BitErrant attack
2017-03-06
The BitErrant attack is a fun little exploit that shows what can go wrong in the BitTorrent protocol when SHA1 collisions become reality. SHA1 collisions resulting in chunks of theRead More →
Malware Leveraging PowerSploit
2017-03-03
Hi again, this is Shusei Tomonaga from the Analysis Center. In this article, I’d like to share some of our findings about ChChes (which we introduced in a previous article)Read More →
Researchers uncover PowerShell Trojan that uses DNS queries to get its orders
2017-03-03
Delivered by “secure” Word doc, pure PowerShell malware fetches commands from DNS TXT records. Researchers at Cisco’s Talos threat research group are publishing research today on a targeted attack deliveredRead More →
Hidden backdoor discovered in Chinese IoT devices
2017-03-02
Researchers at Trustwave have uncovered a backdoor in IoT devices from a Chinese manufacturer that could leave them open to exploitation. The backdoor is present in almost all devices producedRead More →
Online shops plundered by bank card-stealing malware after bungling backend Aptos hacked
2017-03-02
We were silenced by the Feds!’. Shoppers of 40 online stores have had their bank card numbers and addresses slurped by a malware infection at backend provider Aptos. The securityRead More →
Two new Mac backdoors discovered
2017-03-01
On Valentine’s Day, Mac users got a special “treat” in the form of new malware. Then, later that same week, there were signs of yet another piece of malware looming. These threatsRead More →
XSS flaws in Zscaler Cloud management software allow logged attackers to hack coworkers
2017-03-01
Zscaler has fixed persistent XSS vulnerabilities affecting Zscaler Cloud management software that allow logged attackers to hack coworkers. Serious cross-site scripting (XSS) flaws in the Zscaler Cloud management software could be exploitedRead More →
DRIDEX TROJAN GETS A MAJOR ‘ATOMBOMBING’ UPDATE
2017-03-01
The Dridex banking Trojan has been updated and now sports a new injection method for evading detection based on the technique known as AtomBombing. Researchers with IBM X-Force identified the newRead More →
Web Cache Deception Attack
2017-02-28
A few words about caching and reactions Websites often tend to use web cache functionality (for example over a CDN, a load balancer, or simply a reverse proxy). The purposeRead More →
The Necurs botnet is evolving, now includes a DDoS module
2017-02-28
The Necurs botnet is evolving and recently the experts at BitSight’s Anubis Labs discovered that it was improved to launch DDoS attacks. The Necurs botnet continues to evolve and recentlyRead More →
