557 matches found
Metamorfo Banking Trojan Keeps Its Sights on Brazil
This blog post was authored by Edmund Brumaghin, Warren Mercer, Paul Rascagneres, and Vitor Ventura. Executive Summary Financially motivated cybercriminals have used banking trojans for years to steal sensitive financial information from victims. They are often created to gather credit card...
Cybercriminals Target Kodi Media Player for Malware Distribution
The Kodi media player has emerged as a malware distribution platform for cybercriminals, recently becoming the target for a cryptomining campaign that compromised about 5,000 machines before being thwarted. Those victims are still at risk, researchers warned. Kodi is free and open-source, and can...
Threat Outbreak Alert RuleID33315: Email Messages Distributing Malicious Software on August 13, 2018
Medium Alert ID: 58700 First Published: 2018 August 14 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33315 may contain the following files: Name |...
Snapchat: Domain Takeover in [obviousengine.com] a snapchat acquisitions
Hello, Summary while searching in snapchat acquisitions i found obviousengine moe information here https://www.crunchbase.com/organization/obvious-engineeringsection-overview and i found that it's pointing to Github page so i claimed it POC - when i visit it was look like F331040 - i successfully...
Threat Outbreak Alert RuleID32908: Email Messages Distributing Malicious Software on June 21, 2018
Medium Alert ID: 58252 First Published: 2018 June 21 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32908 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID32987: Email Messages Distributing Malicious Software on June 18, 2018
Medium Alert ID: 58222 First Published: 2018 June 18 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32987 may contain the following files: Name | Siz...
13 Ways Cyber Criminals Spread Malware
By David Balaban Security incidents where hackers distribute malicious code malware via spam, This is a post from HackRead.com Read the original post: 13 Ways Cyber Criminals Spread Malware...
Threat Outbreak Alert RuleID32970: Email Messages Distributing Malicious Software on June 14, 2018
Medium Alert ID: 58178 First Published: 2018 June 14 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32970 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID32900: Email Messages Distributing Malicious Software on June 7, 2018
Medium Alert ID: 58056 First Published: 2018 June 7 20:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32900 may contain the following files: Name | Size...
PT-2018-10391
Name of the Vulnerable Software and Affected Versions Mahara versions 17.04 through 17.04.7 Mahara versions 17.10 through 17.10.4 Mahara versions 18.04 through 18.04.0 Description The issue allows malicious files to be uploaded and made available for download by placing infected files into a Leap...
GandCrab Ransomware Found Hiding on Legitimate Websites
The GandCrab ransomware continues to virulently spread and adapt to shifting cyber-conditions, most recently crawling back into relevance on the back of several large-scale spam campaigns. What’s interesting is that GandCrab payload was found hiding on legitimate but compromised websites. These,...
Enhancing Office 365 Advanced Threat Protection with detonation-based heuristics and machine learning
Email, coupled with reliable social engineering techniques, continues to be one of the primary entry points for credential phishing, targeted attacks, and commodity malware like ransomware and, increasingly in the last few months, cryptocurrency miners. Office 365 Advanced Threat Protection ATP...
Gandcrab Ransomware Walks its Way onto Compromised Sites
This blog post authored by Nick Biasini with contributions from Nick Lister and Christopher Marczewski. Despite the recent decline in the prevalence of ransomware in the threat landscape, Cisco Talos has been monitoring the now widely distributed ransomware called Gandcrab. Gandcrab uses both...
Universal Plug and Play (UPnP): What you need to know
Universal Plug and Play UPnP is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a...
Threat Outbreak Alert RuleID32357: Email Messages Distributing Malicious Software on April 2, 2018
Medium Alert ID: 57312 First Published: 2018 April 2 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32357 may contain the following files: Name | Siz...
Suspicious Exploit Kit Website Redirection
An exploit kit is a type of toolkit cybercriminals use to attack vulnerabilities in systems so they can distribute malware or perform other malicious activities. Remote attackers can infect users by redirecting them to a malicious web page. Successful infection will allow the attacker to download...
New Web-Based Malware Distribution Channel ‘BlackTDS’ Surfaces
A new traffic distribution system for malware is being offered as a service on the Dark Web and is promoting itself as an affordable way to deploy exploit kits and malware. The traffic distribution system TDS is being called BlackTDS by the Proofpoint researchers that found it. Traffic distributi...
Starbucks: Subdomain takeover on svcgatewayus.starbucks.com
Hello, this is pretty serious security issue in some context, so please act as fast as possible. Overview: One of the starbucks.com subdomains is pointing to Azure, which has unclaimed CNAME record. ANYONE is able to own starbucks.com subdomain at the moment. This vulnerability is called subdomai...
Threat Outbreak Alert RuleID32080: Email Messages Distributing Malicious Software on February 21, 2018
Medium Alert ID: 56887 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32080 may contain the following files: Name |...
Threat Outbreak Alert RuleID32024: Email Messages Distributing Malicious Software on February 14, 2018
Medium Alert ID: 56833 First Published: 2018 February 14 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32024 may contain the following files: Name |...