SecureList

JULY 28, 2022

In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). Based on our telemetry, the actor initiated the attack by sending a spear-phishing email containing a macro-embedded Word document.

Malware 145

Malware Firmware Phishing Cryptocurrency 145

SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). When opened, this document eventually downloads a backdoor. Targeted attacks.

Phishing 134

Phishing Spyware Firmware Malware 134

Responsible Cyber

APRIL 8, 2020

DDoS Attacks. Distributed Denial of Service (DDoS) attacks have overwhelmed some of the largest websites in the world, including Reddit, Twitter, and Netflix. DDoS attacks, which ambush businesses with massive amounts of web traffic, slow websites to a crawl and, more often than not, force crucial services offline.

Cybersecurity 98

Cybersecurity DDOS Small Business Phishing 98

Centraleyes

APRIL 7, 2025

Firewalls, Routers, and Switches): Threat Resilience: Devices must demonstrate resistance against known attack vectors, including DDoS attacks, buffer overflows, and man-in-the-middle attempts. This structure allows businesses to define their security needs in a document called the Security Target (ST).

Cybersecurity 52

Cybersecurity Encryption Marketing Healthcare 52

eSecurity Planet

MAY 2, 2024

Vendor reports note huge volume of attacks on local and public infrastructure, such as: CrowdStrike: Monitored hacktivist and nation-state distributed denial of service (DDoS) attacks related to the Israli-Palestinian conflict, including against a US airport. 50,000 DDoS attacks on public domain name service (DNS) resolvers.

Cybersecurity 122

Cybersecurity DDOS Penetration Testing Ransomware 122

SecureList

NOVEMBER 26, 2021

The link leads to a RAR archive that masquerades as a Word document. To exploit the vulnerability, attackers embed a special object in a Microsoft Office document containing a URL for a malicious script. If the victim opens the document, Microsoft Office downloads the script and runs it using the MSHTML engine. an invoice).

Malware 135

Malware Banking Energy and Utilities Accountability 135

Security Affairs

OCTOBER 13, 2020

Nobody told them that their coffee machine could be hacked into or that their camera could be used to launch a DDoS attack. One of them allowed hackers to run malware through boobytrapped Microsoft Office documents. Most people who use internet-connected devices are far from being tech-savvy experts. Shadow IoT Devices.

IoT 143

IoT Cybersecurity Manufacturing Internet 143

eSecurity Planet

JULY 25, 2023

Botnets : Networks of compromised computers are controlled by a central attacker and used for various malicious activities such as launching coordinated distributed denial of service ( DDoS ) attacks, providing a staging point for attacks on other victims, or distributing spam.

Software 98

Software Data breaches DDOS Ransomware 98

eSecurity Planet

JUNE 10, 2024

The fix: Zyxel issued firmware patches 5.21(AAZF.17)C0 this issue enables attackers to obtain unauthorized access and control over servers by sending maliciously crafted HTTP requests containing XML documents. 17)C0 for NAS326 and 5.21(ABAG.14)C0 Users should apply these updates right away to protect their devices.

Malware 81

Malware Authentication Software Telecommunications 81

SecureList

NOVEMBER 14, 2023

In May, Ars Technica reported that BootGuard private keys had been stolen following a ransomware attack on Micro-Star International (MSI) in March this year (firmware on PCs with Intel chips and BootGuard enabled will only run if it is digitally signed using the appropriate keys).

Hacking 141

Hacking Energy and Utilities Malware Government 141

eSecurity Planet

MARCH 22, 2023

Policies typically will be written documents that detail the requirements that will be enforced, such as password complexity. Automate Updates: Local network routers, firewalls, and other equipment can be set to automatically download new updates so that the devices and the firmware do not become vulnerable.

Firewall 110

Firewall Network Security Penetration Testing Encryption 110

SecureWorld News

OCTOBER 31, 2024

These botnets, networks of compromised devices, can perform attacks without the user realizing it, overwhelming networks, spreading spam, and even launching DDoS attacks. Warding off zombies : Regularly update device firmware, patch IoT devices, and monitor for unusual traffic patterns.

IoT 119

IoT Phishing DDOS Backups 119

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. The malware was more advanced than the samples identified earlier in the year that we documented in two of our private reports. The OOXML files have an external reference to the attacker’s server and download an RTF document exploiting the CVE-2017-11882 vulnerability.

Malware 145

Malware Firmware Government Phishing 145

SecureList

DECEMBER 14, 2022

It directly affected satellite modems firmwares , but was still to be understood as of mid-March. Taking sides: professional ransomware groups, hacktivists, and DDoS attacks. DDoS attacks, in particular, require generating heavy network traffic that attackers typically cannot sustain for very long periods of time.

DDOS 145

DDOS Ransomware Government Energy and Utilities 145

eSecurity Planet

MARCH 16, 2023

DoS and DDoS attacks DDoS attacks can make your public-facing applications and websites inaccessible, causing massive revenue loss. A distributed denial of service (DDoS) attack also overwhelms a system, but its requests come from multiple IP addresses, not just one location. Segmentation.

Network Security 110

Network Security Firewall Internet Internet 110

eSecurity Planet

FEBRUARY 16, 2021

Attackers often use botnets to send out spam or phishing campaigns to carry out distributed denial of service (DDoS) attacks. This exposed data includes everything from emails and documents typed to passwords entered for authentication purposes. Firmware rootkit. DDoS trojan. See DDoS for reference. Keyloggers.

Malware 105

Malware Adware Spyware Antivirus 105