Security Affairs

OCTOBER 29, 2021

The Hive ransomware operators have developed a new variant of their malware that can encrypt Linux and FreeBSD. ESET researchers discovered a new Hive ransomware variant that was specifically developed to encrypt Linux and FreeBSD. Researchers at the cybersecurity firm believe that the new encryptors are still under development.

Encryption 104

Encryption Ransomware Spyware Malware 104

Security Affairs

JULY 29, 2021

ransomware is now able to encrypt Windows domains by using Active Directory group policies. Researchers from MalwareHunterTeam and BleepingComputer, along with the malware expert Vitali Kremez reported spotted a new version of the LockBit 2.0 ransomware that encrypts Windows domains by using Active Directory group policies.

Encryption 143

Encryption Ransomware Malware Hacking 143

eSecurity Planet

JUNE 7, 2022

As the demand for robust security defense grows by the day, the market for cybersecurity technology has exploded, as well as the number of available solutions. Here are our picks for the top 20 cybersecurity software vendors plus 10 honorable mentions – with the caveat that at least a couple of those 30 companies are likely to merge.

Cybersecurity 124

Cybersecurity Identity Theft Encryption Antivirus 124

Security Affairs

OCTOBER 5, 2021

An unnamed ransomware gang used a custom Python script to target VMware ESXi and encrypt all the virtual machines hosted on the server. Researchers from Sophos were investigating a ransomware attack when discovered that the attackers employed a Python script to encrypt virtual machines hosted on VMware ESXi servers. Pierluigi Paganini.

Encryption 134

Encryption Ransomware Passwords Accountability 134

CyberSecurity Insiders

FEBRUARY 21, 2023

But now a new file encrypting malware variant has emerged onto the block that demands ransom, based on the insurance cover. From Cyber Insurance POV, this seems like a scam stuck between the victim and those spreading the malware….

Insurance 124

Insurance Ransomware Cyber Insurance Encryption 124

Security Affairs

DECEMBER 1, 2023

The popular cybersecurity researcher Patrick Wardle dissected the new macOS ransomware Turtle used to target Apple devices. The popular cyber security researcher Patrick Wardle published a detailed analysis of the new macOS ransomware Turtle. In some cases, the anti-virus solution flagged the binary as Windows malware (“Win32.Troj.Undef”).

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

Security Affairs

JUNE 7, 2023

aerospace defense sector with a new PowerShell malware dubbed PowerDrop. The PowerShell-based malware uses advanced techniques to evade detection, including deception, encoding, and encryption. The malware is being used to remotely execute commands on the infected systems and gather information from the target network.

Malware 82

Malware Encryption Internet Internet 82

Approachable Cyber Threats

DECEMBER 6, 2023

The 2023 update to our research on the perception of cybersecurity incident and data breach causes that’s helped organizations re-evaluate how they are at risk of a cybersecurity incident or data breach instead of what feels right. Source: Verizon DBIR [1] Patterns over time in cybersecurity data breaches. Keep reading below!

Cybersecurity 106

Cybersecurity Social Engineering Data breaches Engineering 106

Security Affairs

JUNE 30, 2022

Good news for the victims of the Hive ransomware, Korean security researchers have released a free decryptor for some versions. Good news for the victims of the Hive ransomware , the South Korean cybersecurity agency KISA has released a free decryptor for versions from v1 till v4.

Ransomware 106

Ransomware Cybersecurity Encryption VPN 106

Security Affairs

MARCH 30, 2023

Exatrack researchers warn of an unknown China-linked hacking group that has been linked to a new Linux malware, dubbed Mélofée. Cybersecurity researchers from ExaTrack recently discovered a previously undetected malware family, dubbed Mélofée, targeting Linux servers. bash_profile /home/CURRENT_USERNAME/.bash_login

Malware 73

Malware Encryption Hacking Cyber threats 73

Security Affairs

AUGUST 31, 2021

Recently emerged LockFile ransomware family LockFile leverages a novel technique called intermittent encryption to speed up encryption. Sophos researchers discovered that the group is now leveraging a new technique called “intermittent encryption” to speed up the encryption process.

Encryption 104

Encryption Ransomware Financial Services Antivirus 104

Security Affairs

AUGUST 20, 2023

Understanding cybersecurity aspects addressed by Cloud Access Security Broker (CASB) and Secure Access Service Edge ( SASE ) In an increasingly digital world, where businesses rely on cloud services and remote access, cybersecurity has become paramount. This approach enhances security by reducing the attack surface.

