eSecurity Planet

SEPTEMBER 2, 2024

The fix: Upgrade to SonicWall’s firmware updates for Gen 5 (to version 5.9.2.14-13o), Threat actors exploited this weakness to incorporate devices into botnets, affecting devices running firmware versions up to FullImg-1023-1007-1011-1009. Victims of social engineering risked compromised systems and probable data theft.

Risk 58

Risk Firewall Firmware Engineering 58

SecureList

MARCH 1, 2021

In their campaigns to infect mobile devices, cybercriminals always resort to social engineering tools, the most common of these passing a malicious application off as another, popular and desirable one. The manufacturer of the mobile device preloads an adware application or a component with the firmware. Trends of the year.

Mobile 145

Mobile Malware Adware Banking 145

SecureList

NOVEMBER 14, 2023

In May, Ars Technica reported that BootGuard private keys had been stolen following a ransomware attack on Micro-Star International (MSI) in March this year (firmware on PCs with Intel chips and BootGuard enabled will only run if it is digitally signed using the appropriate keys).

Hacking 141

Hacking Energy and Utilities Malware Government 141

eSecurity Planet

JULY 25, 2023

Social engineering attacks: These involve manipulating individuals to gain unauthorized access to sensitive information or systems. Cryptojacking : Unauthorized use of a computer’s processing power to mine cryptocurrencies. Examples include baiting, pretexting, and impersonation.

Data breaches 98

Data breaches Software DDOS Ransomware 98

eSecurity Planet

DECEMBER 7, 2023

Phishing and social engineering are common ways threat actors can obtain a symmetric key, but cryptanalysis and brute force attempts can also break symmetric key ciphers. This feature can be included in firmware, in operating systems, or as a feature in open-source, shareware, or commercial applications.

Encryption 110

Encryption Authentication Passwords Password Management 110

Webroot

OCTOBER 31, 2024

The rise of AI-driven phishing and social engineering, increased targeting of critical infrastructure, and the emergence of more sophisticated fileless malware are all trends that have shaped the cybersecurity battlefield this year.

Malware 117

Malware Ransomware Healthcare Passwords 117

SecureList

APRIL 27, 2022

This application contains a legitimate program called DeFi Wallet, that saves and manages a cryptocurrency wallet, but also implants a malicious file when executed. In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. Other interesting discoveries. Final thoughts.

Malware 145

Malware Firmware Government Phishing 145

eSecurity Planet

FEBRUARY 16, 2021

CISA reported that LokiBot “employs Trojan malware to steal sensitive information such as usernames, passwords, cryptocurrency wallets, and other credentials.” Phishing and Social Engineering. Firmware rootkit. Because trojans use social engineering for targeted attacks, educating users is imperative.

Malware 105

Malware Adware Spyware Antivirus 105

eSecurity Planet

OCTOBER 21, 2022

The method of infection can vary from attack to attack and can include social engineering strategies, such as phishing and email spoofing , or a fraudulent website masquerading as legitimate, among others. This note will provide instructions on how to pay the ransom, usually through difficult-to-trace means like cryptocurrency.

Malware 75

Malware Adware Spyware Antivirus 75