Schneier on Security

MAY 26, 2022

Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and use them. Uncategorized malware smart cards

Malware 249

Malware Accountability Government 249

Schneier on Security

MAY 4, 2022

Uncategorized backdoors botnets malware threat modelsMandiant is reporting on a new botnet. The group, which security firm Mandiant is calling UNC3524, has spent the past 18 months burrowing into victims’ networks with unusual stealth.

Malware 234

Malware Wireless Antivirus IoT 234

Schneier on Security

JUNE 30, 2022

The discovery of custom-built malware written for the MIPS architecture and compiled for small-office and home-office routers is significant, particularly given its range of capabilities. Uncategorized hacking malware

Malware 157

Malware DNS Architecture Technology 157

Schneier on Security

APRIL 14, 2022

The Department of Energy, CISA, the FBI, and the NSA jointly issued an advisory describing a sophisticated piece of malware called Pipedream that’s designed to attack a wide range of industrial control systems. There’s also no indication of how the malware was discovered.

Malware 237

Malware Government 237

Schneier on Security

AUGUST 14, 2020

The NSA and FBI have jointly disclosed Drovorub, a Russian malware suite that targets Linux. cyberespionage cybersecurity espionage fbi implants malware nsa russiaDetailed advisory. Fact sheet. News articles. Reddit thread.

Malware 232

Malware Cybersecurity 232

Schneier on Security

JULY 27, 2021

Interesting research: “EvilModel: Hiding Malware Inside of Neural Network Models” Abstract: Delivering malware covertly and detection-evadingly is critical to advanced malware campaigns.

Malware 284

Malware Artificial Intelligence Antivirus Engineering 284

Schneier on Security

MARCH 2, 2021

This is weird : Once an hour, infected Macs check a control server to see if there are any new commands the malware should run or binaries to execute. The lack of a final payload suggests that the malware may spring into action once an unknown condition is met.

Malware 263

Malware Government 263

Schneier on Security

JANUARY 14, 2022

Researchers have developed a malware detection system that uses EM waves: “ Obfuscation Revealed: Leveraging Electromagnetic Signals for Obfuscated Malware Classification.” Uncategorized academic papers Internet of Things malware

Malware 243

Malware Firmware IoT Internet 243

Schneier on Security

JANUARY 24, 2022

Crowdstrike is reporting that malware targeting Linux has increased considerably in 2021: Malware targeting Linux systems increased by 35% in 2021 compared to 2020. XorDDoS, Mirai and Mozi malware families accounted for over 22% of Linux-targeted threats observed by CrowdStrike in 2021.

Malware 236

Malware Accountability 236

Schneier on Security

MAY 5, 2020

Interesting story of malware hidden in Google Apps. espionage google kaspersky malware phishing spywareThis particular campaign is tied to the government of Vietnam.

Malware 235

Malware Spyware Accountability Government 235

Schneier on Security

AUGUST 18, 2020

Interesting story of a vaccine for the Emotet malware: Through trial and error and thanks to subsequent Emotet updates that refined how the new persistence mechanism worked, Quinn was able to put together a tiny PowerShell script that exploited the registry key mechanism to crash Emotet itself.

Malware 215

Malware Cybersecurity 215

Schneier on Security

MARCH 30, 2021

This is a sophisticated piece of malware. Uncategorized Android cyberweapons GPS malwareResearchers have discovered a new Android app called “System Update” that is a sophisticated Remote-Access Trojan (RAT).

Malware 232

Malware Manufacturing Encryption Government 232

Schneier on Security

MAY 26, 2021

Apostle seems to be a new strain of malware that destroys data. Uncategorized data destruction Iran Israel malware ransomware

Malware 244

Malware Government Ransomware 244

The Hacker News

MAY 24, 2022

Malware is an industry, and professional developers are found to exchange, be it by stealing one's code or deliberate collaboration. In this day and age, we are not dealing with roughly pieced together, homebrew type of viruses anymore.

Malware 111

Malware Software 111

Security Boulevard

FEBRUARY 21, 2022

Charlene O’Hanlon and Thomas Brittain from Kroll discuss emerging trends in the malware space in light of the recent surge of reported attacks, including threats to watch out for, predictions for how the government will focus on cybersecurity going forward and how companies can mitigate risk.

