Security Affairs

MAY 20, 2024

Researchers discovered a sophisticated cybercriminal campaign by Russian-speaking threat actors that used GitHub to distribute malware. The campaign shows how attackers exploit trusted internet services to carry out cyberattacks that steal personal information. This tactic allows them to avoid detection.

Malware 101

Malware Banking Software Advertising 101

Hot for Security

JANUARY 29, 2021

The company believes the incident occurred on January 4, 2021, after threat actors managed to trick employees into accessing and downloading malicious software on some retail-store computers. “A few employees in retail stores were successfully scammed by unauthorized individuals and downloaded software onto a store computer.”

Data breaches 133

Data breaches Wireless Retail Malware 133

Security Affairs

DECEMBER 8, 2022

Google warns that the North Korea-linked APT37 group is exploiting Internet Explorer zero-day flaw to spread malware. North Korea-linked APT37 group (aka ScarCruft , Reaper, and Group123) actively exploited an Internet Explorer zero-day vulnerability, tracked as CVE-2022-41128 , in attacks aimed at South Korean users.

Internet 99

Internet Internet Engineering Malware 99

Schneier on Security

APRIL 6, 2020

Microsoft is reporting that an Emotat malware infection shut down a network by causing computers to overheat and then crash. The malware further spread through the network without raising any red flags by stealing admin account credentials authenticating itself on new systems, later used as stepping stones to compromise other devices.

Malware 281

Malware Phishing Authentication Internet 281

Security Affairs

AUGUST 24, 2023

The North Korea-linked Lazarus group exploits a critical flaw in Zoho ManageEngine ServiceDesk Plus to deliver the QuiteRAT malware. The APT group exploited the flaw to deploy a newer piece of malware tracked as QuiteRAT. The researchers also discovered the Lazarus Group APT using a new malware called “CollectionRAT.”

Internet 87

Internet Internet Malware Healthcare 87

Hot for Security

MAY 14, 2021

A leading manufacturer of gaming hardware has warned internet users to be wary of downloading fake versions of free software it distributes to overclock GPUs.

Manufacturing 143

Manufacturing Software Internet Internet 143

Identity IQ

FEBRUARY 7, 2023

7 Tips to Follow for Safer Internet Day IdentityIQ The 20 th annual Safer Internet Day is taking place on Feb. Safer Internet Day is a campaign that aims to educate the public on internet safety and encourage everyone to take part in creating a safer internet. Why is Safer Internet Day Important?

Internet 98

Internet Internet Identity Theft Scams 98

Krebs on Security

JUNE 21, 2023

If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or “crypt” your malware so that it appears benign to antivirus and security products. This story explores the history and identity behind Cryptor[.]biz WHO RUNS CRYPTOR[.]BIZ?

Malware 227

Malware Antivirus Cybercrime Hacking 227

The Hacker News

DECEMBER 7, 2022

An Internet Explorer zero-day vulnerability was actively exploited by a North Korean threat actor to target South Korean users by capitalizing on the recent Itaewon Halloween crowd crush to trick users into downloading malware.

Internet 91

Internet Internet Malware 91

Security Affairs

DECEMBER 15, 2023

Experts uncovered a new Go-based multi-platform malware, tracked as NKAbuse, which is the first malware abusing NKN technology. Researchers from Kaspersky’s Global Emergency Response Team ( GERT ) and GReAT uncovered a new multiplatform malware dubbed NKAbuse. The protocol enables secure and low-cost data transfer.

Malware 111

Malware Architecture Technology DDOS 111

Krebs on Security

JANUARY 25, 2024

Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. 19, 2024) of more than 200 domains at the Internet address 93.190.143[.]252 How do we know freecad-us[.]org org is malicious? com , filezillasoft[.]com

Software 266

Software Advertising Malware Accountability 266

Security Affairs

DECEMBER 29, 2023

Ukraine’s CERT (CERT-UA) warned of a new phishing campaign by the APT28 group to deploy previously undocumented malware strains. The group employed previously undetected malware such as OCEANMAP, MASEPIE, and STEELHOOK to steal sensitive information from target networks. file classified as MASEPIE.

