556 matches found
Google Ads for Faux Cryptowallets Net Scammers At Least $500K
Crypto-thieves are buying Google Ads to target victims with fake wallets, which steal credentials and drain balances. So far, it looks like the cybercrooks have made off with more than $500,000 and counting. The ads serve links to purportedly download popular cryptowallets Phantom and MetaMask,...
Ransomware Gangs Target Corporate Financial Activities
Ransomware gangs are zeroing in on publicly held companies with the threat of financial exposure in an effort to encourage ransom payments, the FBI is warning. In an alert issued this week PDF, the Bureau said that activity over the course of the past year shows a trend toward targeting companies...
CVE-2021-35235 ASP.NET Debug Feature Enabled
The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web applications, if configured to do so. Debug mode causes ASP.NET to compile applications with extra information. The information enables a debugger to closely...
Google details cookie stealer malware campaign targeting YouTubers
By Waqas Google attributed the malware campaign to a group of attackers recruited via a Russian-language hacker forum. This is a post from HackRead.com Read the original post: Google details cookie stealer malware campaign targeting YouTubers...
How cyberattacks are changing according to new Microsoft Digital Defense Report
In 2021, cybercrime has become more sophisticated, widespread, and relentless. Criminals have targeted critical infrastructure—healthcare,1 information technology,2 financial services,3 energy sectors4—with headline-grabbing attacks that crippled businesses and harmed consumers. But there are...
[SECURITY] Fedora 34 Update: rust-cranelift-native-0.77.0-1.fc34
Support for targeting the host with Cranelift...
New Android Malware Steals Financial Data from 378 Banking and Wallet Apps
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan called ERMAC that targets Poland and has its roots in the infamous Cerberus malware, according to the latest research. "The new trojan already has active distribution campaigns and is targeting...
Operation Layover: How we tracked an attack on the aviation industry to five years of compromise
By Tiago Pereira and Vitor Ventura. Cisco Talos linked the recent aviation targeting campaigns to an actor who has been targeting the aviation industry for two years.The same actor has been running successful malware campaigns for more than five years.Although always using commodity malware, the...
Malicious Campaign Targets Latin America: The seller, The operator and a curious link
By Asheer Malhotra and Vitor Ventura, with contributions from Vanja Svajcer. Cisco Talos has observed a new malware campaign delivering commodity RATs, including njRAT and AsyncRAT.The campaign targets travel and hospitality organizations in Latin America.Techniques utilized in this campaign...
SAP Netweaver 跨站脚本漏洞
SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP Netweaver, which can be exploited by an attacker to craft a...
Spear phishing attacks underline how much dangerous phishing has gotten
By Waqas Today’s phishing attacks are more sophisticated as attackers have moved on in some cases from going after individuals to targeting businesses. This is a post from HackRead.com Read the original post: Spear phishing attacks underline how much dangerous phishing has gotten...
When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure
Note: In this two-part blog series, we expose a modern malware infrastructure and provide guidance for protecting against the wide range of threats it enables. Part 1 covers the evolution of the threat, how it spreads, and how it impacts organizations. Part 2 is a deep dive on the attacker behavi...
SolarWinds hackers exploited iOS 0-day to compromise iPhones
By Deeba Ahmed According to Google, SolarWinds hackers exploited an iOS 0-day vulnerability to hack iPhones and made millions from targeting phones worldwide. This is a post from HackRead.com Read the original post: SolarWinds hackers exploited iOS 0-day to compromise iPhones...
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...
What’s Google FLoC? And How Does It Affect Your Privacy?
There’s a battle raging over how advertisers can target us on the web—or whether they should be able to target us at all...
Stealthy RotaJakiro backdoor malware targeting Linux for 3 years
By Deeba Ahmed New RotaJakiro Stealthy Linux Malware With System Backdoor Capabilities Went Unnoticed for 3 Years. This is a post from HackRead.com Read the original post: Stealthy RotaJakiro backdoor malware targeting Linux for 3 years...
Oscar-Bait, Literally: Hackers Abuse Nominated Films for Phishing, Malware
Anticipation surrounding the upcoming 93rd Academy Awards broadcast on Sunday is being used by scammers to trick people into giving up their credentials — they think they’re about to stream Oscar-nominated films, but the reality turns out to be much different. Prior to the winners being announced...
This Week in Security News - April 2, 2021
Alleged Members of Egregor Ransomware Cartel Arrested and Cybercriminals Home in on Manufacturers...
Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager
Usage python3 f5rce.py -u Specify target URL -f Batch d...
New macOS malware XcodeSpy found sneaking into spy on victims
By Habiba Rashid According to researchers, XcodeSpy malware is targeting Xcode Developers in a supply-check attack. This is a post from HackRead.com Read the original post: New macOS malware XcodeSpy found sneaking into spy on victims...