Ebury botnet malware infected 400,000 Linux servers since 2009
Bleeping Computer
MAY 14, 2024
A malware botnet known as 'Ebury' has infected almost 400,000 Linux servers since 2009, with roughly 100,000 still compromised as of late 2023.
2009 Related Topics 
China Says U.S. Hacking Huawei Since 2009
SecureWorld News
SEPTEMBER 28, 2023
National Security Agency (NSA) of infiltrating Huawei servers since as early as 2009. These allegations, which were made via China's official WeChat account , claim that the Tailored Access Operations (TAO) unit of the NSA conducted cyberattacks in 2009 and maintained continuous surveillance on Huawei's servers.
Hacking 
96
96 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Hackers Expose Russian FSB Cyberattack Projects
Schneier on Security
JULY 22, 2019
More nation-state activity in cyberspace, this time from Russia : Per the different reports in Russian media, the files indicate that SyTech had worked since 2009 on a multitude of projects since 2009 for FSB unit 71330 and for fellow contractor Quantum.
Media 236
236 
A Self-Enforcing Protocol to Solve Gerrymandering
Schneier on Security
FEBRUARY 2, 2024
In 2009, I wrote : There are several ways two people can divide a piece of cake in half. One way is to find someone impartial to do it for them. This works, but it requires another person. This also works, but still requires another person—at least to resolve disputes.
344 
Real-Time Attacks Against Two-Factor Authentication
Schneier on Security
DECEMBER 14, 2018
I wrote about this exact attack in 2005 and 2009. In the event targets' accounts were protected by 2fa, the attackers redirected targets to a new page that requested a one-time password. This isn't new.
Authentication 210
210 
Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years
The Hacker News
MAY 15, 2024
A malware botnet called Ebury is estimated to have compromised 400,000 Linux servers since 2009, out of which more than 100,000 were still compromised as of late 2023. The findings come from Slovak cybersecurity firm ESET, which characterized it as one of the most advanced server-side malware campaigns for financial gain.
Malware 140
140 
Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals
The Hacker News
DECEMBER 1, 2021
organizations and financial institutions between 2009 to 2015, has received a 60-month prison sentence. A Russian national charged with providing bulletproof hosting services for cybercriminals, who used the platform to spread malware and attack U.S.
Malware 144
144 Malware 144
144 
FBI's Most-Wanted Zeus and IcedID Malware Mastermind Pleads Guilty
The Hacker News
FEBRUARY 17, 2024
to his role in two different malware schemes, Zeus and IcedID, between May 2009 and February 2021. A Ukrainian national has pleaded guilty in the U.S. Vyacheslav Igorevich Penchukov (aka Vyacheslav Igoravich Andreev, father, and tank), 37, was arrested by Swiss authorities in October 2022 and extradited to the U.S.
Malware 133
133 Malware 133
133 
Patch issued to tackle critical security issues present in Dell driver software since 2009
Zero Day
MAY 4, 2021
Five critical security issues have been discovered.
Software 98
98 Software 98
98 
China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers
The Hacker News
SEPTEMBER 21, 2023
of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009, amid mounting geopolitical tensions between the two countries. China's Ministry of State Security (MSS) has accused the U.S. In a message posted on WeChat, the government authority said U.S.
Surveillance 140
140 
Science Fiction Writers Helping Imagine Future Threats
Schneier on Security
JULY 23, 2019
Last month, at the 2009 Homeland Security Science & Technology Stakeholders Conference in Washington D.C., Science fiction writers are creative, and creativity helps in any future scenario brainstorming. But please, keep the people who actually know science and technology in charge.
Technology 220
220 
Top Zeus Botnet Suspect “Tank” Arrested in Geneva
Krebs on Security
NOVEMBER 15, 2022
Gary Warner , director of research in computer forensics at the University of Alabama at Birmingham, noted in his blog from 2014 that Tank told co-conspirators in a JabberZeus chat on July 22, 2009 that his daughter, Miloslava , had been born and gave her birth weight. tank: Levak was written there. lucky12345: It’s f *d.
