Korean Cyber espionage attack Targets Russia

Ask an expert on cyber espionage and he for sure he will speak of China, the most active and advanced country in this sector, this time a clamorous campaign apparently originated from Korea has been discovered. Security company FireEye collected evidences of a cyber espionage campaign, named...

Apple Addresses New SMS Trojan in Malware Lists

Apple has made updates to its malware definitions to address yesterday’s news of a new OS X Trojan, SMSSend.3666, that was disguising itself as legitimate software and confounding Russian users. The Trojan, first blogged about by antivirus firm Dr. Web, tricked users into entering their cell phon...

SMS Extortion Trojan Targeting Apple Machines

In yet another blow to the tenuous false sense of security among Apple users, the Russian antivirus firm Dr. Web has uncovered what it claims is a first-of-its-kind fake installer Trojan targeting Mac machines and extorting their users with SMS fraud. Trojan.SMSSend.3666 is the Mac variant within...

'Sanny' Malware Targeting Russian Space, IT, Telecom Industries

Attackers, purportedly hailing from Korea, have been targeting individuals in Russia’s aerospace, IT, education and telecommunication industries with hopes of extracting their passwords and credentials. According to a post on FireEye’s Malware Intelligence Lab by researchers Alex Lanstein and Ali...

Australian medical centre infected with Ransomware Malware demanding $4000 to Unlock

A Gold Coast, Australian medical centre computers are infected with some ransom malware by a group of Russian hackers. The hackers encrypted the practice's patient database, demanding payment of $4000 for the files to be decrypted. "Cyber criminals based mainly throughout Eastern Europe look for...

Australian medical centre infected with Ransomware Malware demanding $4000 to Unlock

A Gold Coast, Australian medical centre computers are infected with some ransom malware by a group of Russian hackers. The hackers encrypted the practice’s patient database, demanding payment of $4000 for the files to be decrypted. "Cyber criminals based mainly throughout Eastern Europe look for...

Anonymous Leak Emails from Syrian Ministry of Foreign Affairs

Anonymous Hacker managing Operation Syria OpSyria have released 1 GB of emails dump from Syrian Ministry of Foreign Affairs. Files are in files are in Arabic language. Documents includes scanned copies of Syrian ministers passports, details about an arms transport from Ukraine, report which shows...

Bulgarian torrent tracker forum hacked and accused of collecting user IP

A Russian hacker going by name - "kOS" hack into the Bulgarian torrent tracker "Arenabg" website https://forum.arenabg.com/ and leak the complete database of their forum and accused of collecting IP of users like PirateBay. Hacker said, "Why I hack this tracker? Because they store IP information...

Russian Underground Cybercrime market offering sophisticated services

Security firm Trend Micro recent analyses the Russian crimeware markets and has found that malware tools and services range from one-time packages which cost just pennies to sophisticated packages and services which cost purchasers thousands of dollars per month. If you want to buy a botnet it wi...

GhostShell leaks 2.5 million Russian government accounts as #ProjectBlackstar

Team GhostShell hackers group who was responsible for the recent leak of some millions of records from top universities around the world once again strike back. As the part of "Project Blackstar" Hacking group GhostShell Declares War On Russia and leaks 2.5 millions of accounts belong to...

Team Ghostshell Allegedly Spills 2.5 M Russian Records

As part of what it’s calling “Project Blackstar,” the hacking collective Team Ghostshell posted approximately 2.5 million records it claims belong to Russian individuals who work across the political, educational and law enforcement spectrum online earlier this morning. With the project, detailed...

NetCat CMS v5.0.1 - Multiple Web Vulnerabilities

Title: ====== NetCat CMS v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-10-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=738 VL-ID: ===== 738 Common Vulnerability Scoring System: ==================================== 2.5 Introduction: ============= Vendor...

NetCat CMS v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== NetCat CMS v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=738 Release Date: ============= 2012-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 738 Common...

NetCat CMS v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== NetCat CMS v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=738 Release Date: ============= 2012-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 738 Common...

Researchers caught espionage malware mastermind on webcam

In march 2011 CERT-Georgia has Discovered Cyber Espionage Attack Incident on country of Georgia. Advanced Malicious Software was Collecting Sensitive, Confidential Information about Georgian and American Security Documents and then uploading it to some of Command and Control Servers. After a...

NetCat CMS 5.0.1 Cross Site Scripting / HTTP Parameter Pollution

Title: ====== NetCat CMS v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-10-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=738 VL-ID: ===== 738 Common Vulnerability Scoring System: ==================================== 2.5 Introduction: ============= Vendor...

Report: Service Offers Cheap Access to Hacked Servers

An online service that sells fairly cheap access to compromised corporate machines creates a pay-to-play scenario for criminals seeking access to the networks of high-profile organizations, according to a Krebs on Security report. Brian Krebs writes that Dedicatexpress.com currently has access to...

Microsoft Settles With Kelihos Botnet Defendant, Says He Didn't Run the Network

Microsoft on Friday said it has reached a settlement with a Russian programmer it named as a defendant in a lawsuit related to the operation of the notorious Kelihos botnet. The company said that it no longer believes Andrey N. Sabelnikov was the operator of the botnet, but was instead responsibl...

Proxy Service a Front for Malware Distribution

Hundreds of thousands of users who signed up for an inexpensive proxy service called Proxybox.name got quite a steal alright. They ended up installing a Trojan horse linked to a botnet first detected last summer. Researchers at Symantec reverse engineered the Backdoor.Proxybox malware and unearth...

Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64

This updated package addresses the following changes to Daylight Saving Time DST : - The Daylight Saving Time has been canceled in the Russian Federation in 2011 and the upcoming years. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...