Cybersecurity 95

Cybersecurity Architecture Authentication Cyber threats 95

Security Affairs

MAY 4, 2023

Facebook discovered a new information-stealing malware, dubbed ‘NodeStealer,’ that is being distributed on Meta. NodeStealer is a new information-stealing malware distributed on Meta that allows stealing browser cookies to hijack accounts on multiple platforms, including Facebook, Gmail, and Outlook.

Malware 92

Malware Accountability Advertising Education 92

Security Affairs

APRIL 8, 2022

Which are the most important cybersecurity measures that businesses can take to protect themselves in the cloud era? This ubiquity has led to increased concerns about data security, as more and more sensitive information is stored online. In this article, we will discuss 15 of the most important cybersecurity measures.

Cybersecurity 97

Cybersecurity Passwords Penetration Testing Encryption 97

The Last Watchdog

JANUARY 8, 2023

And when malware, ransomware, or other cyber threats get in the way, the focus shifts from forward progress to focused co-operation. A security strategy should clear obstacles and enable every part of a business operation to run smoothly. Smart security also means doing more with less so the company as a whole can run lean.

Risk 214

Risk Cybersecurity Technology CISO 214

Security Affairs

MARCH 3, 2024

.” The sample binary analyzed by the experts is compiled for x86, the authors removed debugging information and symbol tables to hinder analysis. The recent sample of Linux variants of BIFROSE employes RC4 encryption to encrypt the collected victim data. com by using the public DNS resolver at 168.95[.]1.1.

DNS 114

DNS Malware Encryption Hacking 114

Security Affairs

JULY 16, 2021

The Joker malware is back, experts spotted multiple malicious apps on the official Google Play store that were able to evade scanners. Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps. ” states a post published by the experts. explained.

Malware 136

Malware Mobile Spyware Encryption 136

Security Affairs

JUNE 5, 2021

. “The WHOIS information for the domain reveals that the domain of the BlackCocaine ransomware was registered on May 28, 2021” The researchers reported that a file named a.BlackCocaine was recently submitted to different public sandboxes. BlackCocaine ” to the filenames of encrypted files. ” concludes the report.

Ransomware 121

Ransomware Malware Encryption Financial Services 121

Security Affairs

APRIL 21, 2024

A joint advisory published by CISA, the FBI, Europol, and the Netherlands’ National Cyber Security Centre (NCSC-NL) revealed that since early 2023, Akira ransomware operators received $42 million in ransom payments from more than 250 victims worldwide. “Akira threat actors utilize a sophisticated hybrid encryption scheme to lock data.

Ransomware 102

Ransomware Encryption Antivirus VPN 102

eSecurity Planet

DECEMBER 3, 2021

Fifteen years after the launch of the microblogging social media platform, Twitter remains a dominant public forum for instant communication with individuals and organizations worldwide on a universe of topics, including #cybersecurity. Top Cybersecurity Experts to Follow on Twitter. Binni Shah | @binitamshah. Eva Galperi n | @evacide.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

eSecurity Planet

JUNE 21, 2022

” Also read: Cybersecurity Employment in 2022: Solving the Skills Gap. How to Choose a Security Certification. Thycotic chief security scientist Joseph Carson told eSecurity Planet that choosing a certification should ultimately be about deciding which skillset or professional direction you want to focus on.

Cybersecurity 117

Cybersecurity Penetration Testing System Administration Cyber Attacks 117

CyberSecurity Insiders

JANUARY 31, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Malware 107

Malware Computers and Electronics Adware Spyware 107

Security Affairs

JUNE 29, 2022

Researchers detailed a new information-stealing malware, dubbed YTStealer, that targets YouTube content creators. Intezer cybersecurity researchers have detailed a new information-stealing malware, dubbed YTStealer, that was developed to steal authentication cookies from YouTube content creators.

Malware 96

Malware Authentication Software Accountability 96

Security Affairs

NOVEMBER 12, 2020

Cybersecurity researchers spotted a new modular PoS malware, dubbed ModPipe, that targets PoS restaurant management software from Oracle. ESET has been aware of the existence of modules since the end of 2019 when its experts first spotted the “basic” components of the malware. SecurityAffairs – hacking, PoS malware).

Malware 131

Malware Architecture Passwords Software 131

Security Affairs

OCTOBER 20, 2021

A Cookie Theft malware was employed in phishing attacks against YouTube creators, Google’s Threat Analysis Group (TAG) warns. Financially motivated threat actors are using Cookie Theft malware in phishing attacks against YouTube creators since late 2019. ” reads the analysis published by Google TAG. Pierluigi Paganini.

