InfoSec and Malware - Cyber Security Informer

Threat actors target the infoSec community with fake PoC exploits

Security Affairs

MAY 22, 2022

Researchers uncovered a malware campaign targeting the infoSec community with fake Proof Of Concept to deliver a Cobalt Strike beacon. Researchers from threat intelligence firm Cyble uncovered a malware campaign targeting the infoSec community. The malware, disguised as a fake PoC code, was available on GitHub.

InfoSec

InfoSec Malware Cybercrime Information Security

ChatGPT: What are the Implications for Infosec?

SecureWorld News

DECEMBER 20, 2022

The ability to ask any question on just about any topic and have a very intelligent answer given has cybersecurity experts wondering if the infosec community is using it and, if so, for what; and, if so, how is it working for writing scripts and code or imitating phishing emails, for instance. Useful for basic malware analysis.

InfoSec

InfoSec Phishing Social Engineering Media

US Helped Ukraine With Infosec—Story is ‘Dangerous Arrogance’

Security Boulevard

MARCH 10, 2022

The post US Helped Ukraine With Infosec—Story is ‘Dangerous Arrogance’ appeared first on Security Boulevard. But scratch the surface and there’s not much of a There there. What looks like a coordinated PR campaign relies on “people familiar with the.

InfoSec

InfoSec Media Hacking Social Engineering

WhatsApp Pink malware spreads via group chat messages

Security Affairs

APRIL 21, 2021

A WhatsApp malware dubbed WhatsApp Pink is able to automatically reply to victims’ Signal, Telegram, Viber, and Skype messages. A WhatsApp malware dubbed WhatsApp Pink has now been updated, authors have implemented the ability to automatically respond to victims’ Signal, Telegram, Viber, and Skype messages. Share with All.

Malware

Malware InfoSec Hacking Mobile

Malware Static Analysis

Security Affairs

MARCH 24, 2019

Malware researcher and founder of Yoroi Marco Ramilli shared a simple tool for malware static analysis he used to perform massive Malware analysis research. Malware Static Analysis. SecurityAffairs – Malware static analysis, malware). The post Malware Static Analysis appeared first on Security Affairs.

Malware

Malware InfoSec Advertising Engineering

Oscorp, a new Android malware targets Italian users

Security Affairs

JANUARY 28, 2021

Researchers at the Italian CERT warns of new Android malware dubbed Oscorp that abuses accessibility services for malicious purposes. Researchers from security firm AddressIntel spotted a new Android malware dubbed Oscorp , its name comes from the title of the login page of its command-and-control server. Uninstall app. Make calls.

Malware

Malware Phishing InfoSec Cryptocurrency

AcidBox, a malware that borrows Turla APT exploit, hit Russian organizations

Security Affairs

JUNE 19, 2020

New AcidBox Malware employed in targeted attacks leverages an exploit previously associated with the Russian-linked Turla APT group. Palo Alto Networks researchers analyzed a new malware, dubbed AcidBox, that was employed in targeted attacks and that leverages an exploit previously associated with the Russian-linked Turla APT group.

Malware

Malware InfoSec Advertising Hacking

Targeted Malware Reverse Engineering Workshop follow-up. Part 1

SecureList

APRIL 19, 2021

On April 8, 2021, we conducted a webinar with Ivan Kwiatkowski and Denis Legezo , Senior Security Researchers from our Global Research & Analysis Team (GReAT), who gave live workshops on practical disassembling, decrypting and deobfuscating authentic malware cases, moderated by GReAT’s own Dan Demeter.

Engineering

Engineering Malware InfoSec Education

The ‘AVE_MARIA’ Malware

Security Affairs

JANUARY 11, 2019

Ave Maria Malware – Phishing attempts spreading in the last days of the past year against an Italian organization operating in the Oil&Gas sector. Similar packing of AutoIT code have been observed even by Juniper back in 2016, where SFX files were abused this way to deliver scripts used as first stage of the malware.

Malware

Malware Phishing Advertising InfoSec

Analyzing AZORult malware using NSA Ghidra suite

Security Affairs

APRIL 2, 2019

Cybaze-Yoroi ZLAB malware researchers decided to use the NSA Ghidra suite in a real case study, the analysis of the AZORult malware. One of the most expected moments in the infosec community during the last few months was, with no doubt, the Ghidra public release. Figure 2: Communication of the malware with the C2.

