eSecurity Planet

FEBRUARY 16, 2021

Adware, also known as malvertising , is a type of malware that downloads or displays advertisements to the user interface. Users sometimes unknowingly infect themselves with adware installed by default when they download and install other applications. Phishing and Social Engineering.

Malware 104

Malware Adware Spyware Antivirus 104

eSecurity Planet

MAY 28, 2021

Using legitimate file-sharing tools like RClone and MegaCmdServer to mask activity, malicious actors can go undetected while downloading your network’s data. From BIOS and firmware to UEFI code, VBOS is an attack vector that requires more attention. Also Read: How to Prevent DNS Attacks. Current Target: VBOS.

Software 117

Software Firmware DNS VPN 117

SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). The attackers study their victims carefully and use the information they find to frame social engineering attacks.

Phishing 108

Phishing Spyware Firmware Malware 108

SecureList

APRIL 27, 2022

We have previously seen DustSquad use third-party post-exploitation tools, such as the password dumping utility fgdump; but we have now observed new custom C modules, a first for DustSquad, and Delphi downloaders acting as post-exploitation facilitators, able to gather documents of interest for the actor. Other interesting discoveries.

Malware 134

Malware Firmware Government Phishing 134

eSecurity Planet

MARCH 22, 2023

Similarly, spoofed domain name system (DNS) and IP addresses can redirect users from legitimate connections to dangerous and malicious websites. Additional protection may be deployed using browser security, DNS security, or secure browsers to protect endpoints from malicious websites.

Firewall 108

Firewall Network Security Penetration Testing Encryption 108

SecureList

OCTOBER 26, 2021

In June, more than six months after DarkHalo had gone dark, we observed the DNS hijacking of multiple government zones of a CIS member state that allowed the attacker to redirect traffic from government mail servers to computers under their control – probably achieved by obtaining credentials to the control panel of the victims’ registrar.

Malware 142

Malware Government Surveillance Spyware 142