Google Shuts Down Glupteba Botnet, Sues Operators

Google took steps to shut down the Glupteba botnet, at least for now. The botnet uses the bitcoin blockchain as a backup command-and-control mechanism, making it hard to get rid of it permanently. So Google is also suing the botnets operators. Its an interesting strategy. Lets see if its successf...

bitcoin-core:script: Use-of-uninitialized-value in CPubKey::GetID

Detailed Report: https://oss-fuzz.com/testcase?key=6556159568379904 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: script Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CPubKey::GetID InferPubkey InferScript...

Canada Charges Its “Most Prolific Cybercriminal”

A 31-year-old Canadian man has been arrested and charged with fraud in connection with numerous ransomware attacks against businesses, government agencies and private citizens throughout Canada and the United States. Canadian authorities describe him as "the most prolific cybercriminal weve...

Cyberthreats to financial organizations in 2022

First of all, we are going to analyze the forecasts we made at the end of 2020 and see how accurate they were. Then we will go through the key events of 2021 relating to attacks on financial organizations. Finally, we will make some forecasts about financial attacks in 2022. Analysis of forecasts...

bitcoin-core:script: Use-of-uninitialized-value in CPubKey::GetID

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4779951040102400 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: script Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

Fake Ransomware Infection Hits WordPress Sites

Fake red-on-black warnings have been plastered to hundreds of WordPress sites, warning that they’ve been encrypted. The warnings have at least one ransomware accoutrement that might look convincing at first blush: a countdown clock tick-tick-ticking away, warning site owners that they’ve got seve...

bitcoin-core:hex: Use-of-uninitialized-value in CPubKey::IsFullyValid

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4890491615838208 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: hex Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Fake ransomware warnings hit WordPress sites: How to stay safe

A ransomware warning has appeared out of nowhere and started taking over WordPress sites. The warning, with its black background and red writing, says: “SITE ENCRYPTED Countdown FOR RESTORE SEND 0.1 BITCOIN: address redacted create file on site /unlock.txt with transaction key inside” But theres...

Wire Fraud Scam Upgraded with Bitcoin

The FBI has issued a bulletin describing a bitcoin variant of a wire fraud scam: As the agency describes it, the scammer will contact their victim and somehow convince them that they need to send money, either with promises of love, further riches, or by impersonating an actual institution like a...

bitcoin-legal.org Improper Access Control vulnerability OBB-2253117

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bitcoin-core:str_printf: Crash in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char> > std::__1::__pa

Detailed Report: https://oss-fuzz.com/testcase?key=5678525407952896 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: strprintf Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x26a626e7 Crash State: std::1::ostreambufiterator std::1::...

bitcoin-core:utxo_snapshot: Use-of-uninitialized-value in crc32c::ExtendSse42

Detailed Report: https://oss-fuzz.com/testcase?key=5452735084888064 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: utxosnapshot Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc32c::ExtendSse42 crc32c::Exten...

bitcoin-core:str_printf: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4947614315970560 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: strprintf Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x39383037 Crash State: NULL Sanitizer: address ASAN...

Police Arrest Suspected Ransomware Hackers Behind 1,800 Attacks Worldwide

12 people have been detained as part of an international law enforcement operation for orchestrating ransomware attacks on critical infrastructure and large organizations that hit over 1,800 victims across 71 countries since 2019, marking the latest action against cybercrime groups. The arrests...

bitcoin-core:key: Use-of-uninitialized-value in key_fuzz_target

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4860898263564288 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: key Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

bitcoin-core:transaction: Use-of-uninitialized-value in ExtractDestination

Detailed Report: https://oss-fuzz.com/testcase?key=4736712861941760 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: transaction Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ExtractDestination...

Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

The Russian-led REvil ransomware gang was felled by an active multi-country law enforcement operation that resulted in its infrastructure being hacked and taken offline for a second time earlier this week, in what's the latest action taken by governments to disrupt the lucrative ecosystem. The...

[updated]REvil ransomware disappears after Tor services hijacked

With some pests you hope they never recover from a blow. It’s almost too good to be true, but one can hope. This is one of them. The REvil ransomware group has shut down their operation for the second time this year after losing control over their Tor-based domains. Shutdown number 1 REvils first...

BlackMatter Ransomware

Summary Actions You Can Take Now to Protect Against BlackMatter Ransomware • Implement and enforce backup and restoration policies and procedures. • Usestrong, unique passwords. • Usemulti-factor authentication. • Implement network segmentation and traversal monitoring. Note: this advisory uses t...

CVE-2021-24679

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...