Malware, Passwords and VPN - Cyber Security Informer

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Security Affairs

NOVEMBER 19, 2024

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware.

VPN

VPN Malware Spyware Authentication

Chinese threat actors use Quad7 botnet in password-spray attacks

Security Affairs

NOVEMBER 3, 2024

Microsoft warns Chinese threat actors are using the Quad7 botnet to carry out password-spray attacks and steal credentials. Chinese threat actors use the Quad7 botnet in password-spray attacks to steal credentials, Microsoft warns. These routers are used to relay brute-force attacks on Microsoft 365 accounts.

Passwords

Passwords Wireless VPN Accountability

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. How AI and automation are amplifying the scale and sophistication of VPN attacks.

VPN

VPN Authentication Ransomware Risk

Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

Troy Hunt

FEBRUARY 25, 2025

We've also added 244M passwords we've never seen before to Pwned Passwords and updated the counts against another 199M that were already in there. The file in the image above contained over 36 million rows of data consisting of website URLs and the email addresses and passwords entered into them.

Passwords

Passwords Accountability VPN Malware

U.S. Offers $10M bounty for info on RedLine malware creator and state hackers

Security Affairs

JUNE 6, 2025

offers up to $10M for info on state hackers linked to RedLine malware and its creator, Maxim Rudometov, tied to attacks on U.S. “Maxim Alexandrovich Rudometov (Максим Александрович Рудомётов), born in 1999 in the Luhansk region of Ukraine, developed and has sold “information stealer” malware known as RedLine.”

Malware

Malware Passwords Identity Theft Accountability

International law enforcement operation dismantled RedLine and Meta infostealers

Security Affairs

OCTOBER 29, 2024

RedLine and META targeted millions of victims worldwide, according to Eurojust it was one of the largest malware platforms globally. The two infostealers allowed operators to harvest usernames, passwords, contact info, and crypto-wallets from victims, the threat actors sold this data to criminals for financial theft and hacking.

Identity Theft

Identity Theft Passwords Malware Banking

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 18

Security Affairs

NOVEMBER 3, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware

Malware VPN Cryptocurrency Ransomware

Giving a Face to the Malware Proxy Service ‘Faceless’

Krebs on Security

APRIL 18, 2023

For the past seven years, a malware-based proxy service known as “ Faceless ” has sold anonymity to countless cybercriminals. The proxy lookup page inside the malware-based anonymity service Faceless. The password chosen by this user was “ 1232.” relied on the passwords asus666 and 01091987h.

Malware

Malware Passwords Accountability Advertising

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. ” According to Kilmer, AVrecon is the malware that gives SocksEscort its proxies.

Malware

Malware VPN Internet Internet

Facebook's new passkey support could let you ditch your password once and for all

Zero Day

JUNE 19, 2025

PT NurPhoto / Contributor/Getty For all of us who hate passwords, passkeys represent a simpler and safer way of authenticating online accounts. PT NurPhoto / Contributor/Getty For all of us who hate passwords, passkeys represent a simpler and safer way of authenticating online accounts.

Passwords

Passwords Password Management Small Business Mobile

NailaoLocker ransomware targets EU healthcare-related entities

Security Affairs

FEBRUARY 20, 2025

Orange Cyberdefense CERT uncovered a malware campaign, tracked as The Green Nailao campaign, that targeted European organizations, including healthcare, in late 2024, using ShadowPad , PlugX , and the previously undocumented NailaoLocker ransomware. This launches the malware routine.” ” continues the report.

Healthcare

Healthcare Ransomware VPN Malware

Macs targeted by info stealers in new era of cyberthreats

Malwarebytes

FEBRUARY 19, 2025

The latest, major threats to Mac computers can steal passwords and credit card details with delicate precision, targeting victims across the internet based on their device, location, and operating system. These findings come from the 2025 State of Malware report. But in the world of cybercrime, malware features only mean so much.

Malware

Malware Software Passwords Cryptocurrency

86 million AT&T customer records reportedly up for sale on the dark web

Zero Day

JUNE 6, 2025

Also: Massive data breach exposes 184 million passwords for Google, Microsoft, Facebook, and more Individually, any one of those pieces of data can be exploited by the wrong people. The hackers say that the dates of birth and social security numbers were originally encrypted but have since been decrypted and are now visible in plain text.

