Security Affairs

OCTOBER 19, 2024

North Korea-linked group APT37 exploited an Internet Explorer zero-day vulnerability in a supply chain attack. “Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.”

Internet 144

Internet Internet Engineering Malware 144

Security Affairs

MARCH 1, 2020

Ireland is a strategic place for intercontinental communications because it represents the place where undersea cables which carry internet traffic connect to Europe. Despite the Cable & Wireless bought by Vodafone in July 2012, the Nigella surveillance access point remained active as of April 2013. Source [link].

Wireless 145

Wireless Surveillance Telecommunications Advertising 145

Security Affairs

DECEMBER 4, 2024

Since 2012, Crimenetwork facilitated the sale of illegal goods and services, including drugs, forged documents, hacking tools, and stolen data. Germany’s largest crime marketplace, Crimenetwork, has been shut down, and an administrator has been arrested.

Cybercrime 122

Cybercrime Cryptocurrency Hacking Internet 122

Security Affairs

FEBRUARY 17, 2020

The Russian government asks all Internet service providers and VPN providers operating in the country to provide information about their users. The blockage of the Tutanota service has been verified by the OONI Explorer, an open data resource on internet censorship around the world. reported the Associated Press.

Encryption 122

Encryption VPN Government Internet 122

Security Affairs

JANUARY 31, 2021

Shadowsocks is a free and open-source encryption protocol project, widely used in China to circumvent Internet censorship. It was created in 2012 by a Chinese programmer named “ clowwindy “, and multiple implementations of the protocol have been made available since.

Firewall 145

Firewall Surveillance Internet Internet 145

The Last Watchdog

JUNE 21, 2020

The above-mentioned AIDS Trojan hailing from the distant pre-Internet era was the progenitor of the trend, but its real-world impact was close to zero. FBI spoofs 2012 – 2013. It surfaced in November 2012 and was making thousands of victims a day. None of these early threats went pro.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

JULY 11, 2024

An attacker can exploit the flaw to bypass protections for a previous vulnerability, CVE-2012-1823, using specific character sequences. The malware was designed to targets Internet of Things (IoT) devices and Linux servers for cryptomining and DDoS purposes. The bot also connects to the command and control domain p.findmeatthe[.]top,

Malware 142

Malware DDOS Internet Internet 142

Security Affairs

AUGUST 18, 2021

North Korea-linked InkySquid group leverages two Internet Explorer exploits to deliver a custom implant in attacks aimed at a South Korean online newspaper. APT37 has been active since at least 2012, it mainly targeted government, defense, military, and media organizations in South Korea. ” reads the post published by Volexity.

Internet 128

Internet Internet Media Engineering 128

Security Affairs

DECEMBER 6, 2022

Curry and his team scanned the internet to find domains owned by SiriusXM and perform reverse-engineering of the mobile apps of SiriusXM customers to figure out how the service works. The experts began investigating the domain “ [link] ” handling services for enrolling vehicles in the SiriusXM remote management functionality.

Hacking 138

Hacking Engineering Mobile Internet 138

Security Affairs

MARCH 10, 2020

Necurs botnet is one of the largest spam botnet , it has been active since at least 2012 and was involved in massive campaigns spreading malware such as the Locky ransomware , the Scarab ransomware , and the Dridex banking Trojan. The Necurs botnet is active since at least 2012, it is operated by the cybercrime gang tracked as TA505.

Advertising 115

Advertising Malware Cybercrime Government 115

Security Affairs

JULY 29, 2021

The flaw resides in Microsoft Hyper-V’s network switch driver ( vmswitch.sys ), it affects Windows 10 and Windows Server 2012 through 2019. Such OID requests include, for example, hardware offloading, Internet Protocol security (IPsec) and single root I/O virtualization (SR-IOV) requests.”

Internet 140

Internet Internet Hacking Ransomware 140

Security Affairs

JULY 19, 2021

This isn’t the first attack suffered by the Oil giant, in 2012 Saudi Aramco suffered a major cyber attack, alleged nation-state actors used the Shamoon wiper to destroy over 30,000 computers of the company. ZeroX is also offering a 1 GB sample for US$2,000 that could be paid in Monero (XMR) virtual currency.

