Security Affairs

JUNE 21, 2022

Researchers warn of a new Windows NTLM relay attack dubbed DFSCoerce that can be exploited by threat actors to take control over a Windows domain. The security researcher Filip Dragovic published a proof-of-concept script for the new NTLM relay attack. To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook.

Authentication 118

Authentication Hacking Cybersecurity Information Security 118

Security Affairs

MAY 30, 2022

The cybersecurity researcher nao_sec discovered a malicious Word document (“05-2022-0438.doc”) Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”).

Cybersecurity 145

Cybersecurity Hacking Information Security Malware 145

Security Affairs

MAY 31, 2022

Cyber Research Labs reported a rise in ransomware attacks in the second quarter of 2022, small states are more exposed to these attacks. Cyble researchers warn that cybercriminal organizations have changed tactics, switching from businesses to small states threatening to subvert government apparatus. ” continues Cyble.

Government 138

Government Ransomware Cybercrime Banking 138

Security Affairs

MAY 27, 2022

The Microsoft 365 Defender Research Team discovered four vulnerabilities ( CVE-2021-42598 , CVE-2021-42599 , CVE-2021-42600 , and CVE-2021-42601 ) in a mobile framework, owned by mce Systems , that is used by several mobile carriers in pre-installed Android System apps. ” concludes the report. To nominate, please visit:?.

Mobile 141

Mobile Hacking Cybersecurity Information Security 141

Security Affairs

MAY 27, 2022

Security researchers devised a technique, dubbed GhostTouch, to remotely control touchscreens using electromagnetic signals. A team of researchers from Zhejiang University and Technical University of Darmstadt devised a technique, dubbed GhostTouch, to remotely control capacitive touchscreens using electromagnetic signals.

Authentication 144

Authentication Passwords Hacking Software 144

Security Affairs

MAY 30, 2022

Researchers discovered a new ransomware family called GoodWill that asks victims to donate the ransom for social causes. CloudSEK ’s Threat Intelligence Research team has disclosed a new ransomware strain called GoodWill, that demands victims the payment of a ransom through donations for social causes and financially helping people in need.

Ransomware 105

Ransomware Media Hacking Cybersecurity 105

Security Affairs

MAY 26, 2022

Security researchers released PoC exploit code for the critical authentication bypass vulnerability CVE-2022-22972 affecting multiple VMware products. VMware did not provide technical details about the flaw, then Horizon3 researchers performed an analysis of the patch. . ” reads the analysis published by the researchers.

Authentication 139

Authentication Healthcare Education Cybersecurity 139

Security Affairs

MAY 23, 2022

Researchers from SEKOIA.IO SEKOIA researchers started their investigation after the publication of Google’s Threat Analysis Group (TAG)’s report “ Update on cyber activity in Eastern Europe ” which detailed the activity of nation-state actors against Eastern Europe. org jadlactnato.webredirect[.]org. Pierluigi Paganini.

Government 117

Government Hacking Cybersecurity Information Security 117

Security Affairs

MAY 27, 2022

ERMAC was first spotted by researchers from Threatfabric in July 2021, it is based on the popular banking trojan Cerberus. was discovered by ESET researchers after a campaign impersonating Bolt Food targeted Polish users. ESETresearch @LukasStefanko 1/3 pic.twitter.com/hGeD4ZSwve — ESET research (@ESETresearch) May 18, 2022.

Banking 142

Banking Malware Cybercrime Phishing 142

Security Affairs

JUNE 7, 2022

Mandiant researchers associate multiple LockBit ransomware attacks with the notorious Evil Corp Cybercrime Group. Mandiant researchers have investigated multiple LOCKBIT ransomware attacks that have been attributed to the financially motivated threat actor UNC2165. ” reads the analysis published by Mandiant. Pierluigi Paganini.

Ransomware 130

Ransomware Cybercrime Malware Hacking 130

Security Affairs

JUNE 7, 2022

Researchers from NCC Group spotted a new partnership in the threat landscape between the Black Basta ransomware group and the QBot malware operation. The researchers shared technical details about the ransomware along with the Indicators of Compromise (IoCs). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Ransomware 141

Ransomware Backups Malware Firewall 141

Security Affairs

JUNE 11, 2022

The Iran-linked Lyceum APT group, aka Hexane or Spilrin, used a new.NET-based DNS backdoor in a campaign aimed at companies in the energy and telecommunication sectors, ZScaler researchers warn. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

DNS 144

DNS Telecommunications Malware Phishing 144

Security Affairs

JUNE 9, 2022

Researchers uncovered a high stealth Linux malware, dubbed Symbiote, that could be used to backdoor infected systems. Joint research conducted by security firms Intezer and BlackBerry uncovered a new Linux threat dubbed Symbiote. For this reason, security researchers defined this threat as nearly impossible to detect.