Malware

Malware Engineering InfoSec Advertising

Kaspersky report: Malware shared by USCYBERCOM first seen in December 2016

Security Affairs

JULY 9, 2019

The malware samples shared by USCYBERCOM last week were first detected in December 2016 in attacks attributed to Iran-linked APT33. Last week the United States Cyber Command (USCYBERCOM) uploaded to VirusTotal a malware used by Iran-linked APT33 group in attacks in Dec 2016 and Jan 2017. ” reads a report published by Kaspersky.

Malware

Malware InfoSec Government Advertising

The State of Malware Analysis: Advice from the Trenches

Lenny Zeltser

SEPTEMBER 26, 2019

What malware analysis approaches work well? The following discussion–captured as an MP3 audio file –offers friendly advice from 5 malware analysts. 1:05) How has your approach to examining malware changed over the years? (7:17) 34:55) How often do you see malware that uses a technique you consider innovative? (39:01)

Malware

Malware InfoSec Engineering Software

Friday Five 2/12

Digital Guardian

FEBRUARY 12, 2021

A hack of a water treatment plant, SIM swapping used on celebrities, and a popular barcode app turned into malware - catch up on all of the week's infosec news with the Friday Five!

InfoSec

InfoSec Hacking Malware

What is the cyber kill chain? A model for tracing cyberattacks

CSO Magazine

APRIL 14, 2022

As an infosec professional, you’ve likely heard about using a cyber kill chain to help identify and prevent intrusions. It breaks down each stage of a malware attack where defenders can identify and stop it. Attackers are evolving their methods, which might require that you look at the cyber kill chain differently.

InfoSec

InfoSec Malware

5 Cybersecurity Trends to Watch in 2022

Threatpost

DECEMBER 29, 2021

Here’s what cybersecurity watchers want infosec pros to know heading into 2022. .

InfoSec

InfoSec Cybersecurity IoT Mobile

Are our infosec controls sufficient?

Notice Bored

JUNE 25, 2021

begging questions about which infosec-related matters are particularly important, and how they stack up in relation to other business priorities, issues, pressures etc. In addition to the technical and human aspects of infosec, there are broader governance, strategic and commercial implications of [information] risk management and assurance.

InfoSec

InfoSec Risk Information Security Government

From PowerShell to Payload: An Analysis of Weaponized Malware

Threatpost

APRIL 2, 2021

John Hammond, security researcher with Huntress, takes a deep-dive into a malware's technical and coding aspects.

Malware

Malware InfoSec

The CPRA: What You Should Know as an InfoSec Professional

SecureWorld News

DECEMBER 1, 2022

Enterprise endpoint protection and remediation (anti-malware, anti-virus software). Training for employees (awareness). Privacy training, specifically. Well documented policies and standards for employees (data handling). Endpoint encryption for all laptops. Intrusion detection and response. Cyber insurance (critical).

InfoSec

InfoSec Cyber Insurance Consumer Protection Insurance

Friday Five 2/26

Digital Guardian

FEBRUARY 26, 2021

Hackers targeting the US electric grid, M1 chip compatible malware, and a new attack framework for inferring keystrokes - catch up on all of the week's infosec news with the Friday Five!

InfoSec

InfoSec Malware

Cyber Defense Magazine – November 2020 has arrived. Enjoy it!

Security Affairs

NOVEMBER 4, 2020

9TH ANNUAL INFOSEC AWARDSNOW OPEN FOR NOMINATIONS WITH AN INCREDIBLE 5 STAR AWARDS DINNER HELD DURING RSA CONFERENCE 2021 IN SAN FRANCISCO, CA, USA. Click here to read it online in Yumpu. Once a year, during the RSA Conference, we announced the most innovative, hottest, best cybersecurity companies, executives, products and services.

InfoSec

InfoSec DNS Advertising Marketing

Security BSides Dublin 2021 – Juan Aray’s ‘Introduction To Fileless Malware’

Security Boulevard

JANUARY 29, 2022

The post Security BSides Dublin 2021 – Juan Aray’s ‘Introduction To Fileless Malware’ appeared first on Security Boulevard. Additionally, the Security BSides Dublin organization has slated their eponymous Security BSides Dublin 2022 confab at the The Convention Centre Dublin ( CCD ) on 2022/03/19.

