Behavior monitoring combined with machine learning spoils a massive Dofoil coin mining campaign

Update: Further analysis of this campaign points to a poisoned update for a peer-to-peer P2P application. For more information, read Poisoned peer-to-peer app kicked off Dofoil coin miner outbreak. Just before noon on March 6 PST, Windows Defender Antivirus blocked more than 80,000 instances of...

Threat Outbreak Alert RuleID32138: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56944 First Published: 2018 February 27 17:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32138 may contain the following files: Name |...

Threat Outbreak Alert RuleID32149: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56948 First Published: 2018 February 27 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32149 may contain the following files: Name |...

Debian DSA-4123-1 : drupal7 - security update

Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-001 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Threat Outbreak Alert RuleID32123: Email Messages Distributing Malicious Software on February 23, 2018

Medium Alert ID: 56925 First Published: 2018 February 23 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32123 may contain the following files: Name |...

Threat Outbreak Alert RuleID32103: Email Messages Distributing Malicious Software on February 22, 2018

Medium Alert ID: 56910 First Published: 2018 February 22 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32103 may contain the following files: Name |...

Threat Outbreak Alert RuleID31988: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56877 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31988 may contain the following files: Name |...

Threat Outbreak Alert RuleID32080: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56887 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32080 may contain the following files: Name |...

Threat Outbreak Alert RuleID32077: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56886 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32077 may contain the following files: Name |...

Threat Outbreak Alert RuleID32089: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56892 First Published: 2018 February 21 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32089 may contain the following files: Name |...

Debian DSA-4118-1 : tomcat-native - security update

Jonas Klempel reported that tomcat-native, a library giving Tomcat access to the Apache Portable Runtime APR library's network connection socket implementation and random-number generator, does not properly handle fields longer than 127 bytes when parsing the AIA-Extension field of a client...

Threat Outbreak Alert RuleID32033: Email Messages Distributing Malicious Software on February 15, 2018

Medium Alert ID: 56838 First Published: 2018 February 15 21:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32033 may contain the following files: Name |...

Threat Outbreak Alert RuleID31982: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56835 First Published: 2018 February 14 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31982 may contain the following files: Name |...

Threat Outbreak Alert RuleID32024: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56833 First Published: 2018 February 14 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32024 may contain the following files: Name |...

Threat Outbreak Alert RuleID32023: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56832 First Published: 2018 February 14 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32023 may contain the following files: Name |...

Threat Outbreak Alert RuleID31984: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56803 First Published: 2018 February 13 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31984 may contain the following files: Name |...

Threat Outbreak Alert RuleID31986: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56801 First Published: 2018 February 13 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31986 may contain the following files: Name |...

Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day

Necurs botnet activity is spiking as scammers use the network to flood inboxes with promises of companionship, in part of a seasonal wave of Valentine’s Day-themed spam. Victims are encouraged to share revealing photos of themselves, which scammers later use as leverage in extortion shakedowns. T...

Threat Outbreak Alert RuleID31957: Email Messages Distributing Malicious Software on February 9, 2018

Medium Alert ID: 56778 First Published: 2018 February 9 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31957 may contain the following files: Name |...

Threat Outbreak Alert RuleID31913: Email Messages Distributing Malicious Software on February 7, 2018

Medium Alert ID: 56694 First Published: 2018 February 7 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31913 may contain the following files: Name |...