article thumbnail

Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla

Malwarebytes

In the past couple of weeks, we have observed an ongoing campaign targeting system administrators with fraudulent ads for popular system utilities. Click here for more information about DNS filtering via our Nebula platform. The lures are utilities commonly used by IT admins such as PuTTY and FileZilla. dll (Nitrogen).

article thumbnail

‘Wormable’ Flaw Leads July Microsoft Patches

Krebs on Security

Top of the heap this month in terms of outright scariness is CVE-2020-1350 , which concerns a remotely exploitable bug in more or less all versions of Windows Server that attackers could use to install malicious software simply by sending a specially crafted DNS request.

DNS 273
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

Malwarebytes

Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for them once again: 13 criticial patches 103 important patches. CVE-2021-34494 Windows DNS Server Remote Code Execution Vulnerability for Windows Server versions if the server is configured to be a DNS server.

DNS 103
article thumbnail

New Go loader pushes Rhadamanthys stealer

Malwarebytes

Malicious ad targets system administrators PuTTY is a very popular SSH and Telnet client for Windows that has been used by IT admins for years. ThreatDown users that have DNS Filtering can enable ad blocking in their console to prevent attacks that originate from malicious ads. We reported this campaign to Google.

Malware 86
article thumbnail

FBI Issues Flash Advisory on Conti Ransomware Attacks Impacting Healthcare and First Responder Networks

Hot for Security

Once Conti actors deploy the ransomware, they may stay in the network and beacon out using Anchor DNS.”. The advisory further includes a list of indicators of compromise (IoCs) that system administrators can look for to help stop a Conti attack before it unfolds, as well as a list of recommended mitigations.

article thumbnail

Backdoored Webmin versions were available for download for over a year

Security Affairs

Webmin is an open-source web-based interface for system administration for Linux and Unix. It allows users using web browsers to set up user accounts, Apache, DNS, file sharing and much more. Webmin, the popular open-source web-based interface for Unix admin contained a remote code execution vulnerability for more than a year.

article thumbnail

15 Top Cybersecurity Certifications for 2022

eSecurity Planet

It’s designed for incident handlers, incident handling team leads, system administrators, security practitioners, and security architects. It’s designed for system analysts, security analysts, network engineers, network administrators, and hands-on security managers.