Threat Outbreak Alert RuleID23009: Email Messages Distributing Malicious Software on May 20, 2016

Medium Alert ID: 46315 First Published: 2016 May 20 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23009 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID22851: Email Messages Distributing Malicious Software on May 15, 2016

Medium Alert ID: 46193 First Published: 2016 May 16 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22851 may contain the following files: Name | Size...

500K Members of Hacking Forum Doxxed

An underground forum called Nulled.io that helped users share stolen credentials, software cracks, and leaked content was hacked earlier this month, spilling a glut of information, including users’ email addresses, encrypted passwords, and IP addresses, among other details. According to researche...

Windows Zero-Day Vulnerability, CVE-2 0 1 6-0 1 6 7: the attack Payment Card data-vulnerability warning-the black bar safety net

2 0 1 6 years 3 month, there has been a batch of economic motivation to the retail, Foodservice and hospitality industry as the target of the attack, these attacks, the message contains a large number of with embedded macros of the Microsoft Word document, once downloaded it will execute a named...

Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks

In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...

Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks

In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...

FBI Issues Ransomware Warning

The FBI has issued a warning to businesses about the relentless wave of ransomware. The bulletin includes preventative tips, and an affirmation of the bureau’s stance that companies affected by cryptoransomware attacks in particular should not succumb to temptation and pay their attackers off. Th...

FBI Releases Article on Ransomware

The Federal Bureau of Investigation FBI has released an article addressing the proliferation of ransomware campaigns. Ransomware is a type of malicious software that infects a computer and restricts users' access to it until a ransom is paid to unlock it. Individuals and organizations are...

New Decryptor Unlocks CryptXXX Ransomware

When exploits kits, in particular Angler, spread ransomware infections, people get nervous. The latest strain to appear in the virulent Angler kit is CryptXXX, which researchers at Proofpoint and Fox IT tied to the same group dropping old-school Reveton ransomware and Bedep click-fraud malware...

Follow The Money: Dissecting the Operations of the Cyber Crime Group FIN6

Cybercrime operations can be intricate and elaborate, with careful planning needed to navigate the various obstacles separating an attacker from a payout. Yet reports on these operations are often fragmentary, as the full scope of attacker activity typically occurs beyond the view of any one grou...

IBM Financial Transaction Manager for Corporate Payment Services Local Information Disclosure Vulnerability

IBM Financial Transaction Manager FTM for Corporate Payment Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in IBM FTM for Corporate Payment Services on multiple...

IBM Financial Transaction Manager for Corporate Payment Services Cross-Site Scripting Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A cross-site scripting vulnerability in IBM FTM for Corporate Payment Services on multiple platforms...

IBM Financial Transaction Manager for Corporate Payment Services Arbitrary Code Execution Vulnerability

IBM Financial Transaction Manager FTM for Corporate Payment Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. An arbitrary code execution vulnerability exists in IBM FTM for Corporate Payment Servic...

IBM Financial Transaction Manager for Corporate Payment Services Information Disclosure Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A security vulnerability in IBM FTM for Corporate Payment Services processing XML files on multiple...

IBM Financial Transaction Manager for Corporate Payment Services Clickjacking Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A clickjacking vulnerability exists in IBM FTM for Corporate Payment Services on multiple platforms,...

Xero: Insecure Payment System Integration

A flaw in our Credit Card Verification process was reported that could have allowed an attacker to avail themselves of a Xero Subscription without paying for it, for a month at most. This was rated as non-critical and was quickly fixed. Mitigation measures were in place to detect any abuse and we...

Threat Outbreak Alert RuleID22154: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 44562 First Published: 2016 April 8 18:54 GMT Last Updated: 2016 September 1 13:22 GMT Version: 23 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22154 a...

Threat Outbreak Alert RuleID22100: Email Messages Distributing Malicious Software on April 5, 2016

Medium Alert ID: 44503 First Published: 2016 April 6 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22100 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID22066: Email Messages Distributing Malicious Software on April 3, 2016

Medium Alert ID: 44475 First Published: 2016 April 4 13:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22066 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID22038: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44417 First Published: 2016 April 1 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22038 may contain the following files: Name | Siz...