Banking 309
309 
Report: Missouri Governor’s Office Responsible for Teacher Data Leak
Krebs on Security
FEBRUARY 22, 2022
She stated in 2009, policy was changed to move all information technology services to the Office of Administration.” . “I asked her if the ITSD was within the Office of Administration, or if DESE had their on-information technology section, and she indicated it was within the Office of Administration.
Education 360
360 Microsoft Buys Corp.com
Schneier on Security
APRIL 9, 2020
We released a security advisory in June of 2009 and a security update that helps keep customers safe. "To help in keeping systems protected we encourage customers to practice safe security habits when planning for internal domain and network names," the statement reads. "We
DNS 279
279 
Canada Charges Its “Most Prolific Cybercriminal”
Krebs on Security
DECEMBER 8, 2021
Darkode was taken down in 2015 as part of an FBI investigation sting operation , but screenshots of the community saved by this author show that DCReavers2 was already well known to the Darkode founders when his membership to the forum was accepted in May 2009. DCReavers2 was just the 22nd account to register on the Darkode cybercrime forum.
Cybercrime 314
314 
Why Malware Crypting Services Deserve More Scrutiny
Krebs on Security
JUNE 21, 2023
Those records indicate the user Kerens registered on Verified in March 2009 from an Internet address in Novosibirsk, a city in the southern Siberian region of Russia. Intel 471 reports that gumboldt@gmail.com was used in 2009 to register a user by the nickname “ Kolumb ” on the Russian hacking forum Antichat.
Malware 251
251 
15-Year-Old Ebury Botnet Compromised 400,000 Linux Servers
Security Boulevard
MAY 15, 2024
The operators behind the Ebury server-side malware botnet have been doing business since at least 2009 and, according to the threat researchers who have been tracking it for the last decade, are stronger and more active than ever. The malware has compromised at least 400,000 Linux servers over the past 15 years, with about 100,000.
Malware 121
121 
U.S. Internet Leaked Years of Internal, Customer Emails
Krebs on Security
FEBRUARY 14, 2024
For example, the timestamp for Mr. Carter’s inbox reads August 2009, but clicking that inbox revealed messages as recent as Feb. Wireless employees were published in clear text on the Internet. The timestamps listed do not appear to be accurate somehow. Within minutes of that notification, U.S.
Internet 351
351 
RockYou2024 compilation containing 10 billion passwords was leaked online
Security Affairs
JULY 8, 2024
The compilation has been named ‘RockYou2021’ by the forum user, presumably in reference to the RockYou data breach that occurred in 2009, when threat actors hacked their way into the social app website’s servers and got their hands on more than 32 million user passwords stored in plain text. RockYou2021 had 8.4
Passwords 137
137 
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
Threatpost
MAY 4, 2021
The privilege-escalation bug remained hidden for 12 years and has been present in all Dell PCs, tablets and notebooks shipped since 2009.
Risk 116
116 Risk 116
116 
GUEST ESSAY: Stolen logons, brute force hacking get used the most to breach web, email servers
The Last Watchdog
AUGUST 29, 2022
Poor password practices are responsible for most incidents involving web applications and data breaches since 2009. 2009 DBIR page 17) . •Brute forcing passwords (10 percent) came in third. Backdoors or C2 (10 percent) were the fourth runner-ups. It’s not just a web thing. It’s an e-mail thing too.
Hacking 201
201 
The Now-Defunct Firms Behind 8chan, QAnon
Krebs on Security
OCTOBER 22, 2020
” It appears that Centauri hasn’t filed any business records with the state since 2009, and the state subsequently suspended the company’s license to do business in Aug. According to the California Secretary of State, Centauri’s status as a business in the state is “suspended.”
Internet 305
305 
Facebook's '10 Year Challenge' Is Just a Harmless Meme—Right?
