Rare Bootkit Malware Targets North Korea-Linked Diplomats

A firmware bootkit has been spotted in the wild, targeting diplomats and members of non-governmental organizations NGOs from Africa, Asia and Europe. It has turned out to be part of a newly uncovered framework called MosaicRegressor. According to researchers from Kaspersky, code artifacts in some...

SilentFade malware stole Facebook credentials, $4 million in ad fraud

By Deeba Ahmed Facebook claims that a Chinese company is responsible for operating SilentFade malware. This is a post from HackRead.com Read the original post: SilentFade malware stole Facebook credentials, $4 million in ad fraud...

MosaicRegressor: Lurking in the Shadows of UEFI

Part II. Technical details PDF UEFI or Unified Extensible Firmware Interface has become a prominent technology that is embedded within designated chips on modern day computer systems. Replacing the legacy BIOS, it is typically used to facilitate the machines boot sequence and load the operating...

Facebook 'SilentFade' Malware Attack Stole Credentials For Years

Facebook has detailed a wide-scale Chinese malware campaign that targeted its ad platform for years and siphoned $4 million from users’ advertising accounts. The campaign was addressed by the social media’s security teams after it first became active. Dubbed SilentFade short for “Silently running...

Friday Squid Blogging: COVID-19 Found on Chinese Squid Packaging

I thought the virus doesnt survive well on food packaging: Authorities in China’s northeastern Jilin province have found the novel coronavirus on the packaging of imported squid, health authorities in the city of Fuyu said on Sunday, urging anyone who may have bought it to get themselves tested. ...

Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks

Microsoft has suspended 18 Azure Active Directory applications that were being leveraged for command-and-control C2 infrastructure by what it says is a Chinese nation-state actor. While Microsoft services like Azure Active Directory AD – its cloud-based identity and access management service – ar...

A week in security (September 14 – 20)

Last week on Malwarebytes Labs, we looked at Fintech industry developments, specifically the differences between Europe and the US, and we analyzed how some charities and the advertising industry are tied together. We also told readers about what companies can do to counter domain name abuse. In...

US charges APT 41 group members for hacking over 100 companies

By Deeba Ahmed Two Malaysian hackers and five Chinese hackers allegedly part of a state-sponsored hacking group APT 41 charged for hacking 100 companies worldwide. This is a post from HackRead.com Read the original post: US charges APT 41 group members for hacking over 100 companies...

Feds Charge Chinese Hackers With Ripping Off Video Game Loot From 9 Companies

A group known as Barium allegedly attacked hundreds of targets around the globe—and manipulated in-game goods and currency...

FBI adds 5 Chinese APT41 hackers to its Cyber's Most Wanted List

The United States government today announced charges against 5 alleged members of a Chinese state-sponsored hacking group and 2 Malaysian hackers that are responsible for hacking more than 100 companies throughout the world. Named as APT41 and also known as 'Barium,' 'Winnti, 'Wicked Panda,' and...

FBI adds 5 Chinese APT41 hackers to its Cyber's Most Wanted List

The United States government today announced charges against 5 alleged members of a Chinese state-sponsored hacking group and 2 Malaysian hackers that are responsible for hacking more than 100 companies throughout the world. Named as APT41 and also known as 'Barium,' 'Winnti, 'Wicked Panda,' and...

Hackers actively exploiting unfixed flaws in VPNs, Microsoft servers – CISA

By Waqas CISA believes Chinese state-sponsored hackers are targeting critical cyberinfrastructure in the US by exploiting unpatched vulnerabilities. This is a post from HackRead.com Read the original post: Hackers actively exploiting unfixed flaws in VPNs, Microsoft servers - CISA...

CISA: Chinese Hackers Exploiting Unpatched Devices to Target U.S. Agencies

The US Cybersecurity and Infrastructure Security Agency CISA issued a new advisory on Monday about a wave of cyberattacks carried by Chinese nation-state actors targeting US government agencies and private entities. "CISA has observed Chinese Ministry of State Security-affiliated cyber threat...

CISA: Chinese Hackers Exploiting Unpatched Devices to Target U.S. Agencies

The US Cybersecurity and Infrastructure Security Agency CISA issued a new advisory on Monday about a wave of cyberattacks carried by Chinese nation-state actors targeting US government agencies and private entities. "CISA has observed Chinese Ministry of State Security-affiliated cyber threat...

Feds Warn Nation-State Hackers are Actively Exploiting Unpatched Microsoft Exchange, F5, VPN Bugs

The U.S. government is warning that Chinese threat actors have successfully compromised several government and private sector entities in recent months, by exploiting vulnerabilities in F5 BIG-IP devices, Citrix and Pulse Secure VPNs and Microsoft Exchange servers. Patches are currently available...

Chinese Government-affiliated Malicious Cyber Actors Targeting U.S. Government Agencies

The Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI have issued an advisory about Chinese Ministry of State Security MSS-affiliated cyber threat actors targeting U.S. government agencies. Through the National Cybersecurity Protection System, CISA has...

CDRThief malware targets Linux VoIP softwitches to steal call records

By Deeba Ahmed ESET researchers have identified a new malware called CDRThief strain targeting a specific VoIP platform that two Chinese softswitches use. This is a post from HackRead.com Read the original post: CDRThief malware targets Linux VoIP softwitches to steal call records...

Chinese professor on sensitive projects in US jailed for espionage

By Deeba Ahmed Hao Zhang also faced charges related to stealing trade secrets. This is a post from HackRead.com Read the original post: Chinese professor on sensitive projects in US jailed for espionage...

vuls

The repository is a collection of exploits, proof-of-concepts, and other resources for various vulnerabilities. The primary language used in the repository is Chinese, but some code snippets and comments are in English. The repository appears to be a collection of tools and scripts for exploiting...

New Book! The Best of TaoSecurity Blog, Volume 2

I published a new book! The Best of TaoSecurity Blog, Volume 2: Network Security Monitoring, Technical Notes, Research, and China and the Advanced Persistent Threat It's in the Kindle Store, and if you're Unlimited it's free. Print edition to follow. The book lists as having 413 pages for the...