Alisa Esage G (Page 154)

Working as a cyber security solutions architect, Alisa focuses on application and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.

LG Smartphones Affected by Two Severe Vulnerabilities

On: May 30, 2016

In: Vulnerabilities

One can allow a crook to wipe devices clean. Two researchers from Check Point’s mobile security division have uncovered two vulnerabilities in LG’s custom modification of the Android OS which enablesRead More →

Hacker Tries To Sell 427 Milllion Stolen MySpace Passwords For $2,800

On: May 28, 2016

In: Important, Incidents

There’s an oft-repeated adage in the world of cybersecurity: There are two types ofcompanies, those that have been hacked, and those that don’t yet know they have been hacked. MySpace,Read More →

The Week in Ransomware – May 27 2016 – Zcrypt, Jigsaw, and More

On: May 28, 2016

In: Data Security, Important, Malware

We had 4 new ransomware infections, 2 updates, and one TeslaCrypt news item this week, but for the most part there was nothing that interesting released. When I write theseRead More →

Biggest Spam Flood in Years Distributes Locky Ransomware

On: May 28, 2016

In: Malware

Spam wave originated from Indian and Vietnamese IPs. Multiple security firms are reporting on a gigantic wave of spam email that delivers malicious JavaScript file attachments, laced with downloaders for theRead More →

“Forbidden attack” makes dozens of HTTPS Visa sites vulnerable to tampering

On: May 27, 2016

In: Important, Incidents, Malware, Vulnerabilities

Researchers say 70,000 servers belonging to others also at risk. Dozens of HTTPS-protected websites belonging to financial services giant Visa are vulnerable to attacks that allow hackers to inject malicious codeRead More →

BackDoor.TeamViewer.49

On: May 27, 2016

In: Malware

Crooks use your PC to hide their IP, funnel Web traffic. BackDoor.TeamViewer.49 is the name of a backdoor trojan discovered by Russian security vendor Dr.Web, who claims it will install theRead More →

Detecting Hidden Backdoors in PHP OPcache

On: May 27, 2016

In: Data Security, Important, Malware

In this article, we will be looking at the strategies to detect and analyze malware hidden inside an OPcache file. If you haven’t read our previous article about hiding aRead More →

SWIFT Bank Attacks Connected to North Korean Group Behind Sony Hacks

On: May 27, 2016

In: Data Security, Important, Incidents, Malware

Bank in Philippines was also targeted by attackers, whose malware shares code with tools used by Lazarus group. Symantec has found evidence that a bank in the Philippines has alsoRead More →

USERLAND PERSISTENCE WITH SCHEDULED TASKS AND COM HANDLER HIJACKING

On: May 26, 2016

In: Data Security, Important, Incidents

A while back I was exploring userland COM and stumbled across some 2011 research by Jon Larimer explaining the dangers of per-user COM objects. Recently Casey Smith (@subtee)started digging intoRead More →

Hackers Steal $2 Million From Bitcoin Exchange In Hong Kong, Bounty Offered To Recover Funds

On: May 26, 2016

In: Incidents

For cryptocurrency enthusiasts seeking mainstream adoption, events like this are so unhelpful. Hackers appear to have made off with the equivalent of $2 million in digital currencies from Gatecoin, accordingRead More →

New Wave of Malvertising Leverages Latest Flash Exploit

On: May 26, 2016

In: Malware, Vulnerabilities

A well known malvertising gang famous for its use of the fingerprinting technique and other evasion tricks to bypass security checks has been ramping up its activity against many different ad platforms to pushRead More →

Hackers Prefer File Upload, XSS, and SQLi Bugs When Attacking WordPress Sites

On: May 26, 2016

In: Vulnerabilities

WordPress is a free, open source content management system (CMS) for creating websites, and is considered to be the most popular blogging system in use. WordPress’ appeal to website developers stems from itsRead More →

Major DNS provider hit by mysterious, focused DDoS attack

On: May 26, 2016

In: Incidents

Attack on NS1 sends 50 million to 60 million lookup packets per second. Unknown attackers have been directing an ever-changing army of bots in a distributed denial of service (DDoS) attackRead More →

Next-gen Tor to use distributed RNG, 55-character addresses

On: May 25, 2016

In: Data Security, Malware

Numbers so random no one can predict how random they’ll be. The Tor project has cooked up a new way to generate random numbers to help secure its next-generation onion router.Read More →

Pastejacking Attack Overrides Your Clipboard to Trick You into Running Evil Code

On: May 25, 2016

In: Data Security, Important, Incidents

Copy-pasting commands into your terminal allows attackers to append, automatically execute and then hide malicious code. This type of attack is known as clipboard hijacking, and in most scenarios, itRead More →

WPAD Protocol Bug Puts Windows Users at Risk

On: May 25, 2016

In: Data Security, Vulnerabilities

WPAD name collision issue can lead to MitM attacks. US-CERT has issued a public alert after researchers from the University of Michigan and Verisign Labs discovered a method of leveraging theRead More →

WhatsApp Gold version, a information stealing malware targeting users

On: May 25, 2016

In: Mobile Security

WhatsApp users being lured into downloading WhatsApp Gold, an information stealing malware App. If you are one of the billions using the hugely popular cross-platform messaging App, WhatsApp, you may haveRead More →

Operation Ke3chang Resurfaces With New TidePool Malware

On: May 25, 2016

In: Important, Malware

Little has been published on the threat actors responsible for Operation Ke3chang since the report was released more than two years ago. However, Unit 42 has recently discovered the actorsRead More →

Linux Kernel Website Kernel.org Banned By Norton

On: May 24, 2016

In: Important, Malware

Short Bytes: Symantec’s automated threat analysis system, Norton Safe Web, claims that Linux kernel’s website kernel.org contains 4 threats and shows a red flag to the users. Looking at Norton’sRead More →

Teenager charged over Mumsnet hack and DDoS attack

On: May 24, 2016

In: Incidents

An 18-year-old man has been charged by British police in connection with an internet attack that saw Mumsnet hacked, users’ accounts breached, passwords stolen, and the site blasted offline. DavidRead More →

Alisa Esage G (Page 154)

Cyber Security Channel