New Web-Based Malware Distribution Channel ‘BlackTDS’ Surfaces

A new traffic distribution system for malware is being offered as a service on the Dark Web and is promoting itself as an affordable way to deploy exploit kits and malware. The traffic distribution system TDS is being called BlackTDS by the Proofpoint researchers that found it. Traffic distributi...

Starbucks: Subdomain takeover on svcgatewayus.starbucks.com

Hello, this is pretty serious security issue in some context, so please act as fast as possible. Overview: One of the starbucks.com subdomains is pointing to Azure, which has unclaimed CNAME record. ANYONE is able to own starbucks.com subdomain at the moment. This vulnerability is called subdomai...

Threat Outbreak Alert RuleID32080: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56887 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32080 may contain the following files: Name |...

Threat Outbreak Alert RuleID32024: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56833 First Published: 2018 February 14 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32024 may contain the following files: Name |...

Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day

Necurs botnet activity is spiking as scammers use the network to flood inboxes with promises of companionship, in part of a seasonal wave of Valentine’s Day-themed spam. Victims are encouraged to share revealing photos of themselves, which scammers later use as leverage in extortion shakedowns. T...

Threat Outbreak Alert RuleID31879: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56634 First Published: 2018 January 31 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31879 may contain the following files: Name |...

Fake Spectre and Meltdown patch pushes Smoke Loader malware

The Meltdown and Spectre bugs have generated a lot of media attention, and users have been urged to update their machines with fixes made available by various vendors. While some patches have created more issues than they fixed, we came across a particular one targeted at German users that actual...

RAT Distributed Via Google Drive Targets East Asia

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving...

Threat Outbreak Alert RuleID31387: Email Messages Distributing Malicious Software on November 22, 2017

Medium Alert ID: 56019 First Published: 2017 November 22 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31387 may contain the following files: Name |...

Trello: CSV injection [N/A]

Hello, We can inject commands in the name field of a board =210 or =cmd|'/C calc'!AO for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim...

Threat Outbreak Alert RuleID31032: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55648 First Published: 2017 October 19 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31032 may contain the following files: Name |...

Threat Outbreak Alert RuleID31007: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55642 First Published: 2017 October 19 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31007 may contain the following files: Name |...

Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea

We observed several high-volume FormBook malware distribution campaigns primarily taking aim at Aerospace, Defense Contractor, and Manufacturing sectors within the U.S. and South Korea during the past few months. The attackers involved in these email campaigns leveraged a variety of distribution...

Threat Outbreak Alert RuleID30813: Email Messages Distributing Malicious Software on September 29, 2017

Medium Alert ID: 55431 First Published: 2017 September 29 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30813 may contain the following files: Name ...

Threat Outbreak Alert RuleID30593: Email Messages Distributing Malicious Software on September 13, 2017

Medium Alert ID: 55206 First Published: 2017 September 13 15:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30593 may contain the following files: Name ...

Threat Outbreak Alert RuleID30539: Email Messages Distributing Malicious Software on September 8, 2017

Medium Alert ID: 55156 First Published: 2017 September 8 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30539 may contain the following files: Name |...

New Campaign Uses Facebook Messenger to Distribute Malware

By Waqas A security researcher David Jacoby has revealed that Facebook Messenger This is a post from HackRead.com Read the original post: New Campaign Uses Facebook Messenger to Distribute Malware...

WannaCry Hero Arrested, One of Two Charged with Distribution of Kronos Malware

Marcus Hutchins, the researcher hailed for his work in blunting the WannaCry ransomware outbreak in May, was arrested Wednesday in Las Vegas and charged with creating and distributing the Kronos banking malware. Hutchins, known online as Malwaretech, is a U.K. citizen and arrived in Las Vegas las...

HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

Terror EK actor experiments with URL shortener fraud

Terror EK is an exploit kit made from a mishmash of stolen code and with very limited distribution. In the past few months, we have seen a few minor updates to its code base which remains largely simplistic in comparison to professional-grade exploit kits of the past such as Angler EK, or...