Canadian town forced to pay Bitcoin after nasty ransomware attack

By Uzair Amir The town of Midland, Ontario, Canada, has decided to pay cybercriminals after its servers were targeted and infected with a nasty ransomware on Saturday, September 1, at approximately 2 a.m. The total amount of ransom payment has not been disclosed but the demand from cybercriminals...

Carbon Black Report: A Case Study on No More IR Busy Work

From discovery to data acquisition to remediation, IR teams might spend hours of their precious time doing tedious labor — for instance, going in and grabbing an organization’s relevant forensic artifacts such as event logs one by one. What IR teams want to spend time doing: finding the bad guys...

Threatlist: Email Attacks Surge, Targeting Execs

There was a 36 percent increase in email attacks against businesses between the first and second quarters of 2018, with retail, healthcare and government experiencing the most business email compromise BEC attempts, according to a new report. Several trends emerged in the analysis period, includi...

WannaCry ransomware fame North Korean hacker tracked down by the US

By Waqas It is no secret that the US government has always suspected and even accused North Korea was carrying out ransomware attacks using the destructive WannaCry ransomware and for hacking Sony Pictures. But it merely has remained a suspicion so far. However, now the US authorities have found...

ThreatList: Attacks on Industrial Control Systems on the Rise

The systems that power the manufacturing, power and water plants, the oil and gas industry, and many other sectors are increasingly in the crosshairs of cyber-attackers: A full 41.2 percent of industrial control system ICS were attacked by malicious software at least once in the first half of 201...

U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

The U.S. Department of Justice announces criminal charges against a North Korean government spy in connection with the 2017 global WannaCry ransomware attack and the 2014 Sony Pictures Entertainment hack. According to multiple government officials cited by the NY Times who are familiar with the...

U.S. Charges North Korean Spy Over WannaCry and Sony Pictures Hack

The U.S. Department of Justice announces criminal charges against a North Korean government spy in connection with the 2017 global WannaCry ransomware attack and the 2014 Sony Pictures Entertainment hack. According to multiple government officials cited by the NY Times who are familiar with the...

Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware

Towards the end of August 2018, FireEye identified a new exploit kit EK that was being served up as part of a malvertising campaign affecting users in Japan, Korea, the Middle East, Southern Europe, and other countries in the Asia Pacific region. The first instance of the campaign was observed on...

How to Remove Malware from Your MacOS Computer

Who says Macs don’t get viruses? If you think Windows is a virus magnet, the claim that Macs are completely immune to viruses is false. They may be less frequent and common than the Windows variety, but they do exist. But you’re not helpless against the malware onslaught. There are plenty of ways...

3 Cybersecurity Takeaways from Ocean’s 8 (Note: Spoiler Alert!)

I love watching movies. A few days ago, I watched the movie "Ocean's 8" with my wife, and I found this movie was a perfect education material for the cyber security experts. Here are my 3 takeaways from the movie: 1 You think you are protected? Think again… Remember in the movie, the hacker "9-ba...

September is National Preparedness Month

National Preparedness Month is a good opportunity to assess your emergency preparedness. While general preparedness is essential to getting through an emergency related to a natural disaster, the same is true of preparing for a cyber-related event, such as identity theft or a ransomware infection...

BEC is Big Business for Hackers: What makes these attacks so hard to prevent?

For years, one of the most lucrative ways for hackers to generate profits was through ransomware attacks. These instances involve the use of strong encryption to lock victims out of their files and data - attackers then sell the decryption key in exchange for an untraceable Bitcoin ransom payment...

This Week in Security News: Air Canada and Cryptojacking

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Air Canada reported a data breach that exposed passport details for more than 20,000 customers on their mobile app. Also, Trend Micro’s...

What are botnets downloading?

Spam mailshots with links to malware and bots downloading other malware are just a couple of botnet deployment scenarios. The choice of infectious payload is limited only by the imagination of the botnet operator or customer. It might be a ransomware, a banker, a miner, a backdoor, the list goes...

ThreatList: Ransomware Attacks Down, Fileless Malware Up in 2018

The use of fileless malware in attacks continues to grow and now represents 42 out of 1,000 endpoint attacks, according to an analysis of 2018 data by one security firm. The uptick represents a 94 percent increase in the use of fileless-based attacks between January and June 2018. The study,...

ranchoalegredoeste.pr.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-670161 Description| Value ---|--- Affected Website:| ranchoalegredoeste.pr.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

A week in security (August 20 – August 26)

Last week on Labs, we took a look at insider threats, doubled back on the privacy of search browser extensions, profiled green card scams, revisited Defcon badgelife, and talked about what happens to a user's accounts when they die. Other cybersecurity news There was an archiving error in Twitch...

ThreatList: $1.1M is Lost to Cybercrime Every Minute of Every Day

Every 60 seconds, $1.1 million is lost to cyberattacks. That staggering stat comes to us by way of RiskIQ, which compiled proprietary and third-party research to crunch numbers around malicious activity. The resulting report, the appropriately named “Evil Internet Minute,” paints a stark picture ...

How Digital Extortion Impacts Today’s Enterprises

By now, many enterprise decision-makers are familiar with the concept of digital extortion, particularly in the form of ransomware. These encryption-based attacks lock users out of their sensitive and valuable data, applications and operating systems. Attackers demand a ransom in the form of...

Ryuk Ransomware Emerges in Highly Targeted, Highly Lucrative Campaign

A targeted new ransomware has burst on the scene, attacking well-chosen, targeted organizations worldwide with a highly sophisticated operation that may be linked to a well-known APT actor. Over the past two weeks, the Ryuk ransomware has encrypted hundreds of PCs, storage and data centers in eac...