Online Safety Bill will legally require porn sites to verify users’ age

When Ioannis Dekas, a father of four boys, found that one of his sons had access to pornography, he and his wife became concerned. "In two weeks leading up to this moment, wed noticed a drastic change in his behavior," Dekas said in a BBC interview, "Withdrawal, a sense of anger towards his...

FritzFrog P2P Botnet Attacking Healthcare, Education and Government Sectors

A peer-to-peer Golang botnet has resurfaced after more than a year to compromise servers belonging to entities in the healthcare, education, and government sectors within a span of a month, infecting a total of 1,500 hosts. Dubbed FritzFrog, "the decentralized botnet targets any device that expos...

CVE-2022-22717

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736...

CVE-2022-21989

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-02-09 15:30:01+00:00| seen| https://t.me/truesecator/2607 2022-02-09 16:38:51+00:00| seen| https://t.me/NeKaspersky/1786...

CVE-2022-22005

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-02-09 16:38:51+00:00| seen| https://t.me/NeKaspersky/1786 2022-02-09 20:13:31+00:00| seen| https://t.me/cibsecurity/37103 2022-03-09 10:01:49+00:00|...

CVE-2022-21984

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-02-09 16:38:51+00:00| seen| https://t.me/NeKaspersky/1786 2022-02-09 20:13:12+00:00| seen| https://t.me/cibsecurity/37089...

CVE-2022-21995

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-02-09 20:19:02+00:00| seen| https://t.me/cibsecurity/37105...

CVE-2022-21997

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736...

Amy Zegart on Spycraft in the Internet Age

Amy Zegart has a new book: Spies, Lies, and Algorithms: The History and Future of American Intelligence. Wired has an excerpt: In short, data volume and accessibility are revolutionizing sensemaking. The intelligence playing field is leveling­ -- and not in a good way. Intelligence collectors are...

Palestine-Aligned Hackers Use New NimbleMamba Implant in Recent Attacks

An advanced persistent threat APT hacking group operating with motives that likely align with Palestine has embarked on a new campaign that takes advantage of a previously undocumented implant called NimbleMamba. The intrusions leveraged a sophisticated attack chain targeting Middle Eastern...

New CapraRAT Android Malware Targets Indian Government and Military Personnel

A politically motivated advanced persistent threat APT group has expanded its malware arsenal to include a new remote access trojan RAT in its espionage attacks aimed at Indian military and diplomatic entities. Called CapraRAT by Trend Micro, the implant is an Android RAT that exhibits a high...

Russian Gamaredon Hackers Targeted 'Western Government Entity' in Ukraine

The Russia-linked Gamaredon hacking group attempted to compromise an unnamed Western government entity operating in Ukraine last month amidst ongoing geopolitical tensions between the two countries. Palo Alto Networks' Unit 42 threat intelligence team, in a new report publicized on February 3, sa...

Out-of-Control Cybercrime Will Cause More Real-World Harm

Ransomware and online attacks can cause deadly real-world harm. Governments need to raise their game in response...

CVE-2021-46668

creationtimestamp| type| source ---|---|--- 2022-02-01 07:26:09+00:00| seen| https://t.me/cibsecurity/36620 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users

Details have emerged about a previously undocumented malware campaign undertaken by the Iranian MuddyWater advanced persistent threat APT group targeting Turkish private organizations and governmental institutions. "This campaign utilizes malicious PDFs, XLS files and Windows executables to deplo...

CVE-2022-22594

creationtimestamp| type| source ---|---|--- 2022-01-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=729 2022-01-27 12:09:16+00:00| seen| https://t.me/truesecator/2562 2022-04-01 13:50:00+00:00| exploited| https://t.me/truesecator/2797 2022-12-14 14:05:53+00:00| seen|...

Merck Wins Insurance Lawsuit re NotPetya Attack

The insurance company Ace American has to pay for the losses: On 6th December 2021, the New Jersey Superior Court granted partial summary judgment attached in favour of Merck and International Indemnity, declaring that the War or Hostile Acts exclusion was inapplicable to the dispute. Merck...

A week in security (January 17 – 23)

Last week on Malwarebytes Labs: CISA calls for urgent action against critical threats Red Cross begs attackers to “Do the right thing” after family reunion service compromised Update now! Chrome patches critical RCE vulnerability in Safe Browsing Combatting SMS and phone fraud: UK government issu...

Prime Minister’s Office Compromised: Details of Recent Espionage Campaign

Prime Minister’s Office Compromised: Details of Recent Espionage Campaign By Marc Elias · January 25, 2022 A special thanks to Christiaan Beek, Alexandre Mundo, Leandro Velasco and Max Kersten for malware analysis and support during this investigation. Executive Summary Our Advanced Threat Resear...

CVE-2022-0166

creationtimestamp| type| source ---|---|--- 2022-01-21 15:47:53+00:00| seen| https://t.me/truesecator/2545 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=726 2022-01-24 18:05:00+00:00| seen| https://t.me/truesecator/2550...