Attackers Combine Three Botnets to Launch Massive DDoS Attack
2016-09-03
Crooks use a botnet of CCTV cameras, one of home routers, and one made up by compromised web server. An unnamed website has been at the end of a ferociousRead More →
Florida Man Arrested for Hacking Linux Kernel Organization
2016-09-02
Donald Austin is the main suspect behind the kernel.org security breach that took place in the summer of 2011.Donald Ryan Austin, 27, of El Portal, Florida, was charged yesterday withRead More →
The Nullbyte Ransomware pretends to be the NecroBot Pokemon Go Application
2016-09-02
A new DetoxCrypto Ransomware variant called the Nullbyte Ransomware has been discovered by Emsisoft security researched xXToffeeXx that pretends to be the popular Pokemon Go bot application called NecroBot, When infected, the ransomware will encrypt aRead More →
Betabot Trojan Steals Your Passwords and Then Installs Ransomware
2016-09-02
In my previous blog about password stealing malware, we discussed how Pony malware steals passwords and is as big and rampant across the internet as any single ransomware family. NowRead More →
Talos ShadowGate Take Down: Global Malvertising Campaign Thwarted
2016-09-02
Exploit kits are a class of threat that indiscriminately aims to compromise all users. Talos has continued to monitor this threat over time resulting in large scale research and evenRead More →
Apple Patches OS X and Safari Zero-Days Related to NSO Group Spyware
2016-09-02
Apple patches two new zero-days in OS X and Safari.Apple released today two security bulletins for OS X and Safari aimed to fix three vulnerabilities related to the now infamousRead More →
Double-click me not: Malicious proxy settings in OLE Embedded Script
2016-09-01
Attackers have been using social engineering to avoid the increasing costs of exploitation due to the significant hardening and exploit mitigations investments in Windows. Tricking a user into running aRead More →
Vulnerability in Yandex Browser Allows Attackers to Steal Victims’ Browsing Data
2016-09-01
Vulnerability is easy to exploit, hard to spot. A CSRF vulnerability existed in the core of the Yandex Browser that allowed attackers to trick the browser’s synchronization feature into sending theRead More →
Building a new Tor that can resist next-generation state surveillance
2016-09-01
Tor is an imperfect privacy platform. Ars meets the researchers trying to replace it. Since Edward Snowden stepped into the limelight from a hotel room in Hong Kong three years ago, use ofRead More →
New cloud attack takes full control of virtual machines with little effort
2016-09-01
Existing crypto software “wholly unequipped” to counter Rowhammer attacks. The world has seen the most unsettling attack yet resulting from the so-called Rowhammer exploit, which flips individual bits in computer memory. It’sRead More →
Hacked Redis Servers being used to install the Fairware Ransomware Attack
2016-09-01
Recently I wrote about a supposedly new ransomware called Fairware that was targeting Linux servers. When a server was hacked by Faireware, it would delete various data folders and create a ransom noteRead More →
Unsophisticated Revenge RAT Released Online for Free EXCLUSIVE
2016-08-31
RAT is still in its early stages of development. An Arabic-speaking malware coder using the name Napoleon has released a new RAT (Remote Access Trojan/Tool) called Revenge, which he’s distributing forRead More →
iOS 9.3.4 and minor versions are vulnerable to the Trident Exploit
2016-08-31
Its name is the Trident: a chain of zero-day exploits that aim to infect iPhone with commercial spyware. Researchers linked it to the NSO group.Its name is the Trident: aRead More →
Hackers Stole Account Details for Over 60 Million Dropbox Users
2016-08-31
Hackers have stolen over 60 million account details for online cloud storage platform Dropbox. Although the accounts were stolen during a previously disclosed breach, and Dropbox says it has alreadyRead More →
The Hunt for Lurk
2016-08-31
When we first encountered Lurk, in 2011, it was a nameless Trojan. It all started when we became aware of a number of incidents at several Russian banks that hadRead More →
OSX/Keydnap spreads via signed Transmission application
2016-08-31
Last month ESET researchers wrote an article about a new OS X malware called OSX/Keydnap, built to steal the content of OS X’s keychain and maintain a permanent backdoor. AtRead More →
Google Login Page Bug Can Lead to Automatic Malware Download
2016-08-30
Google declined to classify this as a security issue. British security researcher Aidan Woods discovered an issue on Google’s login page that allows clever attackers to automatically download files on theRead More →
After Illinois hack, FBI warns of more attacks on state election board systems
2016-08-30
Concern about more attacks mounting as presidential elections approach. Someone using servers in the US, England, Scotland, and the Netherlands stole voter registration from one state’s Board of Elections website inRead More →
RIPPER ATM MALWARE AND THE 12 MILLION BAHT JACKPOT
2016-08-30
In this blog, FireEye Labs dissects this new ATM malware that we have dubbed RIPPER (due to the project name “ATMRIPPER” identified in the sample) and documents indicators that strongly suggestRead More →
Meet USBee, the malware that uses USB drives to covertly jump airgaps
2016-08-30
Technique works on virtually all USB drives with no modifications necessary. In 2013, a document leaked by former National Security Agency contractor Edward Snowden illustrated how a specially modified USB deviceRead More →
