Remove Antivirus Remove Encryption Remove Media
article thumbnail

ViperSoftX uses more sophisticated encryption and anti-analysis techniques

Security Affairs

xyz pic.twitter.com/VLhISark8Y — Goldwave (@OGoldwave) March 13, 2023 The variant employed in the campaign supports a more sophisticated encryption method of byte remapping and a monthly rotation of the C2 server. ViperSoftX also checks for active antivirus products running on the machine. c2 arrowlchat[.]com

article thumbnail

Avast researchers released a free BianLian ransomware decryptor for some variants of the malware

Security Affairs

Antivirus firm Avast released a free decryptor for the BianLian ransomware family that allows victims to recover locked files. The BianLian ransomware emerged in August 2022, the malware was employed in attacks against organizations in various industries, including manufactoring, media and entertainment, and healthcare.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IT threat evolution in Q2 2024. Non-mobile statistics

SecureList

The web antivirus reacted to 113.5 The file antivirus blocked over 27 million malicious and unwanted objects. Ransomware Quarterly trends and highlights Law enforcement successes In April 2024, a criminal who developed a packer that was allegedly used by the Conti and Lockbit groups to evade antivirus detection was arrested in Kyiv.

Mobile 81
article thumbnail

Arrest, Seizures Tied to Netwalker Ransomware

Krebs on Security

million last summer in exchange for a digital key needed to unlock files encrypted by the ransomware. The DOJ’s media advisory doesn’t mention the defendant’s age, but a 2015 report in the Gatineau local news website ledroit.com suggests this may not be his first offense. million from the scheme. Powershell build.

article thumbnail

Security Affairs newsletter Round 494 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

article thumbnail

SoNot SoSafe: Android malware disguises itself as secure messaging app

Malwarebytes

This Android app, purported as a secure messaging application that uses end-to-end encryption, is the latest ruse cybercriminals put upon smartphone users, particularly those based in India, to infect their devices with GravityRAT, a piece of malicious software that is known to spy on people and steal their data. How to stay safe.

Malware 129
article thumbnail

2.9 Billion Records Exposed in NPD Breach: How to Stay Safe

eSecurity Planet

Activate multi-factor authentication on all accounts where it’s available, especially on email, banking, and social media platforms. Use Encryption Encryption ensures that your data is unreadable to anyone who doesn’t have the decryption key. Use encrypted messaging apps like Signal or WhatsApp for private communications.