Security Affairs

MAY 20, 2021

Microsoft Security Intelligence researchers uncovered a malware campaign that is spreading a remote access trojan (RAT) tracked as STRRAT. pic.twitter.com/mGow2sJupN — Microsoft Security Intelligence (@MsftSecIntel) May 19, 2021. Researchers noticed that STRRAT version 1.5

Ransomware 145

Ransomware Malware Encryption Security Intelligence 145

Security Affairs

MAY 5, 2020

Level up Your Security Program With the Same Security Intelligence Used by the World’s Largest Governments and Many of the Fortune 1000. Recorded Future real-time security intelligence helps users instantly understand which vulnerabilities pose the most risk, so they can patch those first.

Security Intelligence 135

Security Intelligence Risk Malware Advertising 135

Security Affairs

JULY 1, 2022

Microsoft Security Intelligence experts are warning of a long-running campaign conducted by a cloud threat actor group, tracked as 8220, that is now targeting Linux servers to install crypto miners. Once gained access to a target system, an evasive loader is downloaded from jira[.]letmaker[.]top. Pierluigi Paganini.

Security Intelligence 98

Security Intelligence Hacking Malware Information Security 98

Security Affairs

MAY 4, 2020

Last week experts from Microsoft detected a COVID-19-themed spam campaign, the messages are crafted to trick users into downloading and mounting ISO or IMG file attachments. pic.twitter.com/EbI8kxICQG — Microsoft Security Intelligence (@MsftSecIntel) May 4, 2020.

Small Business 138

Small Business Malware Manufacturing Security Intelligence 138

Security Affairs

JUNE 10, 2019

pic.twitter.com/Ac6dYG9vvw — Microsoft Security Intelligence (@MsftSecIntel) June 7, 2019. “In the new campaign, the RTF file downloads and runs multiple scripts of different types (VBScript, PowerShell, PHP, others) to download the payload. — Microsoft Security Intelligence (@MsftSecIntel) June 7, 2019.

Security Intelligence 104

Security Intelligence Advertising Malware Information Security 104

Security Affairs

JULY 11, 2024

Multiple threat actors exploit a recently disclosed security PHP flaw CVE-2024-4577 to deliver multiple malware families. Therefore, it is recommended that users conduct a comprehensive asset assessment, verify their usage scenarios, and update PHP to the latest version to ensure security. ” reported Akamai.

Malware 139

Malware DDOS IoT Internet 139

Security Affairs

SEPTEMBER 24, 2020

pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020. Additional malware is downloaded and installed when running these macros. ” states the advisory published by The Netherlands National Cyber Security Center.”One ” states the Italian CSIRT’s alert.

Malware 144

Malware Passwords Advertising Cybercrime 144

Security Affairs

OCTOBER 28, 2021

Get details: [link] — Microsoft Security Intelligence (@MsftSecIntel) October 28, 2021. System Integrity Protection (also referred to as rootless) is a macOS security feature introduced in OS X El Capitan (2015) (OS X 10.11).

Security Intelligence 139

Security Intelligence Hacking Technology Software 139

Security Affairs

JULY 9, 2019

See how #MicrosoftDefenderATP next-gen protection defeated the #fileless attack: [link] — Microsoft Security Intelligence (@MsftSecIntel) July 8, 2019. The malware is able to log the users’ keystrokes, collect information through hooking, access clipboard content, and monitor the keystate.

Antivirus 106

Antivirus Malware Advertising Security Intelligence 106

Security Boulevard

MAY 25, 2021

I've decided to make my Cybercrime Forum Data Set for 2019 and 2021 exclusively available online for free in order for me to speed the dissemination process and to possibly empower security researchers and vendors with the necessary information to help them stay on the top of their game in terms of current and emerging cyber threats including U.S

Cybercrime 59

Cybercrime Cyber threats Hacking Software 59

Security Affairs

DECEMBER 1, 2020

Learn how the group tried to stay under the radar using threats perceived to be less alarming: [link] — Microsoft Security Intelligence (@MsftSecIntel) November 30, 2020. exe , which in turn downloaded a copy of the 7-zip tool named 7za.exe and a ZIP file. ” continues the report.