Password Management

Password Management Passwords Software Artificial Intelligence

A Deep Dive Into the Residential Proxy Service ‘911’

Krebs on Security

JULY 18, 2022

911 says its network is made up entirely of users who voluntarily install its “free VPN” software. In this scenario, users indeed get to use a free VPN service, but they are often unaware that doing so will turn their computer into a proxy that lets others use their Internet address to transact online. “The 911[.]re

VPN

VPN Computers and Electronics Antivirus Software

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

NOVEMBER 3, 2024

Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cryptocurrency

Cryptocurrency Hacking Phishing Cyber Attacks

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

FEBRUARY 26, 2023

Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. What else do we know about the cause of these incidents?

Hacking

Hacking Social Engineering Phishing Scams

1 in 10 people do nothing to stay secure and private on vacation

Malwarebytes

MARCH 17, 2025

Once users click on the websites, which appear legitimate, theyre tricked into downloading malware or handing over sensitive information to scammers. If enough victims unwittingly send their passwords, cyber thieves could bundle the login credentials for sale on the dark web. Use a password manager and 2FA. Consider a VPN.

VPN

VPN Passwords Scams Backups

Zyxel firewalls targeted in recent ransomware attacks

Security Affairs

NOVEMBER 25, 2024

“A command injection vulnerability in the IPSec VPN feature of some firewall versions could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device.” for ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN series. .”

Firewall

Firewall Ransomware VPN Firmware

Mobile security matters: Protecting your phone from text scams

Webroot

MAY 9, 2025

Little do you know, clicking that link could open the door for scammers to steal your identity, empty your bank account, or even plant malicious software (malware) on your device. Youre asked for sensitive information like bank logins and passwords, which can be used to drain your bank account. Click here to reschedule.

Scams

Scams Mobile Banking VPN

Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ Attack

Krebs on Security

SEPTEMBER 17, 2020

The government alleges the men used malware-laced phishing emails and “supply chain” attacks to steal data from companies and their customers. APT41 was known to hide its malware inside fake resumes that were sent to targets. APT41’s activities span from the mid-2000s to the present day. Security analysts and U.S.

Antivirus

Antivirus Hacking Government Software

3CX Breach Was a Double Supply Chain Compromise

Krebs on Security

APRIL 20, 2023

Researchers at ESET say this job offer from a phony HSBC recruiter on LinkedIn was North Korean malware masquerading as a PDF file. Mandiant found the compromised 3CX software would download malware that sought out new instructions by consulting encrypted icon files hosted on GitHub. Image: Mandiant.

Malware

Malware Software Technology Accountability

Why SMS two-factor authentication codes aren't safe and what to use instead

Zero Day

JUNE 17, 2025

Those codes are supposed to serve as two-factor authentication to confirm our identity and prevent scammers from accessing our accounts through a password alone. Also: Got a new password manager? PT kontekbrothers/Getty We've probably all received confirmation codes sent via text message when trying to sign into an account.

Authentication

Authentication Password Management Small Business Passwords

Don’t Leave Your Digital Security to Chance: Get Norton 360

Tech Republic Security

AUGUST 29, 2024

Norton 360 Standard offers award-winning protection for your digital life — malware defense, cloud backup, and a VPN — for just $17.99 for a 15-month plan.

Backups

Backups VPN Malware Password Management

Digital life protection: How Webroot keeps you safe in a constantly changing world

Webroot

FEBRUARY 21, 2025

It combines multiple security capabilities into one easy-to-use package that includes: Antivirus protection Detects and neutralizes viruses, malware , spyware , and ransomware. Password Manager Ensures your passwords are strong and secure, while also making them easy to access and manage. The answer is a resounding yes.

Antivirus

Antivirus Identity Theft Cyber threats Phishing

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Webroot

MARCH 3, 2025

Common attacks to consumer protection Identity theft and fraud Some common types of identity theft and fraud include account takeover fraud , when criminals use stolen personal information such as account numbers, usernames, or passwords to hijack bank accounts, credit cards, and even email and social media accounts.

