Alisa Esage G (Page 75)

Working as a cyber security solutions architect, Alisa focuses on application and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.

New PoS Malware LockPoS emerges in the threat landscape

On: July 14, 2017

In: Malware

A newly discovered Point of Sale (PoS) malware dubbed LockPoS appeared in the wild and it is being delivered through the Flokibot botnet. A newly discovered Point of Sale (PoS) malwareRead More →

App Finds More Than 50,000 Computers Vulnerable to ETERNALBLUE Exploit

On: July 14, 2017

In: Vulnerabilities

The developer of a tool named Eternal Blues that scans for computers vulnerable to the NSA’s ETERNALBLUE exploit has published statistics gathered from the app’s usage. According to Elad Erez,Read More →

Wikileaks: CIA HighRise Android malware used to intercept and redirect SMSs

On: July 13, 2017

In: Mobile Security

Wikileaks released the documentation for HighRise, an Android app used by the CIA to intercept and redirecting SMS messages to a CIA-controlled server. WikiLeaks just published a new batch ofRead More →

Samba puts out new security update to address exploit that fueled WannaCry

On: July 13, 2017

In: Malware

Vuln hit “all versions of Samba from 4.0.0 onward using embedded Heimdal Kerberos.” On Wednesday, the Samba Team released new security updates to fix a vulnerability in “all versions of Samba from 4.0.0 onward usingRead More →

Scammer Uses Fake Tor Browser to Lure Victims to Supposed Dark Web Marketplace

On: July 13, 2017

In: Incidents

A malicious app disguised as a modified version of the Tor Browser is targeting users looking to buy illegal products off the Dark Web. Discovered by BleepingComputer’s Lawrence Abrams last week, thisRead More →

VULNERABILITIES EXPOSE ORACLE OAM 10G TO REMOTE SESSION HIJACKING

On: July 13, 2017

In: Vulnerabilities

Oracle’s next quarterly Critical Patch Update is slated for July 18, but two vulnerabilities in an older version of the company’s Oracle Access Manager (OAM) solution won’t be among theRead More →

Data of 14 Million Verizon Customers Exposed in Server Snafu

On: July 13, 2017

In: Incidents

Sensitive data for around 14 million Verizon customers was exposed online because a third-party contractor forgot to limit external access to an Amazon S3 server. UpGuard, a cyber-security company thatRead More →

Magala Trojan Uses Virtual Desktops to Secretly Click on Search Results Ads

On: July 12, 2017

In: Malware

A new click-fraud trojan is infecting Windows computers and using virtual desktops to click on ads in search results to earn a profit for its creator(s). Discovered by Kaspersky LabRead More →

Telegram-Based SQL Injection Scanner Available for $500 on Hacking Forum

On: July 12, 2017

In: Vulnerabilities

A new tool is making the rounds on the criminal underground. Called Katyusha Scanner, this is a hybrid between a classic SQL injection (SQLi) vulnerability scanner and Anarchi Scanner, an open-sourceRead More →

UK Radio Station Hijacked Eight Times in the Past Month to Play Obscene Song

On: July 12, 2017

In: Incidents

An unknown hacker has hijacked the radio frequency of a UK radio station to play an obscene song eight times during the past month, according to the radio station’s managerRead More →

TELEGRAM-CONTROLLED HACKING TOOL TARGETS SQL INJECTION AT SCALE

On: July 12, 2017

In: Vulnerabilities

A black market hacking tool has the potential to rapidly conduct website scans for SQL injection vulnerabilities at a large scale, all managed from a smartphone through the Telegram messenger.Read More →

NTLM Relay Attacks Still Causing Problems in 2017

On: July 12, 2017

In: Vulnerabilities

Microsoft’s July 2017 Patch Tuesday includes a fix for an issue with the NT LAN Manager (NTLM) Authentication Protocol that can be exploited to allow attackers to create admin accountsRead More →

Adwind RAT is back, crooks are targeting Aerospace industries in many countries

On: July 11, 2017

In: Malware

Security experts at TrendMicro discovered that the notorious Adwind RAT has resurfaced targeting enterprises in the Aerospace industries worldwide. Crooks are even more opportunists, they continually innovate their TTPs to maximize theirRead More →

Man Pleads Guilty to Manipulating Lottery Winning Tickets via Hacked Computer

On: July 11, 2017

In: Incidents, Vulnerabilities

One of the biggest lottery scams in the history of the US is coming to a close as the mastermind behind the operation has pleaded guilty in an Iowa court,Read More →

Calling Artificial Intelligence to Counter Ransomware Attacks

On: July 11, 2017

In: Malware

The progression in Artificial Intelligence have incited intense debate worldwide, some experts are calling AI to counter malware attacks In a short span of six weeks, the world was hitRead More →

US Food Payment Kiosk Vendor Avanti Markets Hacked, Biometric data stolen

On: July 11, 2017

In: Incidents

US payment kiosk vendor Avanti Markets that installs its self-service payment devices in corporate breakrooms across America suffered a security breach. The US payment kiosk vendor Avanti Markets that installs its self-service payment devices in thousands ofRead More →

Reliance Jio systems allegedly hacked. It should be the biggest breach of personal data ever in India

On: July 10, 2017

In: Incidents

Data allegedly stolen from the Reliance Jio systems were available online, It should be the biggest breach of personal data ever in India. The week starts with the news ofRead More →

Upatre – Trojan Downloader

On: July 10, 2017

In: Malware

You can get the sample from theZoo SHA-256: 1b893ca3b782679b1e5d1afecb75be7bcc145b5da21a30f6c18dbddc9c6de4e7 We can use behavior analysis from hybrid-analysis. Seems like there is no known protection mechanism. In the strings, there is nothing important other thanRead More →

Dark Web Hosting Service Hacked, Some Data Was Stolen

On: July 10, 2017

In: Incidents

Deep Hosting — a Dark Web hosting service — admitted yesterday to suffering a major security incident during which “some sites have been exported.” The hack took place on SaturdayRead More →

Emulation and Exploration of BCM WiFi Frame Parsing using LuaQEMU

On: July 10, 2017

In: Incidents

Introducing LuaQEMU When dealing with complex code in firmware, it is often desirable to have some kind of dynamic runtime introspection as well as the ability to modify behavior onRead More →

Alisa Esage G (Page 75)

Cyber Security Channel