SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). On February 23, ESET published a tweet announcing new wiper malware targeting Ukraine. Targeted attacks.

Phishing 110

Phishing Spyware Firmware Malware 110

eSecurity Planet

FEBRUARY 26, 2021

The current version of its product implements multiple layers of protection to detect malware before, during and after execution. The multiple layers are able to: Protect against ransomware. ESET’s malware engine and ransomware shield are powerful tools for detecting signs of infection. Block targeted attacks.

Antivirus 85

Antivirus Firmware Encryption Spyware 85

eSecurity Planet

MAY 2, 2024

Fortunately, vendor surveys identify five key cybersecurity threats to watch for in 2024: compromised credentials, attacks on infrastructure, organized and advanced adversaries, ransomware, and uncontrolled devices. Attackers began to deliver malware to users through legitimate and common IT support tools such as ConnectWise ScreenConnect.

Cybersecurity 119

Cybersecurity DDOS Penetration Testing Passwords 119

eSecurity Planet

FEBRUARY 22, 2022

Most attacks make would-be victims click to install malware or redirect them to a phishing page to steal their credentials. NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Spyware and Zero-Days: A Troubling Market.

Spyware 122

Spyware Software Government Social Engineering 122

eSecurity Planet

FEBRUARY 26, 2021

The current version of its product implements multiple layers of protection to detect malware before, during and after execution. The multiple layers are able to: Protect against ransomware. ESET’s malware engine and ransomware shield are powerful tools for detecting signs of infection. Block targeted attacks.

Antivirus 56

Antivirus Firmware Encryption Spyware 56

SecureList

NOVEMBER 18, 2022

In July, we reported a rootkit that we found in modified Unified Extensible Firmware Interface (UEFI) firmware, the code that loads and initiates the boot process when the computer is turned on. Rootkits are malware implants that are installed deep in the operating system. Andariel deploys DTrack and Maui ransomware.

Malware 105

Malware Computers and Electronics Adware Cryptocurrency 105

SecureList

NOVEMBER 14, 2022

This reveals a likely blind spot for defenders and endpoint vendors: in a number of cases, perhaps even the majority, attackers have no need for 0-days and malware deployment to gain access to the information they need. Our own telemetry also confirms that RDP brute-force attacks have remained predominant throughout 2022.

Firmware 111

Firmware Surveillance Mobile Telecommunications 111

Responsible Cyber

APRIL 8, 2020

As cybercrime has become well-funded and increasingly sophisticated, phishing remains one of the most effective methods used by criminals to introduce malware into businesses. If an employee is tricked by a malicious link in a phishing email, they might unleash a ransomware attack on their small business. SQL Injection.

Cybersecurity 98

Cybersecurity DDOS Small Business Phishing 98

Security Affairs

APRIL 24, 2022

Patch them now!

Cyber Insurance 71

Cyber Insurance Spyware Firmware Insurance 71

SecureList

OCTOBER 26, 2021

Following this, they were tricked into downloading previously unknown malware. The backdoor, dubbed Tomiris, bears a number of similarities to the second-stage malware, Sunshuttle (aka GoldMax), used by DarkHalo last year. When victims tried to access their corporate mail, they were redirected to a fake copy of the web interface.

Malware 143

Malware Government Surveillance Spyware 143

Security Affairs

AUGUST 25, 2019

At least 23 Texas local governments targeted by coordinated ransomware attacks. Intel addresses High-Severity flaws in NUC Firmware and other tools. Malware Analysis Sandboxes could expose sensitive data of your organization. App tainted with Ahmyst Open-source spyware appeared on Google Play Store twice.

Small Business 49

Small Business Spyware Data breaches Advertising 49

SecureList

NOVEMBER 14, 2023

The malware posed as ransomware, demanding money from the victims for “decrypting” their data. UNC4841 deployed new malware designed to maintain presence on a small subset of high-priority targets compromised either before the patch was released or shortly afterwards. Verdict: prediction not fulfilled ❌ 7.

Hacking 109

Hacking Energy and Utilities Media Malware 109

Digital Shadows

NOVEMBER 10, 2022

Threat actors can develop fake mobile apps to install adware, steal PII and financial data, extract cookies and credentials, and download further payloads (such as spyware) from a remote-controlled domain. Stolen credentials can be obtained in a myriad of ways, including social engineering and malware deployment.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

eSecurity Planet

MARCH 22, 2023

Better network security monitors for authorized, but inappropriate activities or unusual behavior that may indicate compromise, malware activity, or insider threat. Endpoint Security: Antivirus , anti-spyware , endpoint detection and response (EDR), and other controls should be deployed to secure the endpoint against compromise.

Firewall 107

Firewall Network Security Penetration Testing Encryption 107