The Last Watchdog

JUNE 21, 2020

RaaS rollout 2015 – 2018. The GandCrab RaaS that appeared in early 2018 was one of the last high-profile threats targeting individuals on a large scale. It vanished from the radar in June 2018, when the ransomware plague took another sharp turn. Targeting enterprises Late 2018 – present day.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

NOVEMBER 26, 2019

Kaspersky has addressed several vulnerabilities in the web protection features implemented in its antivirus solutions, including Internet Security, Total Security, Free Anti-Virus , Security Cloud, and Small Office Security products. As in: under some circumstances, antivirus would still crash.

Antivirus 120

Antivirus Advertising Password Management Passwords 120

The Last Watchdog

JANUARY 28, 2019

Worldwide spending on information security products and services rose to $114 billion in 2018, up from $102 billion in 2017, an increase of 12.4 Each of us have a responsibility to embrace best privacy and security practices. To be sure, it’s not as if the good guys aren’t also innovating.

Passwords 196

Passwords Password Management Internet Internet 196

Security Affairs

JANUARY 31, 2020

“In July 2018, we succeeded in decrypting encrypted communication with an infected server and an external server that was performing unauthorized communication, and stored it on our internal server for information sharing with other departments used by our defense business division 27,445 files were found to have been accessed illegally.

Advertising 136

Advertising Data breaches Antivirus Encryption 136

Security Affairs

APRIL 30, 2021

The weaponized RTF documents generated with the exploit builder are able to trigger the CVE-2017-11882 , CVE-2018-0798 , CVE-2018-0802 vulnerabilities in Microsoft’s Equation Editor. This tool was widely adopted by several China-linked threat actors, including Tick , Tonto Team and TA428.

Phishing 141

Phishing Malware Encryption Antivirus 141

Security Affairs

APRIL 19, 2021

The antivirus company Avast analyzed the case of a simple malware dubbed HackBoss and how it allowed its operators to earn more $560K worth of cryptocurrency since November 2018. The tools were published on a Telegram channel named Hack Boss that was created on November 26, 2018, and has over 2,500 subscribers.

Cryptocurrency 145

Cryptocurrency Hacking Malware Banking 145

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The second half of 2018 saw a drop in the number of malicious programs downloaded via browsers reaching its minimum at less than 5%, while in the first half of 2019 only every 19 th download was initiated via means other than email.

Ransomware 99

Ransomware Antivirus Malware Banking 99

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts pointed out that the number of infected systems could be far greater because data provided by AVAST are only related to systems running their antivirus solution.

DNS 145

DNS Internet Internet Malware 145

Security Affairs

AUGUST 3, 2020

The GandCrab ransomware-as-a-service first emerged from Russian crime underground in early 2018. The authors of the GandCrab RaaS also offers technical support and updates to its members, they also published a video tutorial that shows how the ransomware is able to avoid antivirus detection. Close of GandCrab Ransomware : 1-6-2019.

Ransomware 145

Ransomware Advertising Malware Hacking 145

Security Affairs

NOVEMBER 11, 2021

Beta, D6220, D6400, D7000 CVE-2018-10561, CVE-2018-10562 GPON home routers CVE-2013-3307 Linksys X3000 1.0.03 CVE-2018-10088 XiongMai uc-httpd 1.0.0 BotenaGo was written in Golang (Go) and at the time of the report published by the experts, it had a low antivirus (AV) detection rate (6/62). Beta, R6400 before 1.0.1.18.Beta,

IoT 140

IoT Firmware Malware Wireless 140

Security Affairs

JUNE 11, 2021

million Windows systems between 2018 and 2020. The software includes illegal Adobe Photoshop 2018, a Windows cracking tool, and several cracked games.” Researchers from NordLocker have discovered an unsecured database containing 1.2-terabyte terabyte of stolen data. Threat actors used custom malware to steal data from 3.2

Malware 128

Malware Computers and Electronics Software Financial Services 128

The Last Watchdog

AUGUST 15, 2019

Related: ‘Cyber Pearl Harbor’ happens every day Some 15 months earlier, in March 2018, Atlanta was hit by a similar assault, and likewise refused to pay a $51,000 ransom, eating $17 million in damage. Baltimore refused to pay – choosing, instead, to absorb an estimated $18 million in recovery costs. mayors attending the U.S.