Malware

Malware Education InfoSec Information Security

Choose Your Own Adventure game animates security awareness training

SC Magazine

MAY 4, 2021

Infosec’s Choose Your Own Adventure training game “Deep Space Danger” tests employees on their knowledge of social engineering. One of our jobs is to make sure the brand stays true to its zeitgeist, its character, and [Infosec] really had it down right from the beginning.”. What do you do?

Security Awareness

Security Awareness InfoSec Social Engineering Engineering

Ransomware roundup: System-locking malware dominates headlines

CSO Magazine

JUNE 2, 2022

Ransomware was all over the infosec news headlines in the past week, with one new report revealing that its presence has grown more in the last year than in the past several years combined. As we head into the unofficial start of summer, it does not appear the criminal groups that run ransomware schemes are planning to take any time to rest.

Ransomware

Ransomware InfoSec Malware CISO

NSA Wants To Help you Lock Down MS Windows in PowerShell

Security Boulevard

JUNE 24, 2022

A new cheatsheet from four infosec agencies tells us how to use PowerShell for good, rather than let scrotes misuse it to “live off the land.”. The post NSA Wants To Help you Lock Down MS Windows in PowerShell appeared first on Security Boulevard.

InfoSec

InfoSec Security Awareness Risk Government

CISA Order Highlights Persistent Risk at Network Edge

Krebs on Security

JUNE 15, 2023

But last week, Barracuda took the highly unusual step of offering to replace compromised ESGs , evidently in response to malware that altered the systems in such a fundamental way that they could no longer be secured remotely with software updates. “Patch your #Fortigate.”

Risk

Risk VPN Internet Internet

SentinelOne released free decryptor for ThiefQuest ransomware

Security Affairs

JULY 8, 2020

Early July, security expert K7 Lab malware researcher Dinesh Devadoss uncovered a new piece of ransomware dubbed EvilQuest designed to encrypt macOS systems, it is also able to install additional payloads and potentially take over the infected machine. SecurityAffairs – malware, ThiefQuest ransomware). sysopfb shows how we broke it.

Ransomware

Ransomware Encryption Malware InfoSec

10 Funny Tweets to Promote #CybersecurityAwareness

SecureWorld News

OCTOBER 6, 2021

Follow For More >> @TowardsCybersec #cybersecurity #security #privacy #infosec #meme #internet #Threat #digital #tech #creativity #Hacked #people #Online #safety #data #informationtechnology #informationsecurity pic.twitter.com/tTAPWh4peR — Towards Cybersecurity (@TowardsCybersec). Free software or just malware?? ???????????????

InfoSec

InfoSec Passwords Cybersecurity Media

Malware Analysis Part 3: The phases and roles of incident response

Security Boulevard

NOVEMBER 11, 2021

In Part 3 of this series, I’m going to cover incident response and the role it plays in malware analysis. If you haven’t had a chance to read the earlier parts of the malware collection, you can find them here: Malware Analysis Part 1: How does it work? Malware Analysis Part 2: What benefit [.].

Malware

Malware InfoSec

103,000 machines are still vulnerable to SMBGhost attacks

Security Affairs

NOVEMBER 1, 2020

The wormable Remote Code Execution (RCE) flaw could allow malware to spread malware across machines without any need for user interaction. The researcher Jan Kopriva published a post on the SANS ISC Infosec Forums and revealed that over 103 000 machines online are yet to be patched.

InfoSec

InfoSec Advertising Malware Hacking

Cyber Defense Magazine – November 2021 has arrived. Enjoy it!

Security Affairs

NOVEMBER 3, 2021

This is the biggest INFOSEC show on earth and we will be there! It’s our 10th anniversary in business and at @RSAConference #RSAC: Where the world talks #security There is No better INFOSEC event on Earth. CDM #CDMG #OSINT #CYBERSECURITY #INFOSEC #BEST #PRACTICES #TIPS #TECHNIQUES We rarely ask our readership for anything.

InfoSec

InfoSec Cybersecurity Media Hacking

Launching the First “Yomi Hunting” Challenge!

Security Affairs

FEBRUARY 17, 2020

About a year ago, Yoroi released the Yomi Hunter sandbox, today, they love to challenge the malware community with the first “Yomi Hunting” contest. Our sentiment regarding the InfoSec community led us to support the Italian CTF team in their path to the final round of the European Cyber Security Challenge tournament last year.