Malware 144

Malware DNS Antivirus Passwords 144

Security Affairs

JUNE 1, 2022

Researchers from Check Point have discovered a new version of the XLoader botnet, which implements significant enhancements, such as a new technique to obscure the Command and Control infrastructure. The researchers pointed out that all XLoader samples have 64 domains and one URI in their configurations. To nominate, please visit:?.

Malware 137

Malware Hacking Cybersecurity Mobile 137

CyberSecurity Insiders

MARCH 13, 2021

This blog was written by an independent guest blogger. Since then, research published in Crime Science has delved into the topic in-depth. Among these categories, the following were deemed the highest risk: Audio/video impersonation. In 2019, we published an article about deepfakes and the technology behind them.

Cybercrime 103

Cybercrime Technology Ransomware Phishing 103

Security Affairs

MAY 23, 2023

Only apps published by the developers in the list below or apps in the Tier 1 list (Google’s Play Services, AGSA (Android Google Search app), Chrome, Cloud, Gmail, and Chrome Remote Desktop) are in covered by the new program: Google LLC Developed with Google Research at Google Red Hot Labs Google Samples Fitbit LLC Nest Labs Inc.

Mobile 88

Mobile Hacking Accountability Cybersecurity 88

The Last Watchdog

OCTOBER 17, 2022

To provide even further insight into the data safety and privacy practices of app developers, researchers at Incogni conducted a study of the top 500 paid and top 500 free Google Play Store apps. One possible explanation that Incogni researchers offered is that free apps have, on average, 400 times more downloads than paid apps.

Data privacy 192

Data privacy Media Data collection Data breaches 192

Security Affairs

MAY 22, 2022

The researchers earned $40,000 and 4 Master of Pwn points. This year, 17 contestants are attempted to exploit 21 targets across multiple categories and Trend Micro and ZDI awarded $1,155,000! With all of the points totaled, @starlabs_sg has been crowned Master of Pwn for #Pwn2Own Vancouver 2022! To nominate, please visit:?

Hacking 125

Hacking Cybersecurity Information Security 125

Security Affairs

JUNE 16, 2022

Researchers at antivirus firm Dr. Web discovered malware in the Google Play Store that was downloaded two million times. The most common unwanted program discovered by the researchers is Program.FakeAntiVirus.1 Researchers discovered five malicious apps in the Google Play Store that totalized two million downloads.

Adware 87

Adware Antivirus Malware Software 87

Security Affairs

MAY 26, 2022

Researchers warn of a new malvertising campaign spreading the ChromeLoader malware that hijacks the victims’ browsers. Researchers from Red Canary observed a new malvertising campaign spreading the ChromeLoader malware that hijacks the victims’ browsers. ” continues the analysis. To nominate, please visit:?.

Malware 117

Malware Spyware Threat Detection Engineering 117

Security Affairs

MAY 28, 2022

MalwareHunterTeam researchers spotted malware samples [ 1 , 2 ] that drop the following wallpaper that promotes the site. Recently MalwareHunterTeam researchers discovered a new sample of the Industrial Spy malware, which appeared like a ransom note. Here is the wallpaper that gets dropped on systems where one of their samples run.

Ransomware 125

Ransomware Malware Hacking Accountability 125

Security Affairs

JUNE 3, 2022

Volexity researchers discovered the issue as part of an investigation into an attack that took over the Memorial Day weekend. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. ” This isn’t the first time that flaws in Atlassian Confluence are exploited in attacks in the wild.

Internet 143

Internet Internet Authentication Hacking 143

Security Affairs

MAY 29, 2022

Cyberknow researchers published a timeline of the attacks conducted by the group: CyberKnown speculates the group has a semi-formal structured organization, KillNet Order of Battle (ORBAT). Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. To nominate, please visit:?. Pierluigi Paganini.

Banking 141

Banking Cyber Attacks Media Hacking 141

Security Affairs

JUNE 19, 2022

The researchers believe that this vulnerability is being actively exploited in the wild, it has been rated with a CVSS score of 9.8. One of the potentially critical exploit chain described by the researchers involves the use of the NF_Admin_Processes_ImportForm class to achieve remote code execution via deserialization. and 3.6.11.

