Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 93

Data breaches Malware Mobile Spyware 93

SecureList

SEPTEMBER 26, 2022

These websites are often related to crack, keygen and activators for downloading software illegally, and while they may pretend to be legitimate software, they actually contain a malware dropper. The whole infection chain of NullMixer is as follows: The user visits a website to download cracked software, keygens or activators.

Malware 108

Malware Cryptocurrency Passwords Software 108

SecureWorld News

DECEMBER 23, 2020

Pegasus spyware is a phone surveillance solution that enables customers to remotely exploit and monitor devices. From these communications, there was a total of 270.16MB of upload, and 15.15MB of download, and each IP returned a valid TLS certificate for bananakick.net. Spyware attacks becoming harder to detect.

Spyware 52

Spyware Surveillance Hacking Media 52

Security Affairs

NOVEMBER 27, 2018

A new malspam campaign hit Italy in this days, threat actors are spreading a new variant of a powerful downloader named sLoad. This ps code abuses the BitsTransfer windows functionality to download two important files: config.ini and web.ini that contains the final sLoad stage. lnk file); Legitimate image flagged as hidden.

Spyware 89

Spyware DNS Advertising Malware 89

SecureList

AUGUST 30, 2023

The attackers were able to embed malicious code into the libffmpeg media processing library to download a payload from their servers. If the target opened the document and enabled the macros, a malicious script would extract the embedded downloader and load it with specific parameters.

Malware 73

Malware Spyware Cryptocurrency Government 73

SecureList

MAY 27, 2022

When opened, this document eventually downloads a backdoor. The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. Territories affected by Roaming Mantis activity ( download ). Only download apps from the App Store or Google Play.

Phishing 103

Phishing Spyware Firmware Malware 103

SecureList

DECEMBER 1, 2023

To persuade people to download these mods instead of the official app, the developer claimed that they worked faster than other clients thanks to a distributed network of data centers around the world. However, they included an additional module that constantly monitored the messenger and sent data to the spyware creator’s C2 server.

Malware 90

Malware Ransomware Encryption Energy and Utilities 90

Security Affairs

JULY 7, 2019

ViceLeaker Android spyware targets users in the Middle East. Updates for Samsung, the scam app with 10M+ downloads. Godlua backdoor, the first malware that abuses the DNS over HTTPS (DoH). Israeli blamed Russia for jamming at Israeli Ben Gurion airport. New variant of Dridex banking Trojan implements polymorphism.

Scams 47

Scams Spyware DNS Advertising 47

eSecurity Planet

SEPTEMBER 29, 2021

Integrated one-on-one Spyware HelpDesk support. Checks downloads, installs, and executables for viruses and threats. The Sophos Virus Removal Tool detects all types of malicious software, including viruses, spyware, rootkits, ransomware and Conficker and returns systems to a working state. DNS filtering. Scan scheduling.

Ransomware 109

Ransomware VPN Backups Malware 109

Security Affairs

AUGUST 26, 2018

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 41

Spyware Banking DNS Retail 41

SecureList

OCTOBER 26, 2021

In June, more than six months after DarkHalo had gone dark, we observed the DNS hijacking of multiple government zones of a CIS member state that allowed the attacker to redirect traffic from government mail servers to computers under their control – probably achieved by obtaining credentials to the control panel of the victims’ registrar.

Malware 140

Malware Government Surveillance Spyware 140

eSecurity Planet

DECEMBER 15, 2021

SWGs achieve this by blocking web-based attacks that forward malware, phishing , drive-by downloads, ransomware, supply chain attacks , and command-and-control actions. It unites spyware, malware, and virus protection with a policy and reporting engine. SIG Essentials can be integrated with an SD-WAN implementation.

Digital transformation 93

Digital transformation Engineering Internet Internet 93

SecureList

APRIL 27, 2021

During routine monitoring of detections for FinFisher spyware tools, we discovered traces that point to recent FinFly Web deployments. Although Lyceum still prefers taking advantage of DNS tunneling, it appears to have replaced the previously documented.NET payload with a new C++ backdoor and a PowerShell script that serve the same purpose.

Malware 138

Malware Spyware Government Social Engineering 138

eSecurity Planet

MARCH 14, 2023

Other hackers might use a spoofed domain name system (DNS) or IP addresses to redirect users from legitimate connections (to websites, servers, etc.) Other users might attempt to exceed their intended access, such as when the marketing intern attempts to access an R&D file server and download IP in development. or network traffic.

Network Security 95

Network Security Firewall Penetration Testing Encryption 95

eSecurity Planet

MARCH 22, 2023

Similarly, spoofed domain name system (DNS) and IP addresses can redirect users from legitimate connections to dangerous and malicious websites. Endpoint Security: Antivirus , anti-spyware , endpoint detection and response (EDR), and other controls should be deployed to secure the endpoint against compromise.

Firewall 107

Firewall Network Security Penetration Testing Encryption 107