware 134

Malware Architecture Risk Technology 134

The Hacker News

AUGUST 27, 2023

An updated version of a botnet malware called KmsdBot is now targeting Internet of Things (IoT) devices, simultaneously branching out its capabilities and the attack surface. The binary now includes support for Telnet scanning and support for more CPU architectures," Akamai security researcher Larry W.

IoT 98

IoT Malware Architecture Internet 98

eSecurity Planet

AUGUST 2, 2022

Linux malware is skyrocketing and now surpasses both macOS and Android, according to a new report, suggesting that cybercriminals are increasingly targeting the open source operating system. The Linux malware growth has occurred even as Windows, Android and macOS have all seen a decline in new malware samples.

Malware 141

Malware VPN Encryption Marketing 141

SecureList

MARCH 12, 2021

However, as technology evolves, we also observe a growing interest in the newly released platform from malware adversaries. This inevitably leads us to new malware samples compiled for the Apple Silicon platform. section at the end of the article for those who want to understand better the security risks of M1 malware.

Adware 136

Adware Malware Architecture Technology 136

Security Boulevard

JULY 17, 2022

To safeguard their network systems and entire security architecture, […]… Read More. The post The State of Security: Malware in 2022 appeared first on The State of Security. The post The State of Security: Malware in 2022 appeared first on Security Boulevard.

Malware 104

Malware Architecture Risk Technology 104

Heimadal Security

OCTOBER 11, 2021

FontOnLake is a previously unknown malware family that is targeting any systems running Linux. The malware has a limited incidence in the wild and has a sophisticated architecture that allows it to remain persistent on an infected machine for long periods of time.

Malware 105

Malware Architecture Cybersecurity 105

The Hacker News

SEPTEMBER 23, 2023

Deadglyph's architecture is unusual as it consists of cooperating components – one a native x64 binary, the other a.NET assembly," ESET said in a new report shared with The Hacker News. This combination

Architecture 121

Architecture Malware Cybersecurity 121

SecureList

OCTOBER 5, 2022

We are often asked how targets are infected with malware. Last month, we focused on infection methods used in various malware campaigns: methods that we do not see used very often. It now has a second optional command line parameter: “-bomb” When that parameter is used, the malware does the following: ?onnect

Malware 118

Malware Architecture Spyware Ransomware 118

Security Affairs

DECEMBER 1, 2022

Redigo is a new Go-based malware employed in attacks against Redis servers affected by the CVE-2022-0543 vulnerability. Researchers from security firm AquaSec discovered a new Go-based malware that is used in a campaign targeting Redis servers. ” reads the analysis published by AquaSec. .” Pierluigi Paganini.

Malware 142

Malware DDOS Architecture Cryptocurrency 142

eSecurity Planet

JULY 11, 2022

Intezer Labs security researchers have identified a sophisticated new malware that targets Linux devices. Dubbed OrBit , the malware can gain persistence quickly, evade detection and hide its presence in network activity by manipulating logs. OrBit Malware Details. Stealth Malware Infects Entire Machine.

Malware 145

Malware Authentication Antivirus Architecture 145

Security Affairs

JULY 25, 2022

Operators behind the Amadey Bot malware use the SmokeLoader to distribute a new variant via software cracks and keygen sites. Amadey Bot is a data-stealing malware that was first spotted in 2018, it also allows operators to install additional payloads. Then the malware contacts the C2 and sends system information (i.e.

Software 118

Software Malware Cybercrime VPN 118

The Hacker News

JULY 21, 2022

A never-before-seen Linux malware has been dubbed a "Swiss Army Knife" for its modular architecture and its capability to install rootkits. The framework has both passive and active

Malware 99

Malware Architecture 99

Security Boulevard

MARCH 7, 2023

This powerful and versatile tool can be used for everything from answering simple questions to instantly composing written works to developing original software programs, including malware — the latter of which introduces the potential for a dangerous new breed of cyber threats.

Malware 116

Malware Artificial Intelligence Social Engineering Architecture 116

Security Affairs

JUNE 22, 2021

Boffins developed a tool dubbed DroidMorph that provides morphing of Android applications (APKs) and allows to create Android apps (malware/benign) clones. The experts demonstrated that using the tool it is possible to bypass the Android anti-malware solutions performing permutations of the malware.

