1724 matches found
Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day
Necurs botnet activity is spiking as scammers use the network to flood inboxes with promises of companionship, in part of a seasonal wave of Valentine’s Day-themed spam. Victims are encouraged to share revealing photos of themselves, which scammers later use as leverage in extortion shakedowns. T...
Russian scientists caught using nuclear facility supercomputer to mine Bitcoin
By Waqas Another day, another incident involving people mining Bitcoin cryptocurrency illegally This is a post from HackRead.com Read the original post: Russian scientists caught using nuclear facility supercomputer to mine Bitcoin...
Russian Scientists Arrested for Using Nuclear Weapon Facility to Mine Bitcoins
Two days ago when infosec bods claimed to have uncovered what's believed to be the first case of a SCADA network a water utility infected with cryptocurrency-mining malware, a batch of journalists accused other authors of making fear-mongering headlines, taunting that the next headline could be...
February 7, 2018 – Morning Cyber Coffee Headlines – “SpaceX” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 7, 2018 - Headlines Nearly 75% of Organizations in 5 Countries Fail in...
russianpublishinghouse.com XSS vulnerability
Open Bug Bounty ID: OBB-551408 Description| Value ---|--- Affected Website:| russianpublishinghouse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Scarab ransomware: new variant changes tactics
The Scarab ransomware was discovered in June 2017. Since then, several variants have been created and discovered in the wild. The most popular or widespread versions were distributed via the Necurs botnet and initially written in Visual C compiled. However, after unpacking, we've found that anoth...
italianrussianassociation.com XSS vulnerability
Open Bug Bounty ID: OBB-548802 Description| Value ---|--- Affected Website:| italianrussianassociation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Hacker Used Malware To Hike Prices for Gas Station Customers
By Waqas Russian authorities have identified an extensively distributed malware campaign targeting This is a post from HackRead.com Read the original post: Hacker Used Malware To Hike Prices for Gas Station Customers...
This Week in Security News: Meltdowns and Hijacks
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, we saw discussions on the vulnerabilities of chat bots and AI programs, and the types of software that may not be safe from malware and...
January 11, 2017 – Morning Cyber Coffee Headlines – “Chess” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 11, 2018 - Headlines Carbon Black in the News: The Underground Ransomwa...
russian-dating.com XSS vulnerability
Open Bug Bounty ID: OBB-472069 Description| Value ---|--- Affected Website:| russian-dating.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...
fr.russian-dating.com XSS vulnerability
Open Bug Bounty ID: OBB-472068 Description| Value ---|--- Affected Website:| fr.russian-dating.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
CEO of Major UK-Based Cryptocurrency Exchange Kidnapped in Ukraine
Pavel Lerner, a prominent Russian blockchain expert and known managing director of one of the major crypto-exchanges EXMO, has allegedly been kidnapped by "unknown" criminals in the Ukranian capital of Kiev. According to Ukraine-based web publication Strana, Lerner, 40-year-old citizen of Russia,...
Software used in FBI’s biometric database contains Russian code: Report
By Waqas The allegations that Russia hacked the 2016 elections in the This is a post from HackRead.com Read the original post: Software used in FBIs biometric database contains Russian code: Report...
russian-personals.com XSS vulnerability
Open Bug Bounty ID: OBB-456629 Description| Value ---|--- Affected Website:| russian-personals.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
russian-laws.com XSS vulnerability
Open Bug Bounty ID: OBB-455537 Description| Value ---|--- Affected Website:| russian-laws.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Travle aka PYLOT backdoor hits Russian-speaking targets
At the end of September, Palo Alto released a report on Unit42 activity where they - among other things – talked about PYLOT malware. We have been detecting attacks that have employed the use of this backdoor since at least 2015 and refer to it as Travle. Coincidentally, KL was recently involved ...
Kaspersky Lab Sues U.S. Government Over Software Ban
Moscow-based cyber security firm Kaspersky Lab has taken the United States government to a U.S. federal court for its decision to ban the use of Kaspersky products in federal agencies and departments. In September 2017, the United States Department of Homeland Security DHS issued a Binding...
Operation Dragonfly Analysis Suggests Links to Earlier Attacks
ARCHIVED STORY Operation Dragonfly Analysis Suggests Links to Earlier Attacks By Trellix · December 17, 2017 On September 6, Symantec published details of the Dragonfly campaign, which targeted dozens of energy companies throughout 2017. This attack was effectively Dragonfly 2.0, an update to a...