Engineering 145

Engineering Telecommunications Data breaches Wireless 145

Schneier on Security

JUNE 6, 2023

Could agents take control of my computer over the Internet if they wanted to? Those of us in the information security community had long assumed that the NSA was doing things like this. This was in 2016, when Poitras built a secure room in New York to house the documents. Very probably. Definitely. And Edward Snowden?

Surveillance 344

Surveillance Computers and Electronics Government Encryption 344

Security Affairs

SEPTEMBER 8, 2019

Ministry of Internal Affairs announced that Belarusian police have seized and shutdown XakFor, one of the largest hacking forums on the internet. XakFor has been active since 2012, most of its visitors were Russian-speaking hackers and crooks. Belarusian police have seized the servers of XakFor (xakfor[.]net),

Advertising 104

Advertising Malware Cybercrime Hacking 104

Security Affairs

DECEMBER 1, 2022

ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers revealed that the APT group leveraged a zero-day vulnerability in Adobe Flash Player to deliver malware to South Korean users. The Dolphin backdoor was used as the final payload of a multistage watering-hole attack in early 2021.

Accountability 138

Accountability Malware Cyber Attacks Media 138

Security Affairs

MARCH 27, 2020

The vulnerabilities could not be exploited through Internet Explorer or the Outlook preview pane. The security patches developed by 0patch address the issues for Windows 7 and Windows Server 2008 R2 without ESU. and Windows Server 2012. The flaws impact all supported versions of Windows.

Advertising 142

Advertising Risk Internet Internet 142

Security Affairs

MARCH 10, 2023

The NetWire Remote Access Trojan (RAT) is available for sale on cybercrime forums since 2012, it allows operators to steal sensitive data from the infected systems. DomainTools further shows this email address was used to register one other domain in 2012: wwlabshosting[.]com, ” reads the press release published DoJ.

Malware 98

Malware Cybercrime Data breaches Internet 98

Security Affairs

FEBRUARY 10, 2022

Technological advancements have come a long way – from when internet utility was very limited to when internet connection was achieved only through internet protocol (IP) version 4 (IPv4) addresses to this modern age where IPv6 is the next big thing. This helps to provide necessary security and anonymity for the internet user.

Internet 102

Internet Internet Data privacy Technology 102

Security Affairs

AUGUST 14, 2019

The list of flaws addressed by the tech giant doesn’t include zero-days or publicly disclosed vulnerabilities, 29 issues were rated as ‘Critical’ and affect Microsoft’s Edge and Internet Explorer web browsers, Windows, Outlook and Office. Unlike BlueKeep, the flaws cannot be exploited via the Remote Desktop Protocol (RDP).

Authentication 109

Authentication Advertising Internet Internet 109

Daniel Miessler

FEBRUARY 1, 2020

People talk about it like it’s the Internet Demogorgon. and in 2012 the New York Times said they had the largest commercial database on customers. Acxiom collects, analyzes and sells customer and business information used for targeted advertising campaigns. Among those, Acxiom is particularly interesting.

Advertising 103

Advertising InfoSec Password Management Education 103

Security Affairs

JANUARY 11, 2021

Andrei Tyurin is accused of being the mastermind of the organization that targeted the US financial institution from 2012 to mid-2015. and foreign companies in furtherance of various criminal enterprises operated by Shalon and his co-conspirators, including unlawful internet gambling businesses and international payment processors.

Hacking 129

Hacking Marketing Identity Theft Banking 129

Security Affairs

JUNE 13, 2022

Researchers from Palo Alto Networks defined the PingPull RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications. However, the group has been active at least since 2012.

Telecommunications 98

Telecommunications Government Internet Internet 98

Security Affairs

NOVEMBER 8, 2022

“JAMES ZHONG pled guilty to committing wire fraud in September 2012 when he unlawfully obtained over 50,000 Bitcoin from the Silk Road dark web internet marketplace. The man funded nine fraudulent accounts with an initial deposit of 200 to 2,000 bitcoin and then triggered 140 withdrawal transactions in rapid succession.

