Security Affairs

MAY 21, 2023

X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S. X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S.

Data breaches 88

Data breaches Cybercrime Ransomware Passwords 88

Security Affairs

DECEMBER 22, 2022

Zerobot operators are offering the botnet as a malware-as-a-service model, one domain (zerostresser[.]com) com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December. Maintain device health with updates: Make sure devices are up to date with the latest firmware and patches.

IoT 116

IoT DDOS Malware Firmware 116

Security Affairs

JULY 31, 2022

increased rewards for info on North Korea-linked threat actors to $10 million Threat actors leverages DLL-SideLoading to spread Qakbot malware Zero Day attacks target online stores using PrestaShop? and Blackmatter ransomware U.S. and Blackmatter ransomware U.S. and Blackmatter ransomware U.S.

Firmware 72

Firmware Surveillance Malware DDOS 72

Security Affairs

APRIL 25, 2023

In March, TP-Link released a firmware update to address multiple issues, including this vulnerability. The Mirai botnet that is behind the attacks observed by ZDI is focused on launching DDoS attacks, it has the capability to target Valve Source Engine (VSE). ” continues the report. .” ” continues the report.

DDOS 91

DDOS Engineering Firmware Architecture 91

Security Affairs

MARCH 19, 2022

“As a result, AvosLocker indicators of compromise (IOCs) vary between indicators specific to AvosLocker malware and indicators specific to the individual affiliate responsible for the intrusion.” In some cases, the gang also threatened and conducted distributed denial-of-service (DDoS) attacks during negotiations.

Ransomware 99

Ransomware DDOS Passwords Backups 99

Security Affairs

AUGUST 20, 2021

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IoT 103

IoT DNS Manufacturing Firmware 103

Security Affairs

MARCH 13, 2022

CVE-2022-0492 flaw in Linux Kernel cgroups feature allows container escape Charities and NGOs providing support in Ukraine hit by malware. If you want to also receive for free the newsletter with the international press subscribe here. Is it fake news? Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Data breaches 85

Data breaches Firmware Hacking Ransomware 85

Responsible Cyber

APRIL 8, 2020

As cybercrime has become well-funded and increasingly sophisticated, phishing remains one of the most effective methods used by criminals to introduce malware into businesses. DDoS Attacks. Should a small business rely on a website or other online service to function, any outage caused by DDoS attacks will be catastrophic.

Cybersecurity 98

Cybersecurity DDOS Small Business Phishing 98

Security Affairs

NOVEMBER 20, 2021

If you want to also receive for free the newsletter with the international press subscribe here.

Banking 67

Banking Small Business Data breaches Firmware 67

SecureList

DECEMBER 14, 2022

One month later, a new strain named RansomBoggs again hit Ukrainian targets – both malware families were attributed to Sandworm. It directly affected satellite modems firmwares , but was still to be understood as of mid-March. Taking sides: professional ransomware groups, hacktivists, and DDoS attacks. Key insights.

DDOS 131

DDOS Ransomware Government Energy and Utilities 131

SecureList

FEBRUARY 16, 2021

After the attacks came to light, the manufacturer promptly released a firmware update for configuring verification of incoming requests. In December, Canada’s Laurentian University reported a DDoS attack. Educational institutions are recommended to use anti-DDoS solutions and strong firewall settings, and partner up with ISPs.

DDOS 129

DDOS Cryptocurrency Marketing Internet 129

SecureList

MAY 10, 2021

News broke in January of the FreakOut malware, which attacks Linux devices. Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. This loophole was previously exploited by ADB.Miner, Ares, IPStorm, Fbot, Trinity, and other malware. Q1 2021 saw the appearance of two new botnets.

DDOS 96

DDOS Cryptocurrency Media Marketing 96

SiteLock

AUGUST 27, 2021

The consequences of which are not only born by companies who are the primary targets of cybercrime. In the three years since those first IoT botnet attacks, threats to IoT security have increased to include crypto-jacking , denial of service (DDoS) attacks, and various other types of malware and online malfeasance.

IoT 98

IoT Spyware VPN Passwords 98

SecureList

NOVEMBER 26, 2021

The PyInstaller module for Windows contains a script named “Guard” Interestingly, this malware was developed for both Windows and macOS operating systems. The malware tries to spread to other hosts on the network by infecting USB drives. After this, they were tricked into downloading previously unknown malware.

Malware 86

Malware Banking Energy and Utilities Accountability 86

SecureList

APRIL 27, 2022

Disclaimer: when referring to APT groups as Russian-speaking, Chinese-speaking or other-“speaking” languages, we refer to various artefacts used by the groups (such as malware debugging strings, comments found in scripts, etc.) Subsequently, DDoS attacks hit several government websites.

Malware 130

Malware Firmware Government Phishing 130

SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). Subsequently, DDoS attacks hit some government websites. Targeted attacks. Roaming Mantis reaches Europe.

Phishing 103

Phishing Spyware Firmware Malware 103

eSecurity Planet

OCTOBER 21, 2022

Anyone who has used a computer for any significant length of time has probably at least heard of malware. Malware has been present in the digital space since the 1980s, with early prank malware like the Morris Worm or the (c)Brain. However, malware is not quite as amusing in a modern context. How Does Malware Work?

Malware 69

Malware Adware Spyware Antivirus 69

Security Affairs

SEPTEMBER 18, 2022

billion Cisco confirms that data leaked by the Yanluowang ransomware gang were stolen from its systems Some firmware bugs in HP business devices are yet to be fixed Albania was hit by a new cyberattack and blames Iran Iran-linked APT42 is behind over 30 espionage attacks. Follow me on Twitter: @securityaffairs and Facebook.

Firmware 88

Firmware DDOS Healthcare Hacking 88

SecureList

JULY 28, 2022

On January 24, a hash for sophisticated Solaris SPARC malware was posted on Twitter. In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). The most remarkable findings.

Malware 130

Malware Firmware Phishing Cryptocurrency 130

SecureList

NOVEMBER 14, 2023

The malware posed as ransomware, demanding money from the victims for “decrypting” their data. UNC4841 deployed new malware designed to maintain presence on a small subset of high-priority targets compromised either before the patch was released or shortly afterwards. Verdict: prediction not fulfilled ❌ 7.

Hacking 102

Hacking Energy and Utilities Media Malware 102

Security Affairs

OCTOBER 15, 2023

FBI and CISA published a new advisory on AvosLocker ransomware More than 17,000 WordPress websites infected with the Balada Injector in September Ransomlooker, a new tool to track and analyze ransomware groups’ activities Apple releases iOS 16 update to fix CVE-2023-42824 on older devices Phishing, the campaigns that are targeting Italy A new (..)

DDOS 97

DDOS Data breaches Cybercrime Ransomware 97