Ransomware 196

Ransomware Internet Internet Hacking 196

Security Affairs

APRIL 2, 2021

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) published a joint alert to warn of attacks carried out by APT groups targeting Fortinet FortiOS servers using multiple exploits. Install and regularly update antivirus and anti-malware software on all hosts.

Government 103

Government Passwords Accountability Firmware 103

Security Affairs

APRIL 4, 2020

The virus avoided detection by antivirus solutions through regular updates from an attacker-controlled command-and-control (C2) infrastructure, and spread through the company’s systems, causing network outages and shutting down essential services for nearly a week.”

Antivirus 144

Antivirus Malware Phishing Advertising 144

Security Affairs

JULY 10, 2020

Evilnum threat actor was first spotted in 2018 while using the homonym malware. Experts observed several variants of the script since May 2018, having different server-side code for the C&C and supporting different commands. Threat actors used a dedicated C2 server for each component that is installed via manual commands.

eCommerce 134

eCommerce Advertising Malware Spyware 134

Krebs on Security

JANUARY 6, 2020

” Security news site Bleeping Computer reported on the T-Systems Ryuk ransomware attack on Dec. When we looked at this in retrospect, during these three days the cybercriminals slowly compromised the entire network, disabling antivirus, running customized scripts, and deploying ransomware. Department of Homeland Security.

Passwords 255

Passwords Ransomware Password Management Malware 255

CyberSecurity Insiders

JANUARY 6, 2023

With the boom in digital commerce paired with the increased popularity of contactless payment and cloud-stored accountholder data, the Payment Card Industry (PCI) Security Standards Council decided to re-evaluate the existing standard. Test security of systems and networks regularly. The current version, PCI DSS v3.2.1,

Antivirus 138

Antivirus Retail Software Accountability 138

Security Affairs

JULY 9, 2019

The malware is able to log the users’ keystrokes, collect information through hooking, access clipboard content, and monitor the keystate. The Astaroth Trojan was first spotted by security firm Cofense in late 2018 when it was involved in a campaign targeting Europe and Brazil.

Antivirus 105

Antivirus Malware Advertising Security Intelligence 105

Security Affairs

MAY 27, 2019

A warning message from endpoint antivirus software when users try to visit malicious site redirected by Joomla and WordPress sites. htacccess file, including, in October 2018 a security researcher discovered a zero-day vulnerability, tracked as CVE-2018-9206 , in older versions of the jQuery File Upload plugin since 2010.

Advertising 106

Advertising Malware Software Antivirus 106

Security Affairs

JULY 8, 2020

The name Fxmsp refers a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information. Since March 2019, Fxmsp announced in cybercrime forums the availability of information stolen from major antivirus companies located in the U.S.

Hacking 112

Hacking Antivirus Advertising Cybercrime 112

Security Affairs

JANUARY 8, 2021

“The loader decrypts the malicious malware and executes it using memfd create (as described in this blog in 2018). “The authors use the open source tool Ezuri, to load its previously seen payloads and avoid antivirus detections on the file.” ” reads the post published by AT&T’s Alien Labs. .

Malware 145

Malware Encryption Passwords Antivirus 145

Security Affairs

NOVEMBER 3, 2022

The DisableAntiSpyware parameter allows disabling the Windows Defender Antivirus in order to deploy another security solution. In the background, the malware disables Windows Defender, EDR, and antivirus tools before dropping the ransomware payload.

Cybercrime 109

Cybercrime Ransomware Antivirus Malware 109

Security Affairs

JULY 25, 2019

“We have discovered a new version of WatchBog—a cryptocurrency-mining botnet operational since late 2018—that we suspect has compromised more than 4,500 Linux machines in newer campaigns taking place since early June.” ” reads a blog post published by Intezer. ” continues the analysis.

Cryptocurrency 102

Cryptocurrency Internet Internet Malware 102

Security Affairs

DECEMBER 29, 2019

The group that has been active since late 2015 targeted businesses worldwide to steal payment card information. In August 2018, three members of the notorious cybercrime gang have been indicted and charged with 26 felony counts of conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft.

Cybercrime 93

Cybercrime Antivirus Identity Theft Advertising 93

Security Affairs

OCTOBER 12, 2019

The group that has been active since late 2015 targeted businesses worldwide to steal payment card information. In August 2018, three members of the notorious cybercrime gang have been indicted and charged with 26 felony counts of conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft. .