Cryptocurrency 98

Cryptocurrency Internet Internet Hacking 98

Security Affairs

NOVEMBER 19, 2020

When targeted by a threat actor, the honeypot system uses their intrusion attempt to gain valuable information about the attacker. In order to capture malware and monitor cyberattacks across the internet in real-time, we run multiple honeypot systems that are contained in isolated execution environments, otherwise known as containers.

DDOS 145

DDOS IoT Malware Internet 145

SC Magazine

APRIL 26, 2021

As critical infrastructure facilities increasingly converge their IT and OT systems, visibility into traditionally isolated operational systems is turning into a key security challenge. Recognizing that the ABCWUA is “ahead of a lot of the water authorities” across the U.S.

CISO 82

CISO IoT VPN InfoSec 82

Security Affairs

FEBRUARY 16, 2023

Below is the list of vulnerabilities exploited by V3G4: CVE-2012-4869 : FreePBX Elastix Remote Command Execution Vulnerability Gitorious Remote Command Execution Vulnerability CVE-2014-9727 : FRITZ!Box

IoT 98

IoT DDOS Encryption Malware 98

Security Affairs

SEPTEMBER 21, 2019

The bad side of all of these adventure is, now I have my research materials scattering around all over the internet during these past three years (smile).

Malware 105

Malware Advertising Security Awareness Media 105

SiteLock

AUGUST 27, 2021

Department of Justice released a report that revealed some weaknesses in Next Gen Cyber, The Federal Bureau of Investigation’s cyber security program begun in 2012. Cybersecurity Bill Could ‘Sweep Away’ Internet Users’ Privacy, Agency Warns. China to Embed Internet Police in Tech Firms. Last week, the U.S.

Cybersecurity 52

Cybersecurity Internet Internet Banking 52

Security Affairs

FEBRUARY 26, 2021

Our online security team has uncovered a massive data breach originating from a misconfigured Amazon Bucket, which was operated by a Turkish Legal advising company, INOVA YÖNETIM & AKTÜERYAL DANI?MANLIK. Inova has been operating since 2012 and has handled thousands of cases since then. How and Why We Discovered the Breach.

Data breaches 131

Data breaches Insurance Identity Theft Education 131

Security Affairs

MAY 16, 2023

MustangPanda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. Past campaigns were focused on Asian countries, including Taiwan, Hong Kong, Mongolia, Tibet, and Myanmar.

Firmware 98

Firmware Encryption Government Malware 98

Security Affairs

NOVEMBER 9, 2019

In June 2018, experts at Kaspersky were investigating attacks against government and military entities in South and Southeast Asian countries, The experts tracked the campaign as EasternRoppels, they speculate it may have started as far back as 2012. The malware can also get proxy settings from Internet Explorer.

Encryption 72

Encryption Passwords Malware Software 72

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52

Security Affairs

MARCH 2, 2019

The command highlighted in Figure 2 is an instruction responsible to download an MSI file from the C2 server ( hxxp://195.123.209.169/control ), geolocated in Latvia and with ports 80 and 3389 opened to the Internet. Figure 3: [1] Suspicious Microsoft Office files and C2 server IP address; and [2], geolocation and C2 ports.

Malware 109

Malware Antivirus Technology Phishing 109

CyberSecurity Insiders

SEPTEMBER 8, 2021

The Certified Information Systems Security Professional (CISSP) certification is considered to be the gold standard in information security. Those doors lead to many different types of positions and opportunities, thus making the information security community dynamic and multifaceted.

Computers and Electronics 40

Computers and Electronics Architecture Education Encryption 40

ForAllSecure

SEPTEMBER 10, 2021

Vamosi: So in this episode, we're going to be talking a lot about Capture the Flag, not the children's game of course, but the information security game, we're going to talk about the Jeopardy style CTF, which like the TV game show has six categories of questions, with varying degrees of difficulty. Technical logically accessible.

Hacking 52

Hacking Education InfoSec Engineering 52