InfoSec

InfoSec Malware Advertising Cyber threats

CISA Issues New Guidance to Help Admins Map Threat Actor Moves Based on MITRE ATT&CK Framework

Hot for Security

JUNE 3, 2021

Acting as a lens for IT reps to identify and analyze adversary behavior, ATT&CK provides details on over 100 known threat actor groups and the techniques and malware they use to conduct their campaigns.

InfoSec

InfoSec System Administration Malware Engineering

Magecart attacks are still around but are more difficult to detect

Security Affairs

JUNE 22, 2022

We're right on the heels of Magecart cybercriminals New malware domain found: scanalytic[.org net/static/counter.js [link] #infosec #cybersecurity #malware pic.twitter.com/F6LJ6CBCCA — Luke Leal (@rootprivilege) June 13, 2022. The researchers recently uncovered two domains, “scanalytic[.]org” staticounter[.]net

eCommerce

eCommerce InfoSec Malware Hacking

Smashing Security podcast #287: Lost in translation, spiders, and slapping tortillas

Graham Cluley

SEPTEMBER 1, 2022

We’re back from our summer break as we ask how did a cryptomining campaign stay unspotted for years, quiz special guest and infosec rockstar Mikko Hyppönen about his book, and ponder what spiders teach us about misinformation.

InfoSec

InfoSec Malware

Cryptocurrency exchange BuyUcoin hacked, data of 325K+ users leaked

Security Affairs

JANUARY 25, 2021

Story – [link] #InfoSec pic.twitter.com/1xFOtLcd8F — Rajshekhar Rajaharia (@rajaharia) January 21, 2021. InfoSec pic.twitter.com/dJGN5VesEH — Rajshekhar Rajaharia (@rajaharia) January 21, 2021. The leaked data contains Name, Email, Mobile, bank account numbers, PAN Number, Wallets Details etc.

Cryptocurrency

Cryptocurrency Hacking InfoSec Data breaches

INC RANSOM ransomware gang claims to have breached Xerox Corp

Security Affairs

DECEMBER 30, 2023

xerox [link] Pochi dati trafugati (finora, dai sample); quelli di #incransom sono stati ecologici, avrebbero speso troppo in fotocopie #ransomfeed #security #infosec pic.twitter.com/PmtS9uu82d — Claudia (@signorina37H) December 30, 2023 The INC RANSOM group added Xerox to the list of victims on its Tor leak site.

Ransomware

Ransomware InfoSec Data breaches Hacking

Why Taylor Swift Fans Should Work in Cybersecurity

SecureWorld News

SEPTEMBER 12, 2023

These skills also happen to apply to information security (infosec) and cyber threat intelligence and research. And you'll leave your first infosec conference with an armful of them. But infosec is the rare industry with clearcut heroes and villains. My Infosec Era has only just begun. I didn't do it alone.

Cybersecurity

Cybersecurity InfoSec Threat Detection Accountability

MY TAKE: 3 privacy and security habits each individual has a responsibility to embrace

The Last Watchdog

JANUARY 28, 2019

And the malware that subsequently gets installed continues to get more stealthy and capable with each advancing iteration. Researchers recently flushed out a new variety of the Xbash family of malware tuned to seek out administrators’ rights and take control of Linux servers. Apps from other sources can carry malware or spyware.

Passwords

Passwords Password Management Antivirus Internet

Risks to Your Network from Insecure Code Signing Processes

Security Boulevard

JULY 7, 2022

Many InfoSec teams don’t have the visibility into what their software development teams are doing. However, InfoSec teams need to understand that significant risks exist around poor code signing hygiene. In years past, InfoSec may have been the central keeper of code signing. Lack of visibility into the software organization.

Risk

Risk InfoSec Software Digital transformation

US Hacker ‘P4x’ Gets Back at Pyongyang (but We Smell a Rat)

Security Boulevard

FEBRUARY 3, 2022

An infosec researcher was hacked by North Korea. law enforcement did nothing, so he took matters into his own hands. The post US Hacker ‘P4x’ Gets Back at Pyongyang (but We Smell a Rat) appeared first on Security Boulevard.

InfoSec

InfoSec Hacking Social Engineering IoT

Rooting Malware Is Back for Mobile. Here’s What to Look Out For.

Threatpost

NOVEMBER 16, 2021

Hank Schless, senior manager of security solutions at Lookout, discusses AbstractEmu, mobile malware found on Google Play, Amazon Appstore and the Samsung Galaxy Store.