Consumer Protection

Consumer Protection Identity Theft Scams Social Engineering

Wanted: Disgruntled Employees to Deploy Ransomware

Krebs on Security

AUGUST 19, 2021

Apparently now that includes emailing employees directly and asking them to unleash the malware inside their employer’s network in exchange for a percentage of any ransom amount paid by the victim company. Image: Abnormal Security. For example, the Lockbit 2.0 “Would you like to earn millions of dollars? ” Image: Sophos.

Ransomware

Ransomware Social Engineering Cybercrime Scams

Apple quietly makes running Linux containers easier on Macs

Zero Day

JUNE 13, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Password Management

Password Management Small Business Energy and Utilities Artificial Intelligence

Arcane stealer: We want all your data

SecureList

MARCH 19, 2025

What’s intriguing about this malware is how much it collects. It grabs account information from VPN and gaming clients, and all kinds of network utilities like ngrok, Playit, Cyberduck, FileZilla and DynDNS. The videos were frequently accompanied by a link to an archive and a password to unlock it.

Passwords

Passwords Media Malware VPN

How global threat actors are weaponizing AI now, according to OpenAI

Zero Day

JUNE 6, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Artificial Intelligence

Artificial Intelligence Password Management Small Business Passwords

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

SecureList

OCTOBER 29, 2024

Check the consultant’s laptop for malware. Review email/VPN/other logs of likely affected services available from outside the organization to detect any abnormal activity by compromised accounts. Reset the password and install a new OS image on the laptop at a minimum. Outdated malware signatures.

Risk

Risk Antivirus Accountability Malware

Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JANUARY 19, 2025

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware

Spyware Data breaches DNS Artificial Intelligence

Here's why network infrastructure is vital to maximizing your company's AI adoption

Zero Day

JUNE 14, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Artificial Intelligence

Artificial Intelligence Password Management Small Business Digital transformation

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

MARCH 24, 2025

Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). Malware campaigns covered generally target/affect the end user. Specifically, it was fetching account icons and defaulted to opening password reset pages over HTTP.

Surveillance

Surveillance Telecommunications Data breaches Spyware

Tips to make your summer travels cyber safe

Webroot

JUNE 17, 2025

Fewer than 1 in 3 travelers (31%) protect their data with a virtual private network (VPN) when traveling internationally. Be sure to create strong passwords for your accounts and check your balances regularly. It’s also a good idea to turn off device sharing features and update your passwords before a trip.

VPN

VPN Scams Computers and Electronics Phishing

The Original APT: Advanced Persistent Teenagers

Krebs on Security

APRIL 6, 2022

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. Many employees passed the messages onto the security team and went back to business.

Social Engineering

Social Engineering Phishing Accountability Engineering

Norton vs McAfee: Compare Antivirus Software 2025

eSecurity Planet

NOVEMBER 12, 2024

Aside from antivirus, Norton offers ransomware and hacking protection, privacy monitoring, and a VPN. Password manager: Norton generates strong passwords and syncs logins across all your protected devices. Even McAfee’s most basic plan includes a VPN, identity monitoring, and text scam detection. 5 Pricing: 3.7/5

Antivirus

Antivirus Software Identity Theft Spyware

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Security Affairs

MARCH 14, 2025

“When the firewall had VPN capabilities, the threat actor created local VPN user accounts with names resembling legitimate accounts but with an added digit at the end. These newly created users were then added to the VPN user group, enabling future logins.” ” reads the report.

Firewall

Firewall Ransomware VPN Encryption

IPVanish vs NordVPN: Compare Features and Price

eSecurity Planet

MARCH 12, 2025

IPVanish and NordVPN are VPN solutions that offer customers multiple pricing options, a mobile VPN, and various privacy features. IPVanish is an affordable VPN with multiple support channels, including phone. Ive compared both VPNs, including their plans and features, to help you decide which is better for you.

VPN

VPN DNS Mobile Password Management

The controversial case of the threat actor EncryptHub

Security Affairs

APRIL 7, 2025

In 2024, he shifted to cybercrime, starting with low-level roles in vishing and ransomware, later moving into malware and vulnerability research that drew wide attention. He reused weak passwords across accounts, failed to enable or secure 2FA, mixed personal and criminal activity, and left critical files exposed on poorly secured servers.