Accountability 123

Accountability Malware Phishing Social Engineering 123

CyberSecurity Insiders

JULY 12, 2021

As the municipality was using obsolete hardware and software in the office, hackers easily gained access into the network and disrupted the digital operations so much that the Federal Office for Information Security aka BSI Cybersecurity watchdog was on the verge to declare an emergency in the entire region that has a population of 156,890 people.

Cyber Attacks 122

Cyber Attacks Encryption Ransomware Malware 122

CyberSecurity Insiders

SEPTEMBER 24, 2021

Even with high-level security measures, no one is safe from such threats. That is why most companies hire professional information security services to mitigate the risks arising from data breaches. Thus, it would be best if you secured all networks by incorporating firewalls and advanced encryption technology.

Cybersecurity 90

Cybersecurity Data breaches Backups Firewall 90

Security Affairs

OCTOBER 13, 2020

IoT devices are exposed to cybersecurity vulnerabilities. However, if you know where the dangers lurk, there is a way to minimize the cybersecurity risks. Here are five significant cybersecurity vulnerabilities with IoT in 2020. A hacker managed to identify a weak spot in a security camera model. Improper encryption.

IoT 131

IoT Cybersecurity Manufacturing Internet 131

Security Affairs

MAY 7, 2022

Experts spotted a malware campaign that is the first one using a technique of hiding a shellcode into Windows event logs. The experts discovered that the attackers are hiding encrypted shellcode containing the next-stage malware as 8KB pieces in event logs. The code is quite unique, with no similarities to known malware.

Malware 85

Malware Encryption Hacking Cybersecurity 85

Security Affairs

APRIL 5, 2021

. “The study showed that current investment is going to security updates, vulnerability scanning, and advanced threat protection solutions.” Firmware is becoming a privileged target of threat actors because it usually holds sensitive information like credentials and encryption keys. ” continues the report.

Firmware 115

Firmware Cybersecurity Encryption Financial Services 115

Security Affairs

JANUARY 5, 2024

Researchers from cybersecurity firm KELA reported that a threat actor announced on a cybercrime forum the sale of the source code and a cracked version of the Zeppelin ransomware builder for $500. To each encrypted file, it appends a randomized nine-digit hexadecimal number as an extension. reads the joint advisory.

Ransomware 102

Ransomware Hacking Encryption Malware 102

Security Affairs

AUGUST 21, 2022

The Donot Team threat actor, aka APT-C-35 , has added new capabilities to its Jaca Windows malware framework. The investigation also discovered links between the spyware and infrastructure used in these attacks, and Innefu Labs, a cybersecurity company based in India. ” continues the report. Pierluigi Paganini.

Malware 93

Malware Spyware Phishing Government 93

Security Affairs

MAY 2, 2022

IoT devices can spy on people, steal data, or bring down vast swathes of the internet, as happened in 2016 when Mirai malware infiltrated devices such as baby monitors and refrigerators and locked them into a botnet for the Dyn cyberattack. Out-of-date software or hardware or a supply network attack can allow malware onto a server.

IoT 126

IoT Cybersecurity VPN Internet 126

Security Affairs

FEBRUARY 2, 2021

Ransomware operators are exploiting two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992, to encrypt virtual hard disks. Security experts are warning of ransomware attacks exploiting two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992 , to encrypt virtual hard disks. Pierluigi Paganini.

Encryption 91

Encryption Ransomware System Administration Hacking 91

Security Affairs

JUNE 11, 2021

Experts spotted a new mysterious malware that was used to collect a huge amount of data, including sensitive files, credentials, and cookies. Threat actors used custom malware to steal data from 3.2 NordLocker experts speculate the malware campaign leveraged tainted Adobe Photoshop versions, pirated games, and Windows cracking tools.

Malware 110

Malware Computers and Electronics Software Financial Services 110

Security Affairs

JULY 28, 2020

US and UK cybersecurity agencies issued a joint advisory about the spread of QSnatch Data-Stealing Malware that already infected over 62,000 QNAP NAS devices. The QSnatch malware implements multiple functionalities, such as: . These are encrypted with the actor’s public key and sent to their infrastructure over HTTPS.

Malware 102

Malware Firmware Advertising Manufacturing 102

Security Affairs

OCTOBER 25, 2022

Researchers reported that threat actors used 2 PoS malware variants to steal information about more than 167,000 credit cards. Cybersecurity firm Group-IB discovered two PoS malware to steal data associated with more than 167,000 credit cards from point-of-sale payment terminals. MajikPOS is written using the “.NET

Malware 78

Malware Cybercrime Banking Marketing 78