SecureWorld News

OCTOBER 31, 2024

These botnets, networks of compromised devices, can perform attacks without the user realizing it, overwhelming networks, spreading spam, and even launching DDoS attacks. Warding off zombies : Regularly update device firmware, patch IoT devices, and monitor for unusual traffic patterns.

IoT 113

IoT Phishing DDOS Backups 113

Security Affairs

JUNE 1, 2023

“Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 Mirai botnets are frequently used to conduct DDoS attacks.”

Firewall 98

Firewall Firmware VPN DDOS 98

Security Affairs

DECEMBER 22, 2022

com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December. The most recent variant spotted by Microsoft spreads by exploiting vulnerabilities in Apache and Apache Spark ( CVE-2021-42013 and CVE-2022-33891 respectively) and also supports new DDoS attack capabilities.

IoT 135

IoT DDOS Malware Firmware 135

Security Affairs

MAY 21, 2023

X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S. X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S.

Data breaches 98

Data breaches Cybercrime Ransomware Passwords 98

Security Affairs

NOVEMBER 20, 2021

If you want to also receive for free the newsletter with the international press subscribe here.

Banking 85

Banking Small Business Data breaches Firmware 85

Security Affairs

APRIL 25, 2023

In March, TP-Link released a firmware update to address multiple issues, including this vulnerability. The Mirai botnet that is behind the attacks observed by ZDI is focused on launching DDoS attacks, it has the capability to target Valve Source Engine (VSE). ” continues the report. .” ” continues the report.

DDOS 98

DDOS Engineering Firmware Architecture 98

SecureList

DECEMBER 14, 2022

While the impact of these destructive cyber-attacks paled in comparison to the effects of the kinetic attacks taking place at the same time, it should be noted that this capability could in theory be directed against any country outside of the context of an armed conflict and under the pretense of traditional cybercrime activity.

DDOS 145

DDOS Ransomware Government Energy and Utilities 145

Security Affairs

MAY 14, 2023

ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million

Data breaches 98

Data breaches DDOS Ransomware Artificial Intelligence 98

Security Affairs

JULY 31, 2022

and Blackmatter ransomware U.S. increased rewards for info on North Korea-linked threat actors to $10 million Threat actors leverages DLL-SideLoading to spread Qakbot malware Zero Day attacks target online stores using PrestaShop? and Blackmatter ransomware U.S.

Firmware 98

Firmware Malware Surveillance DDOS 98

Security Affairs

SEPTEMBER 18, 2022

billion Cisco confirms that data leaked by the Yanluowang ransomware gang were stolen from its systems Some firmware bugs in HP business devices are yet to be fixed Albania was hit by a new cyberattack and blames Iran Iran-linked APT42 is behind over 30 espionage attacks. Follow me on Twitter: @securityaffairs and Facebook.

Firmware 102

Firmware DDOS Hacking Healthcare 102

SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). Subsequently, DDoS attacks hit some government websites. Targeted attacks. Lapsus$ group hacks Okta.

Phishing 141

Phishing Spyware Firmware Malware 141

Responsible Cyber

APRIL 8, 2020

As cybercrime has become well-funded and increasingly sophisticated, phishing remains one of the most effective methods used by criminals to introduce malware into businesses. DDoS Attacks. Distributed Denial of Service (DDoS) attacks have overwhelmed some of the largest websites in the world, including Reddit, Twitter, and Netflix.

Cybersecurity 88

Cybersecurity DDOS Small Business Phishing 88

Security Affairs

AUGUST 20, 2021

According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. Organizations using Netgear, Huawei, and ZTE network devices are recommended to keep their firmware up to date and use strong passwords. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IoT 115

IoT DNS Manufacturing Firmware 115

Security Affairs

MARCH 13, 2022

LockBit ransomware group claims to have hacked Bridgestone Americas Attackers use website contact forms to spread BazarLoader malware Russian Internet watchdog Roskomnadzor is going to ban Instagram Ubisoft suffered a cyber security incident that caused a temporary disruption Anonymous hacked Roskomnadzor agency revealing Russian disinformation Open (..)

