SecureList

JUNE 16, 2021

It is interesting to note that an active Keepass (password manager) process gets killed before starting the keylogger. This is likely intended to force the user to restart the program and enter a master password that is then stolen via the keylogger. argument: path to file to upload. – List files and repositories.

Surveillance 142

Surveillance Malware Password Management Passwords 142

Malwarebytes

SEPTEMBER 22, 2021

Hangzhou Hikvision Digital Technology Co., Its business activities include the provision of services for hard disk recorders, video codes, video servers, surveillance cameras, monitoring of ball machine, road mounts and other products, as well as security services. engages in the development, production, and sale of security products.

Firmware 129

Firmware Surveillance Marketing VPN 129

SecureList

JUNE 3, 2024

This RAT allows an attacker to surveil and harvest sensitive data from a target computer. Cracked applications are one of the easiest ways for attackers to get malware onto people’s computers: to elevate their privileges, they only need to ask for the password, which usually arouses no suspicion during software installation.

Banking 83

Banking Malware Computers and Electronics Mobile 83

SecureWorld News

DECEMBER 23, 2020

Pegasus spyware is a phone surveillance solution that enables customers to remotely exploit and monitor devices. The company sells its surveillance technology to governments around the world. And watchdog groups say its products are often found to be used in surveillance abuses.

Spyware 52

Spyware Surveillance Hacking Media 52

Malwarebytes

DECEMBER 7, 2021

For initial access, the DCU noticed Nickel using older, and patched, vulnerabilities in Microsoft products like Microsoft Exchange and SharePoint, but also compromised VPN suppliers or obtained stolen credentials. For lateral movement the DCU saw Nickel actors using Mimikatz, WDigest, NTDSDump, and other password dumping tools during attacks.

Hacking 94

Hacking Malware Surveillance Data collection 94

Malwarebytes

DECEMBER 7, 2021

For initial access, the DCU noticed Nickel using older, and patched, vulnerabilities in Microsoft products like Microsoft Exchange and SharePoint, but also compromised VPN suppliers or obtained stolen credentials. For lateral movement the DCU saw Nickel actors using Mimikatz, WDigest, NTDSDump, and other password dumping tools during attacks.

Hacking 74

Hacking Malware Surveillance Data collection 74

Krebs on Security

FEBRUARY 18, 2019

government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. Image: APNIC.

DNS 271

DNS Internet Internet Government 271