Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking 271

Hacking Social Engineering Phishing Scams 271

Krebs on Security

MARCH 31, 2020

PT Monday evening, Escrow.com’s website looked radically different: Its homepage was replaced with a crude message in plain text: The profanity-laced message left behind by whoever briefly hijacked the DNS records for escrow.com. Running a reverse DNS lookup on this 111.90.149[.]49 Image: Escrow.com.

Phishing 291

Phishing DNS Social Engineering Accountability 291

Security Affairs

AUGUST 27, 2019

According to Dragos, the Hexane group has been active since at least the middle of 2018, it intensified its activity since early 2019 with an escalation of tensions within the Middle East. Lyceum was observed using password spraying and brute-force attacks to compromise email accounts of targeted individuals.

DNS 82

DNS Passwords Penetration Testing Social Engineering 82

SecureList

JANUARY 13, 2022

We reported about the first variant of such software back in 2018, but there were many other samples to be found, which was later reported by the US CISA (Cybersecurity and Infrastructure Security Agency) in 2021. This lets them mount high-quality social engineering attacks that look like totally normal interactions. coinbigex[.]com.

Cryptocurrency 134

Cryptocurrency Malware Accountability Banking 134

eSecurity Planet

DECEMBER 3, 2021

Normally account take overs are due to insecure passwords or recovery options, this is definitely something different. Russian software engineer Eugene Kaspersky’s frustration with the malware of the 80s and 90s led to the founding of antivirus and cybersecurity vendor Kaspersky Lab. jaysonstreet) March 3, 2018.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

eSecurity Planet

MARCH 25, 2022

Remote desktop software’s sensitive influence over other devices means identity and access management (IAM), password security , and multi-factor authentication are critical for risk management. Between 2016 and 2018, the malware strain SamSam made brute force RDP attacks an integral part of its attacks on several public organizations.

VPN 120

VPN Software Authentication Encryption 120

SecureList

APRIL 27, 2022

We had initially analyzed this Delphi malware in April 2018. We recently identified additional malicious activities, conducted by Tomiris operators since at least October 2021, against government, telecoms and engineering organizations in Kyrgyzstan, Afghanistan and Russia. Final thoughts.

Malware 137

Malware Firmware Government Phishing 137