WIRED Threat Level
JANUARY 15, 2019
Opinion: The 2009 vs. 2019 profile picture trend may or may not have been a data collection ruse to train its facial recognition algorithm. But we can't afford to blithely play along.
Data collection 112
112 Data collection 112
112 
BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide
The Hacker News
MAY 5, 2021
PC maker Dell has issued an update to fix multiple critical privilege escalation vulnerabilities that went undetected since 2009, potentially allowing attackers to gain kernel-mode privileges and cause a denial-of-service condition. The issues, reported to Dell by researchers from SentinelOne on Dec. sys" that comes pre-installed on
Firmware 119
119 Firmware 119
119 
Ask Fitis, the Bear: Real Crooks Sign Their Malware
Krebs on Security
JUNE 1, 2023
According to cyber intelligence firm Intel 471 , Megatraffer has been active on more than a half-dozen crime forums from September 2009 to the present day. In November 2009, Fitis wrote, “I am the perfect criminal. WHO IS MEGATRAFFER? And on most of these identities, Megatraffer has used the email address 774748@gmail.com.
Malware 283
283 
Breach reporting required for health apps and devices, FTC says
CSO Magazine
SEPTEMBER 23, 2021
The Federal Trade Commission (FTC) commissioners, in a split-vote (3-2), issued a policy statement on September 15, requiring both health applications and connected devices to comply with the “ Health Breach Notification Rule (August 2009).”
Insurance 120
120 
Dell fixes exploitable holes in its own firmware update driver – patch now!
Naked Security
MAY 5, 2021
These bugs date back to 2009, and they could give crooks who are already in your network access to sysadmin superpowers.
Firmware 102
102 Firmware 102
102 
Happy 14th Birthday, KrebsOnSecurity!
Krebs on Security
DECEMBER 29, 2023
As of this birthday, I’ve officially been an independent investigative journalist for longer than I was a reporter for The Washington Post (1995-2009). But I do want to thank you all for your continued readership, encouragement and support, without which I could not do what I do.
Phishing 257
257 
Hundreds of Millions of Dell Computers Potentially Vulnerable to Attack
Dark Reading
MAY 4, 2021
Hardware maker has issued an update to fix multiple critical privilege escalation vulnerabilities that have gone undetected since 2009.
100 
Hacking Google: Lessons From the Security Team, Part Two
Security Boulevard
NOVEMBER 4, 2022
When it was launched in 2009, the Operation Aurora cyberattack was one of the first major nation-state cyberattacks aimed at private industry. Its impact forced organizations to take a hard look at their cybersecurity systems.
Hacking 115
115 
Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals
The Hacker News
OCTOBER 21, 2021
for offering "bulletproof hosting" services to cybercriminals, who used the technical infrastructure to distribute malware and attack financial institutions across the country between 2009 to 2015. Two Eastern European nationals have been sentenced in the U.S.
Malware 106
106 Malware 106
106 
5 Things to know about the UK’s National Cyber Security Centre (NCSC)
The State of Security
MAY 17, 2022
#1 The history of the National Cyber Security Centre The UK’s first cybersecurity strategy was launched in 2009 and outlined that whatever the shape of the cybersecurity mission, it made no sense to silo it away from other aspects of national security.
Cybersecurity 109
109 
BrandPost: Nation States, Cyberconflict, and the Web of Profit.
CSO Magazine
JUNE 11, 2021
Analysis of over 200 cybersecurity incidents associated with nation state activity since 2009 also shows the enterprise is now the most common target (35%), followed by cyberdefence (25%), media and communications (14%), government bodies and regulators (12%), and critical infrastructure (10%).
Media 120
120 
More than 16,000 Ivanti VPN gateways still vulnerable to RCE CVE-2024-21894
Security Affairs
APRIL 6, 2024
Most of the vulnerable systems are in the US (4686 at the time of this writing), followed by Japan (2009), and UK (1032). Shadowserver researchers have scanned the Internet for instances vulnerable to CVE-2024-21894 and reported that about 16,500 are still vulnerable.