Cybercrime

Cybercrime Malware Hacking VPN

Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks

Penetration Testing

JUNE 15, 2025

Skip to content June 16, 2025 Linkedin Twitter Facebook Youtube Daily CyberSecurity Primary Menu Home Cyber Criminals Cyber Security Data Leak Linux Malware Vulnerability Submit Press Release Vulnerability Report Windows Search for: Home News Vulnerability Report Critical Blink Router Flaws (CVSS 9.8)

Firmware

Firmware DNS Penetration Testing Malware

Microsoft Defender vs Bitdefender: Compare Antivirus Software

eSecurity Planet

MAY 27, 2025

per user per month) Bitdefender : Better for startups with over 10 employees, identity protection needs, and built-in VPN (starts at $6.33 Its features include identity protection features, a VPN, and a password manager. Bitdefenders SMB security features include identity exposure protection, a VPN, and a password manager.

Antivirus

Antivirus Software Small Business VPN

Patch your Windows PC now before bootkit malware takes it over - here's how

Zero Day

JUNE 11, 2025

That's because the latest round of patches fixes a flaw that could allow an attacker to control your PC through bootkit malware. Written by Lance Whitney, Contributor June 11, 2025 at 12:01 p.m. In a Binarly blog post published Tuesday, he described the problem as a memory corruption issue that exploits Microsoft's Secure Boot.

Malware

Malware Password Management Small Business Artificial Intelligence

Unmasking North Korea's Covert IT Army. Before You Hire Them

SecureWorld News

NOVEMBER 12, 2024

KnowBe4 discovered their operative's intent when the newly-hired "employee" attempted to load password-stealing malware onto a company-issued device. based credentials, conducting in-person or on-camera identity checks, and flagging suspicious behaviors, such as frequent VPN usage or reluctance to engage in video communication.

Government

Government VPN Cyber threats Education

Privacy Roundup: Week 7 of Year 2025

Security Boulevard

FEBRUARY 17, 2025

Introducing Bitwarden Cupid Vault to securely share (and unshare) passwords with loved ones Bitwarden Bitwarden has already had the ability to securely share passwords. Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw).

Surveillance

Surveillance Data breaches VPN Malware

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Chinese threat actors use Quad7 botnet in password-spray attacks

Trending Sources

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

U.S. Offers $10M bounty for info on RedLine malware creator and state hackers

International law enforcement operation dismantled RedLine and Meta infostealers

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 18

Giving a Face to the Malware Proxy Service ‘Faceless’

Who and What is Behind the Malware Proxy Service SocksEscort?

Facebook's new passkey support could let you ditch your password once and for all

NailaoLocker ransomware targets EU healthcare-related entities

Macs targeted by info stealers in new era of cyberthreats

86 million AT&T customer records reportedly up for sale on the dark web

A Deep Dive Into the Residential Proxy Service ‘911’

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

When Low-Tech Hacks Cause High-Impact Breaches

1 in 10 people do nothing to stay secure and private on vacation

Zyxel firewalls targeted in recent ransomware attacks

Mobile security matters: Protecting your phone from text scams

Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ Attack

3CX Breach Was a Double Supply Chain Compromise

Why SMS two-factor authentication codes aren't safe and what to use instead

Don’t Leave Your Digital Security to Chance: Get Norton 360

Digital life protection: How Webroot keeps you safe in a constantly changing world

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Wanted: Disgruntled Employees to Deploy Ransomware

Apple quietly makes running Linux containers easier on Macs

Arcane stealer: We want all your data

How global threat actors are weaponizing AI now, according to OpenAI

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

Here's why network infrastructure is vital to maximizing your company's AI adoption

Privacy Roundup: Week 12 of Year 2025

Tips to make your summer travels cyber safe

The Original APT: Advanced Persistent Teenagers

Norton vs McAfee: Compare Antivirus Software 2025

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

IPVanish vs NordVPN: Compare Features and Price

The controversial case of the threat actor EncryptHub

Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks

Microsoft Defender vs Bitdefender: Compare Antivirus Software

Patch your Windows PC now before bootkit malware takes it over - here's how

Unmasking North Korea's Covert IT Army. Before You Hire Them

Privacy Roundup: Week 7 of Year 2025

Stay Connected