Malware 104

Malware Government Risk Ransomware 104

Krebs on Security

MARCH 12, 2020

In one scheme, an interactive dashboard of Coronavirus infections and deaths produced by John Hopkins University is being used in malicious Web sites (and possibly spam emails) to spread password-stealing malware.

Malware 286

Malware Passwords Cybercrime Software 286

CyberSecurity Insiders

FEBRUARY 2, 2022

The first news that is related to malicious software and is trending heavily on Google is related to SolarMarker malware that can steal credentials and act as a backdoor for other cyber attacks. Third is the news related to 2FA Authenticator that is seen distributing malware.

Malware 113

Malware Cybersecurity Cryptocurrency Healthcare 113

Krebs on Security

MAY 17, 2022

The consensus seems to be that the ZIP file currently harbors a malware threat known as Ramnit , a fairly common but dangerous trojan horse that spreads by appending itself to other files. Millions of U.S.

Malware 271

Malware Government Antivirus Internet 271

Schneier on Security

MAY 18, 2022

Researchers have demonstrated iPhone malware that works even when the phone is fully shut down. Uncategorized Bluetooth iPhone malware

Firmware 254

Firmware Malware Encryption Risk 254

Security Affairs

DECEMBER 3, 2020

Security researchers have uncovered a new technique to inject a software skimmer onto checkout pages, the malware hides in social media buttons. Sansec researchers were the first that discovered the new malware. “Of these 9 infected sites, only 1 had functional malware.

Media 99

Media Software Malware Social Engineering 99

Schneier on Security

APRIL 6, 2020

Microsoft is reporting that an Emotat malware infection shut down a network by causing computers to overheat and then crash. authentication credentials malware microsoft phishing

Malware 228

Malware Authentication Internet Internet 228

Threatpost

JULY 5, 2021

InfoSec Insider MalwareMatt Bromiley, senior consultant with Mandiant Managed Defense, discusses the top tricks and tips for protecting enterprise environments from ransomware.

Ransomware 114

Ransomware InfoSec Malware 114

Schneier on Security

DECEMBER 7, 2020

Clever tactic : This new malware was discovered by researchers at Dutch cyber-security company Sansec that focuses on defending e-commerce websites from digital skimming (also known as Magecart) attacks. Uncategorized credit cards malware social engineering social media

Media 228

Media Malware Social Engineering Engineering 228

Dark Reading

JUNE 10, 2022

So-called Symbiote malware, first found targeting financial institutions, contains stealthy rootkit capabilities

Malware 114

Malware 114

CyberSecurity Insiders

JUNE 9, 2022

Cybersecurity researchers from Blackberry and Intezer labs have discovered a new Linux malware that is hard to detect. They have dubbed the malware Symbiote and are said to be mostly targeting backdoor infected systems. Malware Linux Malware Symbiote

Cybersecurity 110

Cybersecurity Malware Encryption Ransomware 110

CyberSecurity Insiders

FEBRUARY 22, 2022

Trickbot Malware that started just as a banking malware has now emerged into a sophisticated data stealing tool capable of injecting malware like ransomware or serve as an Emotet downloader. The post Trickbot Malware hits 140,000 victims appeared first on Cybersecurity Insiders.

Malware 110

Malware Cybersecurity Social Engineering Banking 110

Security Affairs

JUNE 9, 2022

Researchers uncovered a high stealth Linux malware, dubbed Symbiote, that could be used to backdoor infected systems. Once the malware has infected all the running processes, it provides the threat actor with rootkit capability and supports data-stealing capabilities.

Malware 111

Malware DNS Antivirus Passwords 111

Security Affairs

JUNE 27, 2022

The Governmental Computer Emergency Response Team of Ukraine (CERT-UA) is warning of a malware campaign targeting Ukrainian telecommunications operators with the DarkCrystal RAT. The post Ukrainian telecommunications operators hit by DarkCrystal RAT malware appeared first on Security Affairs.

Telecommunications 99

Telecommunications Malware Media Passwords 99

Schneier on Security

MAY 14, 2020

US Cyber Command has uploaded North Korean malware samples to the VirusTotal aggregation repository, adding to the malware samples it uploaded in February. It's interesting to see the US government take a more aggressive stance on foreign malware.