Phishing 119

Phishing Malware Computers and Electronics Internet 119

Security Affairs

DECEMBER 1, 2022

Redigo is a new Go-based malware employed in attacks against Redis servers affected by the CVE-2022-0543 vulnerability. Researchers from security firm AquaSec discovered a new Go-based malware that is used in a campaign targeting Redis servers. SLAVEOF command – this allows adversaries to create a replica of the attacking server.

Malware 143

Malware DDOS Architecture Cryptocurrency 143

Malwarebytes

MARCH 1, 2023

Despite a very slim browser market share, Internet Explorer (IE) is still being exploited by exploit kits like the RIG exploit kit (EK). According to Malwarebytes’ Senior Director of Threat Intelligence Jérôme Segura: “RIG EK is probably one of the last exploit kits targeting Internet Explorer still around.

Internet 93

Internet Internet Social Engineering Malware 93

The Hacker News

FEBRUARY 23, 2023

Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems. This malware makes use of the Invisible Internet Project (i2p) [.] to download

Cryptocurrency 98

Cryptocurrency Malware Internet Internet 98

Krebs on Security

SEPTEMBER 27, 2023

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. Probably the most active Internet address accessing Snatch’s darknet site is 193.108.114[.]41 top , sntech2ch[.]top

Ransomware 259

Ransomware Internet Internet Phishing 259

eSecurity Planet

OCTOBER 26, 2023

Antivirus programs and firewalls are pretty good at catching malware before it can infect devices, but occasionally malware can slip through defenses, endangering personal and financial information. We’ll go over malware removal tools and steps, and offer some tips to keep your devices from getting reinfected.

Malware 108

Malware Antivirus Adware Software 108

Security Affairs

MARCH 11, 2024

The financially motivated hacking group Magnet Goblin uses various 1-day flaws to deploy custom malware on Windows and Linux systems. The group focuses on internet-facing services, in at least one instance the group exploited the vulnerability CVE-2024-21887 in Ivanti Connect Secure VPN. ” reads the report published CheckPoint.

Malware 102

Malware VPN Encryption Hacking 102

Krebs on Security

JUNE 1, 2023

This post is a deep dive on “ Megatraffer ,” a veteran Russian hacker who has practically cornered the underground market for malware focused code-signing certificates since 2015. More recently, it appears Megatraffer has been working with ransomware groups to help improve the stealth of their malware. WHO IS MEGATRAFFER?

Malware 249

Malware Cybercrime Software Antivirus 249

Security Affairs

JULY 25, 2022

Operators behind the Amadey Bot malware use the SmokeLoader to distribute a new variant via software cracks and keygen sites. Amadey Bot is a data-stealing malware that was first spotted in 2018, it also allows operators to install additional payloads. Then the malware contacts the C2 and sends system information (i.e.

Software 118

Software Malware Cybercrime VPN 118

CyberSecurity Insiders

OCTOBER 19, 2021

Most of the Australian mobile users who use profusely use internet have reportedly fallen prey to a malware dubbed as Flubot having potential to steal financial info and password logins from the victims’ phones. The post Beware of this Flubot malware that swept entire Australia appeared first on Cybersecurity Insiders.

Malware 139

Malware Internet Internet Scams 139

eSecurity Planet

JANUARY 26, 2023

Security researchers are warning that Google Ads are being actively leveraged to distribute malware to unsuspecting victims searching for software downloads. Researcher Will Dormann responded , “Interesting that the malware ad is given priority over the real LibreOffice ad. The TA asked nicely for preferential treatment?

Malware 122

Malware Ransomware Software Cryptocurrency 122

Heimadal Security

DECEMBER 19, 2022

Glupteba is a backdoor trojan that can be downloaded via computer networks to infiltrate your device on the Internet and steal confidential information. Glupteba has been involved with malware, including stealing sensitive data […]. Glupteba has been involved with malware, including stealing sensitive data […].

Malware 95

Malware Internet Internet Cybersecurity 95

The Hacker News

JANUARY 18, 2022

An IRC (Internet Relay Chat) bot strain programmed in GoLang is being used to launch distributed denial-of-service (DDoS) attacks targeting users in Korea. The malware is being distributed under the guise of adult games," researchers from AhnLab's Security Emergency-response Center (ASEC) said in a new report published on Wednesday.

