Bypassing MassLogger Anti-Analysis — a Man-in-the-Middle Approach

The FireEye Front Line Applied Research & Expertise FLARE Team attempts to always stay on top of the most current and emerging threats. As a member of the FLARE Reverse Engineer team, I recently received a request to analyze a fairly new credential stealer identified as MassLogger. Despite the la...

Twitter Cracks Down on QAnon. Your Move, Facebook

Twitter's new policy won't make the conspiracy group disappear. But experts say it could dramatically reduce its ability to spread...

Hackers using famous movies to spread malware through torrents

By Deeba Ahmed Your favorite movies are being used as bait to spread malware through torrent files, Microsoft warns. This is a post from HackRead.com Read the original post: Hackers using famous movies to spread malware through torrents...

Hackers set up fake NHS website to spread malware

By Sudais Asif Another day another malware scams but this one is the lowest of the low. This is a post from HackRead.com Read the original post: Hackers set up fake NHS website to spread malware...

How Apple and Google Are Enabling Covid-19 Bluetooth Contact-Tracing

The tech giants have teamed up to use a Bluetooth-based framework to keep track of the spread of infections without compromising location privacy...

This Map Shows the Global Spread of Zero-Day Hacking Techniques

The collection of countries using those secret hacking techniques has expanded far beyond the usual suspects...

COVID-19: Hackers Begin Exploiting Zoom's Overnight Success to Spread Malware

As people increasingly work from home and online communication platforms such as Zoom explode in popularity in the wake of coronavirus outbreak, cybercriminals are taking advantage of the spike in usage by registering new fake "Zoom" domains and malicious "Zoom" executable files in an attempt to...

Authorities Eye Using Mobile Phone Tracking COVID-19's Spread

Authorities in the United States and Israel are eyeing ways to use mobile-phone and other location-based data to help control the spread of the new coronavirus COVID-19, raising serious privacy concerns about the practice of using and sharing people’s personal data during the time of a global...

Hackers can use flaw in Philips smart light bulbs to spread malware

By Sudais Asif Hackers can use this vulnerability to carry out a wide range of cyber attacks including ransomware infection. This is a post from HackRead.com Read the original post: Hackers can use flaw in Philips smart light bulbs to spread malware...

Trump's Ukraine Server Delusion Is Spreading

Even secretary of state Mike Pompeo has given credence to Trump's demonstrably wrong theory that Ukraine hacked the DNC...

Threat Roundup for October 4 to October 11

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Oct. 4 and Oct. 11. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics,...

Sandbox Breakout

Overview Versions of realms-shim prior to 1.2.0 are vulnerable to a Sandbox Breakout. The package's confined evaluator depended upon correct behavior of the spread operator a = ...b, ...c, which could be modified by the confined code. This may allow an attacker to escape the sandbox and run...

We All Could Pay a Price for the Latest Slap at Huawei

An international cybersecurity group has evicted the Chinese telecom company to comply with US sanctions. That could allow malware to spread more easily...

New Threat Actor Fraudulently Buys Digital Certificates to Spread Malware

Researchers have identified a new threat actor that is using impersonation fraud to purchase digital certificates that are then used for the spread of malware. Security firm ReversingLabs identified a bad actor that deceives certificate authorities into selling them legitimate digital certificate...

The Wrong Way to Talk About the El Paso Shooter's Manifesto

The more oxygen these manifestos get, the wider their messages spread. And no one understands that better than the people posting them...

Brand-New SystemBC Proxy Malware Spotted Using SOCKS5 for Stealth

A previously undocumented proxy malware, dubbed “SystemBC,” is upping the stealth game by using SOCKS5 to evade detection. It’s being distributed by the Fallout and RIG exploit kits EKs, according to researchers. Proofpoint researchers said on Thursday that in the most recently tracked example, t...

CVE-2019-13626

SDL Simple DirectMedia Layer 2.x through 2.0.9 has a heap-based buffer over-read in FillIMAADPCMblock, caused by an integer overflow in IMAADPCMdecode in audio/SDLwave.c...

Canada Uses Civil Anti-Spam Law in Bid to Fine Malware Purveyors

Canadian government regulators are using the country's powerful new anti-spam law to pursue hefty fines of up to a million dollars against Canadian citizens suspected of helping to spread malicious software. In March 2019, the Canadian Radio-television and Telecommunications Commission CRTC --...

Gustuff banking botnet targets Australia

Vitor Ventura authored this post. Executive summary Cisco Talos has uncovered a new Android-based campaign targeting Australian financial institutions. As the investigation progressed, Talos came to understand that this campaign was associated with the "ChristinaMorrow" text message spam scam...

Security update for pspp, spread-sheet-widget (moderate)

openSUSE Security Update: Security update for pspp, spread-sheet-widget Announcement ID: openSUSE-SU-2019:0240-1 Rating: moderate References: 1120061 Cross-References: CVE-2018-20230 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description:...