Government 244

Government Malware Antivirus Cryptocurrency 244

Adam Levin

FEBRUARY 7, 2020

Online scammers are using the 2020 Oscars to spread malware. The post 2020 Oscar Nominees Used to Spread Malware appeared first on Adam Levin. Data Security Technology featured malware oscars academy awards joker irishman

Malware 251

Malware Adware Phishing Technology 251

Dark Reading

MAY 27, 2022

The malware’s abuse of PowerShell makes it more dangerous, allowing for more advanced attacks such as ransomware, fileless malware, and malicious code memory injections

Ransomware 114

Ransomware Malware 114

Schneier on Security

JANUARY 23, 2018

After gaining control of the coin-mining software, the malware replaces the wallet address the computer owner uses to collect newly minted currency with an address controlled by the attacker. botnets cryptocurrency hacking malware scamsThis is a clever attack. From then on, the attacker receives all coins generated, and owners are none the wiser unless they take time to manually inspect their software configuration.

Cryptocurrency 264

Cryptocurrency Malware Software Scams 264

We Live Security

AUGUST 6, 2021

The post Anatomy of native IIS malware appeared first on WeLiveSecurity. MalwareESET researchers publish a white paper putting IIS web server threats under the microscope.

Malware 111

Malware 111

We Live Security

FEBRUARY 24, 2022

The post HermeticWiper: New data‑wiping malware hits Ukraine appeared first on WeLiveSecurity. MalwareHundreds of computers in Ukraine compromised just hours after a wave of DDoS attacks brings down a number of Ukrainian websites.

DDOS 111

DDOS Malware 111

Krebs on Security

MARCH 17, 2022

“Ukrainian and sadly non-Ukrainian developers are modifying their public software to trigger malware or pro-Ukraine ads when deployed on Russian computers,” Holden said.

Malware 260

Malware Internet Internet Software 260

CyberSecurity Insiders

JANUARY 20, 2022

Cybersecurity researchers from Cisco Talos have issued a warning that hackers are now taking help of cloud service platforms to spread malware Trojans such as Nanocore, Netwire, and AsyncRAT having ability to steal critical info from the victimized devices. Malware Moncler

Malware 109

Malware Cybersecurity Ransomware Phishing 109

Security Boulevard

JUNE 24, 2022

This Week in Malware, highlights include malicious Python packages that not only exfiltrate your secrets—AWS credentials and environment variables but rather upload these to a publicly exposed endpoint. The post This Week in Malware—show me your secrets!

Malware 81

Malware Firewall 81

CyberSecurity Insiders

JUNE 2, 2022

Europol, an internationally recognized law enforcement agency, has made it official that it has seized the operations and infrastructure of Flubot malware that has the potential to steal passwords, banking credentials, and other sensitive details from Google Android smartphones.

Cybersecurity 91

Cybersecurity Malware Banking Phishing 91

Security Boulevard

MAY 3, 2022

Sonatype has caught newer typosquats of the popular 'colors' npm library that contain obfuscated malware. The malware in question comprises Discord info-stealers attempting to hijack the user's Discord tokens and session information.

Malware 91

Malware Firewall 91

Schneier on Security

FEBRUARY 2, 2018

Stuxnet famously used legitimate digital certificates to sign its malware. Now, researchers have presented proof that digitally signed malware is much more common than previously believed. The researchers said they found 189 malware samples bearing valid digital signatures that were created using compromised certificates issued by recognized certificate authorities and used to sign legitimate software. The forgeries also allow malware to evade antivirus protections.

Malware 134

Malware Antivirus Software Accountability 134

Security Affairs

JUNE 29, 2022

Researchers detailed a new information-stealing malware, dubbed YTStealer, that targets YouTube content creators. The malware is highly likely available as a service on the Dark Web. Upon executing the malware, it performs some environment checks to avoid being executed in a sandbox.

Malware 78

Malware Authentication Software Accountability 78

Security Boulevard

APRIL 1, 2022

Over the last year we’ve seen an ongoing malware infection which redirects website visitors to scam sites. Continue reading WordPress Popunder Malware Redirects to Scam Sites at Sucuri Blog.

Scams 103

Scams Malware 103

CyberSecurity Insiders

JUNE 19, 2022

An Italian mobile security company named Cleafy has issued a warning to all android phone users about a malware dubbed BRATA. The way BRATA is being distributed is interesting as the malware only targets one financial organization at a time and keeps in touch with a command-and-control server.

Mobile 100

Mobile Cybersecurity Malware Banking 100