News in the Security category

Malicious KMSPico installers steal your cryptocurrency wallets

Threat actors are distributing altered KMSpico installers to infect Windows devices with malware that steals cryptocurrency wallets.
- Bill Toulas
- December 04, 2021
- 12:06 PM
- 0
The Week in Ransomware - December 3rd 2021 - Seizing Bitcoin

For this week's 'Week in Ransomware' article we have included the latest ransomware news over the past two weeks.
- Lawrence Abrams
- December 03, 2021
- 06:34 PM
- 0
US State Dept employees’ phones hacked using NSO spyware

Apple has warned US Department of State employees that their iPhones have been hacked by unknown attackers using an iOS exploit dubbed ForcedEntry to deploy Pegasus spyware developed by Israeli surveillance firm NSO Group.
- Sergiu Gatlan
- December 03, 2021
- 12:55 PM
- 0
Fake support agents call victims to install Android banking malware

The BRATA Android remote access trojan (RAT) has been spotted in Italy, with threat actors calling victims of SMS attacks to steal their online banking credentials.
- Bill Toulas
- December 03, 2021
- 12:40 PM
- 0
FBI: Cuba ransomware breached 49 US critical infrastructure orgs

The Federal Bureau of Investigation (FBI) has revealed that the Cuba ransomware gang has compromised the networks of at least 49 organizations from US critical infrastructure sectors.
- Sergiu Gatlan
- December 03, 2021
- 12:16 PM
- 0
Researchers discover 14 new data-stealing web browser attacks

IT security researchers from Ruhr-Universität Bochum (RUB) and the Niederrhein University of Applied Sciences have discovered 14 new types of 'XS-Leak' cross-site leak attacks against modern web browsers, including Google Chrome, Microsoft Edge, Safari, and Mozilla Firefox.
- Bill Toulas
- December 03, 2021
- 10:34 AM
- 0
Zoho: Patch new ManageEngine bug exploited in attacks ASAP

Business software provider Zoho urged customers today to update their Desktop Central and Desktop Central MSP installations to the latest available version.
- Sergiu Gatlan
- December 03, 2021
- 10:07 AM
- 0
Phishing actors start exploiting the Omicron COVID-19 variant

Phishing actors have quickly started to exploit the emergence of the Omicron COVID-19 variant and now use it as a lure in their malicious email campaigns.
- Bill Toulas
- December 02, 2021
- 04:34 PM
- 0
Twitter removes 3,400 accounts used in govt propaganda campaigns

Twitter today announced the permanent removal of more than 3,400 accounts linked to governments of six countries running manipulation or spam campaigns.
- Ionut Ilascu
- December 02, 2021
- 03:28 PM
- 1
Hackers use in-house Zoho ServiceDesk exploit to drop webshells

An advanced persistent threat (APT) group that had been exploiting a flaw in the Zoho ManageEngine ADSelfService Plus software has pivoted to leveraging a different vulnerability in another Zoho product.
- Bill Toulas
- December 02, 2021
- 12:37 PM
- 0
Nine WiFi routers used by millions were vulnerable to 226 flaws

Security researchers analyzed nine popular WiFi routers and found a total of 226 potential vulnerabilities in them, even when running the latest firmware.
- Bill Toulas
- December 02, 2021
- 09:30 AM
- 5
New malware hides as legit nginx process on e-commerce servers

eCommerce servers are being targeted with remote access malware that hides on Nginx servers in a way that makes it virtually invisible to security solutions.
- Ionut Ilascu
- December 02, 2021
- 05:12 AM
- 0
Planned Parenthood LA discloses data breach after ransomware attack

Planned Parenthood Los Angeles has disclosed a data breach after suffering a ransomware attack in October that exposed the personal information of approximately 400,000 patients.
- Lawrence Abrams
- December 01, 2021
- 08:18 PM
- 0
Emotet now spreads via fake Adobe Windows App Installer packages

The notorious Emotet malware is now distributed through malicious Windows App Installer packages that pretend to be Adobe PDF software.
- Lawrence Abrams
- December 01, 2021
- 06:43 PM
- 1
Former Ubiquiti dev charged for trying to extort his employer

Nickolas Sharp, a former employee of networking device maker Ubiquiti, was arrested and charged today with data theft and attempting to extort his employer while posing as a whistleblower and an anonymous hacker.
- Sergiu Gatlan
- December 01, 2021
- 06:03 PM
- 0
Bulletproof hosting founder imprisoned for helping cybercrime gangs

34-year-old Russian Aleksandr Grichishkin, the founder of a bulletproof hosting service, was sentenced to 60 months in prison for allowing cybercrime gangs to use the platform in attacks targeting US financial institutions between 2008 to 2015.
- Sergiu Gatlan
- December 01, 2021
- 04:23 PM
- 0
Malicious Android app steals Malaysian bank credentials, MFA codes

A fake Android app is masquerading as a housekeeping service to steal online banking credentials from the customers of eight Malaysian banks.
- Bill Toulas
- December 01, 2021
- 01:33 PM
- 0
Mozilla fixes critical bug in cross-platform cryptography library

Mozilla has addressed a critical memory corruption vulnerability affecting its cross-platform Network Security Services (NSS) set of cryptography libraries.
- Sergiu Gatlan
- December 01, 2021
- 12:39 PM
- 0
Microsoft Exchange servers hacked to deploy BlackByte ransomware

BlackByte ransomware actors were observed exploiting the ProxyShell set of vulnerabilities (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207) to compromise Microsoft Exchange servers.
- Bill Toulas
- December 01, 2021
- 11:21 AM
- 1
VirusTotal Collections feature helps keep neat IoC lists

Scanning service VirusTotal announced today a new feature called Collections that lets researchers create and share reports with indicators of compromise observed in security incidents.
- Ionut Ilascu
- December 01, 2021
- 05:33 AM
- 0