Mobile

Mobile Malware InfoSec

Operation Fortify: A US Ransomware Plan

Daniel Miessler

OCTOBER 4, 2020

But until recently, attackers were using less-advanced malware in an unorganized way. We could also have a massive network of technical support, using people in infosec who already have jobs. They’ve married the tech with the business side, and the combination has caused an epidemic. So basically the Fortify Operatives?

Ransomware

Ransomware Small Business Government InfoSec

Cisco Secure 5 Best Practices Security Analysts Can Use to Secure Their Hybrid Workforce.

Cisco Security

SEPTEMBER 12, 2022

With pervasive ransomware attacks, malware attacks, and email attacks, you must be ready and have not only a security solution but also a security analyst team ready to respond when an attack happens. . I will also be speaking with Eric Howard, Cisco Secure Technical Marketing Engineer Leader for the Security Platform and Response Group.

InfoSec

InfoSec Marketing Engineering Information Security

Cyber Defense Magazine Annual Global Edition for 2018 has arrived. Enjoy it!

Security Affairs

OCTOBER 3, 2018

InfoSec Knowledge is Power. Our InfoSec awards are annually given out at the RSA Conference in the United States every year, Q1. We hope you enjoy our Cyber Defense Magazine Annual Global Edition for 2018 including our Global Awards Winners for 2018…packed with over 75+ pages of excellent content. Cyber Defense Magazine.

InfoSec

InfoSec Advertising Mobile Media

Threat actors target the infoSec community with fake PoC exploits

ChatGPT: What are the Implications for Infosec?

Trending Sources

US Helped Ukraine With Infosec—Story is ‘Dangerous Arrogance’

WhatsApp Pink malware spreads via group chat messages

Malware Static Analysis

Oscorp, a new Android malware targets Italian users

AcidBox, a malware that borrows Turla APT exploit, hit Russian organizations

Targeted Malware Reverse Engineering Workshop follow-up. Part 1

The ‘AVE_MARIA’ Malware

Analyzing AZORult malware using NSA Ghidra suite

Kaspersky report: Malware shared by USCYBERCOM first seen in December 2016

The State of Malware Analysis: Advice from the Trenches

Friday Five 2/12

What is the cyber kill chain? A model for tracing cyberattacks

5 Cybersecurity Trends to Watch in 2022

Are our infosec controls sufficient?

From PowerShell to Payload: An Analysis of Weaponized Malware

The CPRA: What You Should Know as an InfoSec Professional

Friday Five 2/26

Cyber Defense Magazine – November 2020 has arrived. Enjoy it!

Security BSides Dublin 2021 – Juan Aray’s ‘Introduction To Fileless Malware’

Choose Your Own Adventure game animates security awareness training

Ransomware roundup: System-locking malware dominates headlines

NSA Wants To Help you Lock Down MS Windows in PowerShell

CISA Order Highlights Persistent Risk at Network Edge

SentinelOne released free decryptor for ThiefQuest ransomware

10 Funny Tweets to Promote #CybersecurityAwareness

Malware Analysis Part 3: The phases and roles of incident response

103,000 machines are still vulnerable to SMBGhost attacks

Cyber Defense Magazine – November 2021 has arrived. Enjoy it!

Launching the First “Yomi Hunting” Challenge!

CISA Issues New Guidance to Help Admins Map Threat Actor Moves Based on MITRE ATT&CK Framework

Magecart attacks are still around but are more difficult to detect

Smashing Security podcast #287: Lost in translation, spiders, and slapping tortillas

Cryptocurrency exchange BuyUcoin hacked, data of 325K+ users leaked

INC RANSOM ransomware gang claims to have breached Xerox Corp

Why Taylor Swift Fans Should Work in Cybersecurity

MY TAKE: 3 privacy and security habits each individual has a responsibility to embrace

Risks to Your Network from Insecure Code Signing Processes

US Hacker ‘P4x’ Gets Back at Pyongyang (but We Smell a Rat)

Rooting Malware Is Back for Mobile. Here’s What to Look Out For.

Operation Fortify: A US Ransomware Plan

Cisco Secure 5 Best Practices Security Analysts Can Use to Secure Their Hybrid Workforce.

Cyber Defense Magazine Annual Global Edition for 2018 has arrived. Enjoy it!

Stay Connected