VPN 137
137 
BrandPost: Aligning security and business strategies
CSO Magazine
FEBRUARY 16, 2023
During the 2008–2009 Global Financial Crisis (GFC) and subsequent recession, researchers noted that cybercrime rates increased dramatically. However, there is some evidence that macroeconomic conditions can impact cybercrime. Their report focused exclusively on financial cybercrime, including identity theft.
Identity Theft 115
115 
Microsoft Buys Corp.com So Bad Guys Can’t
Krebs on Security
APRIL 7, 2020
“We released a security advisory in June of 2009 and a security update that helps keep customers safe. . “To help in keeping systems protected we encourage customers to practice safe security habits when planning for internal domain and network names,” the statement reads.
DNS 338
338 
RSA-240 Factored
Schneier on Security
DECEMBER 3, 2019
The previous records were RSA-768 (768 bits) in December 2009 [2], and a 768-bit prime discrete logarithm in June 2016 [3]. It is the first time that two records for integer factorization and discrete logarithm are broken together, moreover with the same hardware and software.
Software 148
148 
Who and What is Behind the Malware Proxy Service SocksEscort?
Krebs on Security
JULY 25, 2023
SocksEscort began in 2009 as “ super-socks[.]com According to cyber intelligence firm Intel 471 , the very first “SSC” identity registered on the cybercrime forums happened in 2009 at the Russian language hacker community Antichat , where SSC registered using the email address adriman@gmail.com.
Malware 211
211 
Cisco Pays $8.6M in First False Claims Suit for Vulnerabilities in Security Product
Dark Reading
AUGUST 1, 2019
A security consultant reported vulnerabilities in Cisco's Video Surveillance Manager in 2009 - but the company ignored the issues and fired the consultant.
Surveillance 89
89 Surveillance 89
89 
Employee Password Security in the Healthcare Sector
Security Boulevard
AUGUST 30, 2021
According to the Health Insurance Portability and Accountability Act (HIPAA) Journal, over the past eleven years (2009-2020) there have been more than 3,705 healthcare data breaches impacting more than 268 million medical records. The healthcare industry sector is increasingly the target of cybercriminals.
Healthcare 104
104 
Spam Kingpin Peter Levashov Gets Time Served
Krebs on Security
JULY 20, 2021
One was Alan Ralsky , an American spammer who was convicted in 2009 of paying Severa and other spammers to promote pump-and-dump stock scams. In this paid ad from 2004, Severa lists prices to rent his spam botnet. Early in his career, Severa worked very closely with two major purveyors of spam.
Antivirus 332
332 
Okta CEO: Here’s where cloud identity management is headed
CSO Magazine
FEBRUARY 15, 2021
Todd McKinnon founded Okta in 2009 on the outrageous notion that business user identity could be managed in the cloud. In an in-depth 2013 interview on InfoWorld , McKinnon, the former VP of engineering for Salesforce, argued that mass migration to the public cloud was unstoppable.
Engineering 98
98 Engineering 98
98 
GUEST ESSAY: Advanced tools are ready to help SMBs defend Microsoft 365, Google Workspace
The Last Watchdog
FEBRUARY 7, 2023
Founded in 2009, Vade supplies AI-based cybersecurity technologies that help companies defend many types of email-borne attacks. It’s time for businesses small and large to level up their email security solutions with tools that can learn from and predict the bad guys’ next moves – not just move suspicious emails to spam.
Small Business 222
222 
Backdoor in XZ Utils That Almost Happened
Schneier on Security
APRIL 11, 2024
He has been in charge of XZ Utils since he wrote it in 2009. Many open-source libraries, like XZ Utils, are maintained by volunteers. In the case of XZ Utils, it’s one person, named Lasse Collin. And, at least in 2022, he’s had some “ longterm mental health issues. ” (To be clear, he is not to blame in this story. This is a systems problem.)
Software 352
352 
Let's personalize your content