Alisa Esage G (Page 145)

Working as a cyber security solutions architect, Alisa focuses on application and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.

Code of destruction – malware analysis

On: July 11, 2016

In: Important, Incidents, Malware

We should always think twice before running an unknown program downloaded from the Internet. Of course not every application is dangerous, but it’s all too easy to find a maliciousRead More →

A Malicious ‘Pokémon GO’ App Is Installing Backdoors on Android Devices

On: July 11, 2016

In: Malware, Mobile Security

Nintendo’s new location-based augmented reality game ‘Pokémon GO’ is hot right now. Like really, really popular—so much so that players are spoofing their phone’s location using VPNs in their questRead More →

Jigsaw Ransomware Defeated Again, Free Decrypter Available

On: July 11, 2016

In: Malware

Decrypter works with older Jigsaw versions as well. Security researchers from Check Point announced over the weekend that they identified a way to decrypt files locked by the Jigsaw ransomware, bothRead More →

There Is a Connection between the Lurk Arrests, Angler, and the Necurs Botnet

On: July 11, 2016

In: Data Security

Email address found used for registering C&C domain names for Lurk, Angler, and Necurs infrastructure. As many infosec professionals have initially suspected, there is a connection between the arrests madeRead More →

Ghost Squad hackers dox United Cyber Caliphate including Mauritania Attacker

On: July 9, 2016

In: Incidents

Hacktivists from Ghost Squad Hacker group made revealed the identities of hackers affiliated with the ISIS cyber army called United Cyber Caliphate. Ghost Squad Hackers (GSH), a hacktivist group madeRead More →

Databases from Hot Scripts, Mac Forums, Web Hosting Talk Surface on the Dark Web

On: July 9, 2016

In: Important, Incidents, Malware

Almost 1.7 million users affected by latest breaches. A hacker who goes by the name of uid0 claims to have breached three websites belonging to Penton Technology: Hot Scripts, Mac Forums,Read More →

10 YouTube Channels For Learning Ethical Hacking Course Online

On: July 9, 2016

In: Data Security

Learn Ethical Hacking Course Online Through These 10 YouTube Channels. There has been an increasing demand for ethical hackers (also known as white hat hackers or penetration testers) in the lastRead More →

Hidden Voice Commands Embedded in YouTube Videos Can Hijack Your Smartphone

On: July 9, 2016

In: Incidents

Some attacks are hard to spot even by human subjects. A series of distorted voice commands surreptitiously hidden in YouTube videos can force unprotected Android or iOS smartphones to carry outRead More →

FACEBOOK MESSENGER END-TO-END ENCRYPTION NOT ON BY DEFAULT

On: July 9, 2016

In: Important, Incidents, Mobile Security

We put people first in everything we do at Messenger, and today we are beginning to roll out a new option within Messenger to better support conversations about sensitive topics.Read More →

Flaws in BMW ConnectedDrive Infotainment System allow remote hack

On: July 8, 2016

In: Incidents, Vulnerabilities

A research discovered two zero-day vulnerabilities residing in the official BMW web domain and ConnectedDrive portal that allow remote hack. Once again IoT devices are affected by a serious flawRead More →

Wendy’s admits credit card hack is far worse than first thought

On: July 8, 2016

In: Incidents

The number of locations affected rocketed by more than three-fold. Restaurant chain Wendy’s said that the number of restaurants affected by a credit card hack has more than tripled since itsRead More →

New CryptXXX changes name to Microsoft Decryptor

On: July 8, 2016

In: Malware

A new version of the CryptXXX Ransomware was discovered by Brad Duncan that includes changes to encrypted file names, uses modified ransom note names, a new template, and a new TOR paymentRead More →

Extracting Multiple Bits Per Request From Full-blind SQL Injection Vulnerabilities

On: July 8, 2016

In: Vulnerabilities

Blind SQL injection vectors are considered either partial-blind or full-blind in terms of feedback provided to the attacker. Often SQL injection vulnerabilities will be blind when the web application isRead More →

Dangerous GNU wget Vulnerability Still Not Patched in All Linux Distros

On: July 8, 2016

In: Vulnerabilities

Review your cronjobs for rogue wget downloads. On June 9, the GNU wget project released version 1.18 of its famous file downloading package, following a report from security researcher Dawid GolunskiRead More →

Phishing Campaign with Blurred Images

On: July 7, 2016

In: Important, Incidents, Malware

For a few days, I’m seeing a lot of phishing emails that try to steal credentials from victims. Well, nothing brand new but, this time, the scenario is quite different :Read More →

Facebook’s OpenCellular is a new open-source wireless access platform for remote areas

On: July 7, 2016

In: Technology

Facebook is clearly very serious about its mission to connect the world and in the process, it has launched solar-powered drones that use lasers to connect to each other and theRead More →

New Alfa, or Alpha, Ransomware from the same devs as Cerber

On: July 7, 2016

In: Malware

Security researcher BloodDolly recently discovered a new file encrypter called Alfa Ransomware, or Alpha Ransomware, which is from the developers of Cerber. As BloodDolly is still currently analyzing this ransomware,Read More →

TP-Link forgets to register domain name, leaves config pages open to hijack

On: July 7, 2016

In: Incidents

The domain name’s new owners want $2.5 million to give it back. In common with many other vendors, TP-Link, one of the world’s biggest sellers of Wi-Fi access points and homeRead More →

New OSX/Keydnap malware is hungry for credentials

On: July 7, 2016

In: Important, Incidents, Malware

ESET analyzes multiple samples targeting OS X every day. Those samples are usually potentially unwanted applications that inject advertisements into browser displays while the victim is browsing the web. For theRead More →

Android Nougat prevents ransomware from resetting device passwords

On: July 6, 2016

In: Malware, Mobile Security

The upcoming version of Android introduces a new condition so the “resetPassword” API cannot be used to reset a device’s password. The change impacts both ransomware and disinfectors. Android.Lockdroid.E variantsRead More →

Alisa Esage G (Page 145)

Cyber Security Channel