Hacking 111

Hacking Cybersecurity Information Security 111

Security Affairs

JUNE 10, 2022

CheckPoint researchers have observed threat actors exploiting the recently disclosed CVE-2022-26134 remote code execution vulnerability in Atlassian Confluence servers to deploy cryptocurrency miners. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

Cryptocurrency 119

Cryptocurrency Malware Hacking Cybersecurity 119

Cisco Security

MARCH 11, 2021

Part 1: Top threat categories. Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. We’ll look at DNS queries to domains that fall into certain categories of malicious activity, and in some cases specific threats, between January and December of 2020.

DNS 144

DNS Phishing Ransomware Internet 144

Security Affairs

JUNE 20, 2022

Researchers from the Google Project Zero team have disclosed details of a vulnerability in Apple Safari that was actively exploited in the wild. “This blog is the story of a “zombie” Safari 0-day and how it came back from the dead to be disclosed as exploited in-the-wild in 2022. the google researcher Maddie Stone added.

Hacking 114

Hacking Software Cybersecurity Data breaches 114

Security Affairs

MAY 23, 2022

Researchers warn that the Fronton botnet was used by Russia-linked threat actors for coordinated disinformation campaigns. “Nisos research focused on the distribution of the numerous content types. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

DDOS 113

DDOS Media Hacking Engineering 113

Security Affairs

JUNE 17, 2022

Volexity researchers discovered that the zero-day vulnerability, tracked as CVE-2022-1040 , in Sophos Firewall was exploited by Chinese threat actors to compromise a company and cloud-hosted web servers it was operating. “An It was reported via the Sophos bug bounty program by an external security researcher. Pierluigi Paganini.

Firewall 126

Firewall DNS Authentication Malware 126

Security Affairs

JUNE 11, 2022

The researchers who devised the attack technique speculate that the principles behind the PACMAN attacks could be used for much more than just PAC. The technique was discovered by researchers at MIT’s Computer Science & Artificial Intelligence Laboratory (CSAIL), Joseph Ravichandran , Weon Taek Na , Jay Lang , and Mengjia Yan.

Authentication 96

Authentication Artificial Intelligence Architecture Hacking 96

Security Affairs

MAY 25, 2022

Researchers from Malwarebytes observed an unknown Advanced Persistent Threat (APT) group targeting Russian government entities with at least four separate spear-phishing campaigns since the beginning of the Russian invasion of Ukraine. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Government 107

Government Malware Phishing Hacking 107

Security Affairs

MAY 31, 2022

Researchers from Kaspersky have analyzed the activity of an aggressive threat actor tracked as SideWinder (aka RattleSnake and T-APT-04). The group stands out for the high frequency and persistence of its attacks, researchers believe that the APT group has carried out over 1,000 attacks since April 2020. To nominate, please visit:?

Encryption 96

Encryption Malware Phishing Hacking 96

Security Affairs

JUNE 12, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). I ask you to vote for me again (even if you have already done it), because this vote is for the final.

Ransomware 115

Ransomware DNS Cybercrime Hacking 115

Security Affairs

MAY 24, 2022

In early May, SentinelOne researchers observed a China-linked APT group, tracked as Moshen Dragon, targeting the telecommunication sector in Central Asia with ShadowPad and PlugX malware. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

Malware 94

Malware Telecommunications Internet Internet 94

Security Affairs

JUNE 13, 2022

Researchers from Palo Alto Networks defined the PingPull RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications. . Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. To nominate, please visit:?.

Telecommunications 89

Telecommunications Government Internet Internet 89

The Last Watchdog

MARCH 24, 2022

Research shows that the best passwords are 14 characters long. First, make a list of all of the sites you have a username and password for, and then put those sites into categories. Next, remember your categories? This is made up like the following: Eight-character + three-character password (category) + three-character (site).

Passwords 133

Passwords Password Management Banking Accountability 133

Security Affairs

JUNE 16, 2022

The ALPHA/BlackCat gang has been active since at least December 2021 when malware researchers from Recorded Future and MalwareHunterTeam discovered their operation. The popular malware researcher Michael Gillespie said that the BlackCat ransomware is “very sophisticated. To nominate, please visit:?. Pierluigi Paganini.

Ransomware 82

Ransomware Cybercrime Malware Advertising 82