The Last Watchdog

AUGUST 27, 2018

This is borne out by Akamai Technologies’ Summer 2018 Internet Security/Web Attack Report. They realize that each IoT device, whether it be a home router, surveillance camera, office machine, medical device, or what have you, is a fully functioning computing nodule – one that’s likely off anyone’s radar, just waiting to be exploited.

DDOS 255

DDOS IoT Digital transformation Internet 255

Security Affairs

JULY 7, 2019

City Council of Somerville bans facial recognition technology. China installs a surveillance app on tourists phones while crossing in the Xinjiang. Godlua backdoor, the first malware that abuses the DNS over HTTPS (DoH). Is Your Browser Secure? Heres How to Secure Your Web Browser Against Attacks! Bangladesh Cyber Heist 2.0:

Scams 47

Scams Spyware DNS Advertising 47

Security Affairs

NOVEMBER 29, 2019

The past months have shown that the most dangerous hacks involved DNS hijacking, which helped attackers manipulate DNS records for MITM attacks. If they manage to compromise a telecommunications company, they can then also compromise its customers for surveillance or sabotage purposes. SecurityAffairs – cybercrime, hacking).

Banking 83

Banking Telecommunications Marketing Internet 83

SecureList

APRIL 27, 2021

Although Lyceum still prefers taking advantage of DNS tunneling, it appears to have replaced the previously documented.NET payload with a new C++ backdoor and a PowerShell script that serve the same purpose. Our telemetry revealed that the threat group’s latest endeavors are focused on going after entities within one country – Tunisia.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

APRIL 27, 2022

In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. In July 2021, we reported the previously unknown Tomiris Golang backdoor , deployed against government organizations within a CIS country through DNS hijacking. Other interesting discoveries.

Malware 135

Malware Firmware Government Phishing 135

SecureList

NOVEMBER 26, 2021

We have seen targeted attacks exploiting the vulnerability to target companies in research and development, the energy sector and other major industries, banking, the medical technology sector, as well as telecoms and IT. The following timeline sums up the different steps of the campaign. FinSpy: analysis of current capabilities.

Malware 92

Malware Banking Energy and Utilities Accountability 92