Malware 122

Malware Architecture Technology Mobile 122

Security Affairs

SEPTEMBER 29, 2022

A new multifunctional Go-based malware dubbed Chaos is targeting both Windows and Linux systems, experts warn. Researchers from Black Lotus Labs at Lumen Technologies, recently uncovered a multifunctional Go-based malware that was developed to target devices based on multiple architectures, including Windows and Linux.

Malware 86

Malware DDOS Architecture Financial Services 86

Security Affairs

MARCH 4, 2023

Researchers at Metabase Q discovered a new ATM malware, dubbed FiXS, that was employed in attacks against Mexican banks since February 2023. Researchers at Metabase Q recently spotted a new ATM malware, dubbed FiXS, that is currently targeting Mexican banks. The name comes from the malware’s code name in the binary.

Banking 93

Banking Malware Financial Services Architecture 93

Malwarebytes

MAY 25, 2022

Based on a case study in 2015 , Akamai strengthened the theory that the malware may be of Asian origin based on its targets. Microsoft said that XorDDoS continues to home on Linux-based systems, demonstrating a significant pivot in malware targets. MMD believed the Linux Trojan originated in China.

Malware 133

Malware DDOS IoT DNS 133

Security Affairs

APRIL 19, 2021

XCSSET, a Mac malware targeting Xcode developers, was now re-engineered and employed in a campaign aimed at Apple’s new M1 chips. Experts from Trend Micro have uncovered a Mac malware campaign targeting Xcode developers that employed a re-engineered version of the XCSSET malware to support Apple’s new M1 chips.

Malware 110

Malware Cryptocurrency Architecture Engineering 110

Malwarebytes

FEBRUARY 24, 2022

According to a joint security advisory published yesterday by US and UK cybersecurity and law enforcement agencies, a new malware called Cyclops Blink has surfaced to replace the VPNFilter malware attributed to the Sandworm group, which has always been seen as a Russian state-sponsored group. Cyclops Blink.

Malware 145

Malware Firewall Firmware DDOS 145

Security Boulevard

JANUARY 11, 2024

This became abundantly clear last year as malware attacks on IoT devices emerged as a fast-rising threat. In this blog post, we’ll explore the potential impact of IoT malware on the public sector — a story of innovation, risk, and the need for resilience. Two-thirds (66.7%) of malware attacks blocked by Zscaler were aimed at routers.

IoT 75

IoT Malware Education Government 75

Security Affairs

JULY 31, 2023

The AVrecon malware was written in C to ensure portability and designed to target ARM-embedded devices. The experts discovered that the malicious code had been compiled for different architectures. investigated the botnet and discovered that the bot is the malware engine behind a 12-year-old service called SocksEscort.

Malware 91

Malware Small Business Advertising Passwords 91

Security Affairs

MARCH 13, 2021

Kaspersky researchers spotted a new variant of the XCSSET Mac malware that compiled for devices running on Apple M1 chips. The malware also allows attackers to capture screenshots and exfiltrate stolen documents to the attackers’ server. Recently experts spotted other malware specifically designed to infect Mac running on M1 chips.

Malware 104

Malware Adware Architecture Antivirus 104

Security Affairs

NOVEMBER 12, 2020

Cybersecurity researchers spotted a new modular PoS malware, dubbed ModPipe, that targets PoS restaurant management software from Oracle. ESET has been aware of the existence of modules since the end of 2019 when its experts first spotted the “basic” components of the malware. SecurityAffairs – hacking, PoS malware).

Malware 134

Malware Architecture Passwords Software 134

The Hacker News

AUGUST 30, 2023

New findings show that malicious actors could leverage a sneaky malware detection evasion technique and bypass endpoint security solutions by manipulating the Windows Container Isolation Framework. Microsoft's container architecture (and by extension,

Architecture 135

Architecture Malware 135

Security Affairs

APRIL 25, 2023

North Korea-linked APT group BlueNoroff (aka Lazarus) was spotted targeting Mac users with new RustBucket malware. Researchers from security firm Jamf observed the North Korea-linked BlueNoroff APT group using a new macOS malware, dubbed RustBucket, family in recent attacks. The trojan can run on both ARM and x86 architectures.

