article thumbnail

Blister malware using code signing certificates to evade anti malware detection

CyberSecurity Insiders

If you are in thinking that your PC or computing device is secure enough as it is loaded with an anti-malware solution, you better change your viewpoint. Interestingly, the malware is found using a code signing certificate from Sectigo, a cybersecurity company that offers digital identity solutions.

Malware 124
article thumbnail

New AdLoad Variant Bypasses Apple's Security Defenses to Target macOS Systems

The Hacker News

A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple's on-device malware scanner and even signed by its own notarization service, highlighting the malicious software ongoing attempts to adapt and evade detection.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

When Your Smart ID Card Reader Comes With Malware

Krebs on Security

Out of an abundance of caution, Mark submitted Saicoo’s drivers file to Virustotal.com , which simultaneously scans any shared files with more than five dozen antivirus and security products. Virustotal reported that some 43 different security tools detected the Saicoo drivers as malicious. Image: Virustotal.com.

Malware 338
article thumbnail

Boost security defenses against Kwampirs RAT malware with new list of IOCs

Tech Republic Security

ReversingLabs did a forensic analysis of attacks from the remote access trojan to understand the malware control structure.

article thumbnail

New BLISTER Malware Using Code Signing Certificates to Evade Detection

The Hacker News

Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the radar with the goal of deploying Cobalt Strike and BitRAT payloads on compromised systems.

Malware 122
article thumbnail

New S1deload Malware Hijacking Users' Social Media Accounts and Mining Cryptocurrency

The Hacker News

An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and abuse the systems' resources to mine cryptocurrency.

article thumbnail

It's a Zero-day? It's Malware? No! It's Username and Password

The Hacker News

As cyber threats continue to evolve, adversaries are deploying a range of tools to breach security defenses and compromise sensitive data. This article explores the seriousness of compromised credentials, the challenges they present to security solutions, and the

Passwords 111