Cryptocurrency 137

Cryptocurrency Antivirus Manufacturing Government 137

Security Affairs

SEPTEMBER 18, 2021

Our researchers are closely monitoring the campaign and will share additional info and investigation guidance through Microsoft 365 security center and Microsoft Threat Experts. — Microsoft Security Intelligence (@MsftSecIntel) May 11, 2021.

Malware 125

Malware Phishing DNS Cybercrime 125

Security Affairs

JULY 28, 2022

Once compromised the system, threat actors drop the Corelump downloader and inject it directly in memory to evade detection. It supports multiple features, including keylogging, capturing screenshots, exfiltrating files, running a remote shell, and running arbitrary plugins downloaded from KNOTWEED’s C2 server.

Surveillance 100

Surveillance Malware Authentication DNS 100

Security Affairs

SEPTEMBER 20, 2022

pic.twitter.com/v6sexKgDSg — Microsoft Security Intelligence (@MsftSecIntel) September 16, 2022. This attack chain starts with an ISO file that’s downloaded when a user clicks malicious ads or YouTube comments. Microsoft attributes the attack to a threat actor tracked as DEV-0796.

Malware 98

Malware Adware Ransomware Security Intelligence 98

Security Affairs

AUGUST 28, 2023

The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices. To investigate the attack and find the victims, the researchers looked at a text file (telnet.txt) that is downloaded by the bot.

IoT 98

IoT DDOS Architecture Internet 98

Security Affairs

JUNE 16, 2019

The popular expert Larry Cashdollar, from Akamai’s Security Intelligence Response Team (SIRT), spotted a new version of the Echobot botnet that counts 26 different exploits. The first binary I found was compiled for ARM and still had the debugging information intact, which made it a little easier to analyze.

IoT 109

IoT Malware Advertising Wireless 109

Security Affairs

APRIL 29, 2021

In November 2019, ESET researchers discovered a new downloader, dubbed DePriMon, that used new “Port Monitor” methods in attacks in the wild. The new DePriMon downloader was used by the Lambert APT group, aka Longhorn, to deploy malware.

Malware 126

Malware Hacking Government Telecommunications 126

Security Affairs

OCTOBER 12, 2020

link] — Microsoft Security Intelligence (@MsftSecIntel) October 12, 2020. The malware first started out in 2016 as a banking trojan before shifting into a multi-purpose malware downloader that infected systems and provided access to other criminal groups using a business model known as MaaS (Malware-as-a-Service).

Banking 98

Banking Malware Advertising Financial Services 98

Lenny Zeltser

MAY 3, 2019

Install security updates for your apps and the OS as soon as they come out. Install software from the app store when possible, instead of downloading it from websites or getting it from other sources. Enable as many OS and app security features as practical. Uninstall the apps you don’t regularly use. government.

Cybersecurity 111

Cybersecurity Social Engineering Authentication Software 111

Security Affairs

NOVEMBER 8, 2019

Read our latest blog w/ assist from @GossiTheDog & @MalwareTechBlog [link] — Microsoft Security Intelligence (@MsftSecIntel) November 7, 2019. Below the Tweet published by Microsoft: While we currently see only coin miners being dropped, we agree w/ the research community that CVE-2019-0708 (BlueKeep) exploitation can be big.

Penetration Testing 76

Penetration Testing Malware Spyware Advertising 76

Security Affairs

OCTOBER 31, 2020

In a recent campaign observed on October 14th, the attackers are using multiple lures, including invoices, purchase orders, shipping information, COVID-19 information, and information about President Trump’s health. doc) attachments or include links to download the bait document. ” reported Bleeping Computer.

Banking 114

Banking Malware Security Intelligence Advertising 114