Malware 82

Malware Social Engineering Architecture Education 82

SecureList

MARCH 31, 2022

This malware is a full-featured backdoor containing sufficient capabilities to control the compromised victim. The malware operator exclusively used compromised web servers located in South Korea for this attack. Then, the spawned malware overwrites the legitimate application with the Trojanized application. Backdoor creation.

Malware 115

Malware Encryption Cryptocurrency Architecture 115

Security Affairs

JULY 3, 2023

Researchers spotted a new version of the RustBucket Apple macOS malware that supports enhanced capabilities. Researchers from the Elastic Security Labs have spotted a new variant of the RustBucket Apple macOS malware. The RustBucket malware allows operators to download and execute various payloads.

Malware 78

Malware Architecture Cryptocurrency Hacking 78

Security Affairs

JUNE 13, 2023

Malware researchers analyzed the application of Large Language Models (LLM) to malware automation investigating future abuse in autonomous threats. We explored a potential architecture of an autonomous malware threat based on four main steps: an AI-empowered reconnaissances, reasoning and planning phase, and the AI-assisted execution.

Malware 80

Malware Architecture Hacking Passwords 80

Malwarebytes

AUGUST 31, 2022

A rather unique approach to spread malware using the popularity of the James Webb telescope images has been identified by the Securonix threat research team. The malware is being spread by a phishing campaign that includes a Microsoft Office attachment. The template includes the functions Auto_Open , AutoOpen , and AutoExec.

Malware 91

Malware Engineering Architecture Encryption 91

Security Affairs

FEBRUARY 23, 2022

UK and US cybersecurity agencies linked Cyclops Blink malware to Russia’s Sandworm APT. US and UK cybersecurity and law enforcement agencies published a joint security advisory about a new malware, dubbed Cyclops Blink, that has been linked to the Russian-backed Sandworm APT group. Pierluigi Paganini.

Malware 91

Malware Firmware Architecture Firewall 91

The Hacker News

DECEMBER 5, 2022

A version of an open source ransomware toolkit called Cryptonite has been observed in the wild with wiper capabilities due to its "weak architecture and programming."

Ransomware 100

Ransomware Architecture Malware 100

Security Affairs

SEPTEMBER 28, 2022

North Korea-linked Lazarus APT group continues to target macOS with a malware campaign using job opportunities as a lure. The SentinelOne investigation is based on a previous one conducted by ESET in August , when Lazarus APT has been observed targeting job seekers with macOS malware working also on Intel and M1 chipsets.

Malware 91

Malware Cryptocurrency Architecture Advertising 91

Security Affairs

SEPTEMBER 10, 2020

ESET researchers discovered a new piece of malware dubbed CDRThief targets a specific Voice over IP system to steal call data records (CDR). The VoIP platform Linknat VOS2009 and VOS3000 targeted by the malware is used by two China-produced softswitches (software switches). ” reads the analysis published by ESET.

Malware 117

Malware Encryption Advertising Passwords 117

Security Affairs

DECEMBER 5, 2022

Resecurity has identified a new underground marketplace in the Dark Web oriented towards mobile malware developers and operators. This trend comes from the “Man in The Browser” (MiTB) attacks and WEB-injects designed for traditional PC-based malware such as Zeus, Gozi and SpyEye.

Mobile 101

Mobile Malware Banking Retail 101

SC Magazine

FEBRUARY 18, 2021

Along with the Pirrit Mac adware identified earlier this week, researchers from Red Canary identified Thursday a different malware strain (Jon Rawlinson/CC BY 2.0)). In just three months, hackers have debuted at least two strains of malware designed to attack Apple’s new M1 chip.

Malware 109

Malware Adware VPN Architecture 109

Security Affairs

JUNE 15, 2021

The botnet was linked to a new malware hosting domain that has been serving Mirai variants for several different botnets over the past year. This payload contains the logic to change the execution path to a temporary location, wget a file from a malware hosting page, provide execution permissions, and execute it.”

Malware 118

Malware Internet Internet DDOS 118