Data breaches 98

Data breaches Firmware Hacking Ransomware 98

SiteLock

AUGUST 27, 2021

The consequences of which are not only born by companies who are the primary targets of cybercrime. In the three years since those first IoT botnet attacks, threats to IoT security have increased to include crypto-jacking , denial of service (DDoS) attacks, and various other types of malware and online malfeasance.

IoT 98

IoT Spyware VPN Passwords 98

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. These changes allowed the attackers to intercept the original flow of the firmware code and have it executed alongside a sophisticated infection chain.

Malware 144

Malware Firmware Government Phishing 144

SecureList

MAY 10, 2021

Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. In Q1 2021, cybercriminals also found a host of new tools for amplifying DDoS attacks. RDP servers listening on UDP port 3389 were used to amplify DDoS attacks. Alas, not all users of vulnerable programs and devices install updates promptly.

DDOS 132

DDOS Cryptocurrency Media Marketing 132

SecureList

FEBRUARY 16, 2021

After the attacks came to light, the manufacturer promptly released a firmware update for configuring verification of incoming requests. In December, Canada’s Laurentian University reported a DDoS attack. Educational institutions are recommended to use anti-DDoS solutions and strong firewall settings, and partner up with ISPs.

DDOS 144

DDOS Cryptocurrency Marketing Internet 144

Security Affairs

MARCH 19, 2022

In some cases, the gang also threatened and conducted distributed denial-of-service (DDoS) attacks during negotiations. In some cases, AvosLocker negotiators also threaten and launche distributed denial-of-service (DDoS) attacks during negotiations, likely when the victims are not cooperating, to convince them to comply with their demands.

Ransomware 129

Ransomware DDOS Passwords Backups 129

SecureList

NOVEMBER 26, 2021

Apart from Trojanized installers, we also observed infections involving use of a UEFI (Unified Extensible Firmware Interface) and MBR (Master Boot Record) bootkit. In July, the Spanish Ministry of the Interior announced the arrest of 16 people connected to the Grandoreiro and Melcoz (aka Mekotio) cybercrime groups.

Malware 132

Malware Banking Energy and Utilities Accountability 132

eSecurity Planet

OCTOBER 21, 2022

Typically, attackers will use rootkits to spy on users and launch cyber assaults, such as a distributed denial of service ( DDoS ) attack, but the aforementioned software toolbox contains a variety of malicious implements. Firmware rootkits are also known as “hardware rootkits.”.

Malware 73

Malware Adware Spyware Antivirus 73

SecureList

NOVEMBER 25, 2024

For instance, one recent attack observed in this area was a DDoS attack targeting Israel’s credit card payment system. For instance, several days ago, personal data related to Amazon employees that was allegedly leaked over the course of the MOVEit vulnerability attack was leaked on a cybercrime forum.

IoT 116

IoT Energy and Utilities Phishing Cryptocurrency 116

SecureList

NOVEMBER 14, 2023

In May, Ars Technica reported that BootGuard private keys had been stolen following a ransomware attack on Micro-Star International (MSI) in March this year (firmware on PCs with Intel chips and BootGuard enabled will only run if it is digitally signed using the appropriate keys).

Hacking 142

Hacking Energy and Utilities Media Malware 142

SecureList

JULY 28, 2022

In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). We have seen a spike in “hacktivist” attacks, ranging from DDoS attacks to doxxing and hack-and-leak operations.

Malware 145

Malware Firmware Phishing Cryptocurrency 145

Security Affairs

OCTOBER 15, 2023

FBI and CISA published a new advisory on AvosLocker ransomware More than 17,000 WordPress websites infected with the Balada Injector in September Ransomlooker, a new tool to track and analyze ransomware groups’ activities Apple releases iOS 16 update to fix CVE-2023-42824 on older devices Phishing, the campaigns that are targeting Italy A new (..)

DDOS 132

DDOS Data breaches Cybercrime Ransomware 132