DDOS 103

DDOS Malware Internet Internet 103

DoublePulsar

AUGUST 19, 2023

File hash: ea6af173a3577fa192821f746d701365b759689eb3562ad546230f6da99a18ae Another one posted yesterday as a full copy of the game (it’s also a Trojan, with little antivirus detection): In English This means the download was not, in fact, Starfield — it grants remote access to your PC, and allows stealing of information from your system.

Malware 76

Malware Antivirus Internet Internet 76

CSO Magazine

JANUARY 25, 2023

For years attackers have used Office documents with malicious macros as one of the primary methods of infecting computers with malware. This trend has led to the creation of paid tools and services dedicated to building malicious LNK files.

Malware 111

Malware Internet Internet 111

Bleeping Computer

AUGUST 23, 2022

Cybersecurity researchers have discovered multiple ongoing malware distribution campaigns that target internet users who seek to download copies of pirated software. [.].

Malware 75

Malware Internet Internet Software 75

Security Affairs

JUNE 29, 2023

North Korea-linked cyberespionage group Andariel used a previously undocumented malware called EarlyRat. Kaspersky researchers reported that the North Korea-linked APT group Andariel used a previously undocumented malware dubbed EarlyRat in attacks exploiting the Log4j Log4Shell vulnerability last year.

Malware 83

Malware Cybercrime Phishing Internet 83

CyberSecurity Insiders

MARCH 1, 2023

From early this year, two malware variants targeted almost 6-7 law firms spread through two separate incidents, alerting whole of the world about the lurking cyber threat. Both these malware families launched in January and February of this year, respectively.

Cyber threats 102

Cyber threats Malware Ransomware Cybersecurity 102

Security Boulevard

JANUARY 11, 2024

The rapid proliferation of the Internet of Things (IoT) represents vast opportunities for the public sector. Today’s Internet of Things might as well be called the Internet of Threats. This became abundantly clear last year as malware attacks on IoT devices emerged as a fast-rising threat.

IoT 75

IoT Malware Education Government 75

Malwarebytes

FEBRUARY 6, 2023

Today is the 20th Safer Internet Day. 2004 was a key year for several safety activities, encompassing both Safer Internet Day and the Safer Internet Forum. Was the general state of the Internet at the time so bad that all of these events sprang up almost out of necessity? You may be asking, why 2004?

Internet 69

Internet Internet Adware Spyware 69

Bleeping Computer

FEBRUARY 7, 2022

Microsoft announced today that it will make it difficult to enable VBA macros downloaded from the Internet in several Microsoft Office apps starting in early April, effectively killing a popular distribution method for malware. [.].

Malware 85

Malware Internet Internet 85

Security Affairs

MARCH 2, 2023

Cyber criminals are targeting law firms with GootLoader and FakeUpdates (aka SocGholish) malware families. The firms were targeted as part of two distinct campaigns aimed at distributing GootLoader and FakeUpdates (aka SocGholish) malware. One campaign attempted to infect law firm employees with the GootLoader malware.

Malware 84

Malware Ransomware Engineering Hacking 84

Malwarebytes

OCTOBER 28, 2021

Unlike traditional malware, which relies on a file being written to a disk, fileless malware is intended to be memory resident only, ideally leaving no trace after its execution. For an attacker, fileless malware has two major advantages: There is no file for traditional anti-virus software to detect. Is fileless malware new?

Malware 115

Malware Artificial Intelligence Software Ransomware 115

Schneier on Security

APRIL 30, 2021

Apple just patched a MacOS vulnerability that bypassed malware checks. The operating system wouldn’t even give its most basic prompt: “This is an application downloaded from the Internet. Apple mistakenly assumed that applications will always have certain specific attributes. Are you sure you want to open it?”

Internet 294

Internet Internet Malware 294

The Hacker News

FEBRUARY 7, 2022

Microsoft on Monday said it's taking steps to disable Visual Basic for Applications (VBA) macros by default across its products, including Word, Excel, PowerPoint, Access, and Visio, for documents downloaded from the web in an attempt to eliminate an entire class of attack vector.

Internet 98

Internet Internet Malware 98

Malwarebytes

FEBRUARY 6, 2024

Released today, the Malwarebytes State of Malware 2024 report takes a deep dive into the latest developments in the world of cybercrime. It also acts as a reminder to be careful about what you share, even if you are under the impression that you are using the internet securely. This is changing.

Malware 74

Malware Passwords Identity Theft Banking 74