Identity Theft 104

Identity Theft Hacking Advertising DNS 104

Security Affairs

JUNE 3, 2022

The analysis of the attack revealed that approximately 80% of the observed victims were using Fortinet appliances, a circumstance that suggests the attackers may have compromised their network by exploiting the CVE-2018-13379 vulnerability.

Security Intelligence 107

Security Intelligence Hacking Antivirus Authentication 107

Security Affairs

NOVEMBER 28, 2020

The name Fxmsp refers a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information. Since March 2019, Fxmsp announced in cybercrime forums the availability of information stolen from major antivirus companies located in the U.S.

Accountability 116

Accountability Cybercrime Hacking Retail 116

Security Affairs

JUNE 23, 2020

Fxmsp gained worldwide fame in May 2019, after it was reported that the networks belonging to leading antivirus software companies had been compromised. On January 17, 2018, the hacker shared exactly how many buyers he had at the time: 18. In late October 2018, Fxmsp and Lampeduza’s activity became threatened. Proxy seller.

Antivirus 104

Antivirus Advertising Hacking Banking 104

Security Affairs

APRIL 10, 2019

That file was delivered via malscam campaigns around the world and its source-code is obfuscated in order to evade antivirus detection and complicate its analysis. The latter leverages the WinRar/Ace vulnerability ( CVE-2018-20250 ) dropping the malware itself into the Windows startup folder.

Banking 93

Banking Malware Antivirus Cyber threats 93

eSecurity Planet

DECEMBER 30, 2020

To ease these burdens, SECaaS and SOCaaS vendors have emerged as cloud-based security as a service that can collect, analyze, and correlate your information from diverse systems and applications — turning former headaches into actionable information security intelligence. Security as a Service (SECaaS) .

Penetration Testing 117

Penetration Testing Cybersecurity Antivirus Network Security 117

Security Affairs

OCTOBER 15, 2019

The cybercrime organization was first spotted in April 2018 by researchers at Cisco Talos, earlier 2019 researchers from Palo Alto Networks Unit42 found new malware samples used by the Rocke group for cryptojacking that uninstalls from Linux servers cloud security and monitoring products developed by Tencent Cloud and Alibaba Cloud.

Cybercrime 92

Cybercrime DNS Malware Advertising 92

Security Affairs

JULY 19, 2019

The Rubella Macro Builder crimeware kit appeared in the threat landscape on April 2018 and rapidly gained popularity in the cybercriminal underground. The macro might also purposely attempt to bypass endpoint security defenses. .

Malware 98

Malware Social Engineering Advertising Antivirus 98

Security Affairs

JULY 7, 2019

Firefox finally addressed the Antivirus software TLS Errors. Magento fixed security flaws that allow complete site takeover. Sodin Ransomware includes exploit for Windows CVE-2018-8453 bug. A cyberattack took offline websites of the Georgia agency. After 2 years under the radars, Ratsnif emerges in OceanLotus ops.

Scams 70

Scams Advertising Spyware DNS 70

Security Affairs

SEPTEMBER 15, 2019

However, at each step of the infection, this campaign uses trusted sources and the end user to help advance to the next stage, ultimately leading to an eventual exfiltration of sensitive information.” According to the experts, LOLbins are very effecting in evading antivirus software. .

Phishing 107

Phishing Malware Network Security Encryption 107

Security Affairs

MARCH 2, 2019

This technology is stored in the Workbook OLE stream in Excel 97-2003 format which makes it very difficult to detect and parse by antivirus (AV) engines. doc and.xlm) to evade antivirus detection and bypass spam filters as well. That malware is known as FlawedAmmyy RAT and was discovered by Proofpoint researchers in March 2018.

Malware 109

Malware Antivirus Technology Phishing 109

Security Affairs

DECEMBER 7, 2019

“According to the indictment, Bugat is a malware specifically crafted to defeat antivirus and other protective measures employed by victims. Department of State’s Transnational Organized Crime (TOC) is offering a reward of up to $5 million as part of its Rewards Program for information that could allow arresting Yakubets.

Banking 97

Banking Malware Accountability Cybercrime 97

Security Affairs

MAY 19, 2023

In March 2018, security researchers at Antivirus firm Dr. Web discovered that 42 models of low-cost Android smartphones are shipped with the Android.Triada.231 The only way to remove the threat is to wipe the smartphone and reinstall the OS. 231 banking malware. ” reads the analysis published by Trend Micro.

Mobile 98

Mobile Advertising Malware Cybercrime 98