Malware - Security Ticks

Ebury botnet compromises 400,000+ Linux servers

backdoor, botnet, cybercrime, Don't miss, ESET, Linux, Malware, News / SecurityTicks

Ebury botnet compromises 400,000+ Linux servers 2024-05-16 at 07:31 By Help Net Security ESET researchers released its deep-dive investigation into one of the most advanced server-side malware campaigns. It is still growing and has seen hundreds of thousands of compromised servers in its at least 15-year-long operation. The Ebury group and botnet have been involved […]

React to this headline:

Ebury botnet compromises 400,000+ Linux servers Read More »

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb

ad, cookies, data breach, Don't miss, extension, Hot stuff, Malware, News, Product showcase, Surfshark, trackers / SecurityTicks

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb 2024-05-16 at 07:01 By Help Net Security A study by PageFair revealed that ad blocker usage surged by 30% in 2016 alone, reflecting a growing public concern for privacy and uninterrupted browsing. Fast-forward to today, and the numbers are even more dramatic. According to Forbes, Americans

React to this headline:

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb Read More »

How attackers deliver malware to Foxit PDF Reader users

Check Point, Don't miss, Foxit, Hot stuff, Malware, News, PDF / SecurityTicks

How attackers deliver malware to Foxit PDF Reader users 2024-05-15 at 16:31 By Zeljka Zorz Threat actors are taking advantage of the flawed design of Foxit PDF Reader’s alerts to deliver malware via booby-trapped PDF documents, Check Point researchers have warned. Exploiting the issue The researchers have analyzed several campaigns using malicious PDF files that

React to this headline:

How attackers deliver malware to Foxit PDF Reader users Read More »

400,000 Linux Servers Hit by Ebury Botnet

botnet, Linux malware, Malware, Malware & Threats / SecurityTicks

400,000 Linux Servers Hit by Ebury Botnet 2024-05-15 at 15:01 By Ionut Arghire The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected. The post 400,000 Linux Servers Hit by Ebury Botnet appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

400,000 Linux Servers Hit by Ebury Botnet Read More »

Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks

DNS, Malware, Malware & Threats / SecurityTicks

Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks 2024-05-14 at 15:31 By Ionut Arghire Threat actors are using DNS tunneling to track victims’ interaction with spam and to scan network infrastructures. The post Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks Read More »

New SOHO router malware aims for cloud accounts, internal company resources

data collection, Don't miss, Hot stuff, Lumen, Malware, networking, News, router, SMBs, Trend Micro, trojan / SecurityTicks

New SOHO router malware aims for cloud accounts, internal company resources 2024-05-02 at 14:46 By Zeljka Zorz Cuttlefish, a new malware family that targets enterprise-grade small office/home office (SOHO) routers, is used by criminals to steal account credentials / secrets for AWS, CloudFlare, Docker, BitBucket and other cloud-based services. “With the stolen key material, the

React to this headline:

New SOHO router malware aims for cloud accounts, internal company resources Read More »

Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices

Android, Malware, Malware & Threats, Mobile & Wireless / SecurityTicks

Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices 2024-04-26 at 17:16 By Ionut Arghire A new Android trojan named Brokewell can steal user’s sensitive information and allows attackers to take over devices. The post Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices Read More »

North Korean Hackers Hijack Antivirus Updates for Malware Delivery

Malware, Malware & Threats, North Korea / SecurityTicks

North Korean Hackers Hijack Antivirus Updates for Malware Delivery 2024-04-24 at 18:17 By Ionut Arghire A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners. The post North Korean Hackers Hijack Antivirus Updates for Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

North Korean Hackers Hijack Antivirus Updates for Malware Delivery Read More »

Threat Actor Uses Multiple Infostealers in Global Campaign

Malware, Malware & Threats / SecurityTicks

Threat Actor Uses Multiple Infostealers in Global Campaign 2024-04-24 at 16:16 By Ionut Arghire A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide. The post Threat Actor Uses Multiple Infostealers in Global Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Threat Actor Uses Multiple Infostealers in Global Campaign Read More »

AI set to play key role in future phishing attacks

Artificial Intelligence, cybercriminals, cybersecurity, deepfakes, Egress, generative AI, Malware, News, phishing, QR codes, report / SecurityTicks

AI set to play key role in future phishing attacks 2024-04-24 at 07:01 By Help Net Security A staggering increase in QR code phishing (quishing) attacks during 2023 saw them skyrocket up the list of concerns for cyber teams globally, according to Egress. Attacks were both prolific and highly successful, demonstrating how cybercriminals effectively combine

React to this headline:

AI set to play key role in future phishing attacks Read More »

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

APT28, espionage, Malware, Malware & Threats, Microsoft, Nation-State, Russia / SecurityTicks

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations 2024-04-23 at 17:16 By Ionut Arghire Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations. The post Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations Read More »

Fuxnet malware: Growing threat to industrial sensors

attacks, critical infrastructure, cybersecurity, Don't miss, Hot stuff, Malware, network, Phosphorus Cybersecurity, sensors, Video / SecurityTicks

Fuxnet malware: Growing threat to industrial sensors 2024-04-22 at 07:01 By Help Net Security In this Help Net Security video, Sonu Shankar, Chief Strategy Officer at Phosphorus, discusses how Blackjack’s Fuxnet malware should be a wakeup call to industrial operators about the vulnerability of sensor networks and the outsized impact these attacks can have on

React to this headline:

Fuxnet malware: Growing threat to industrial sensors Read More »

Bitcoin ransomware Akira drains $42M from more than 250 companies: FBI

Europe, Europol, Government, investigation, Malware, Netherlands, Ransomware, UK Government, US Government / SecurityTicks

Bitcoin ransomware Akira drains $42M from more than 250 companies: FBI 2024-04-19 at 11:02 By Cointelegraph by Arijit Sarkar The U.S. Federal Bureau of Investigation (FBI) found that Akira ransomware has been targeting businesses and critical infrastructure entities in North America, Europe and Australia since March 2023. This article is an excerpt from Cointelegraph.com News

React to this headline:

Bitcoin ransomware Akira drains $42M from more than 250 companies: FBI Read More »

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

cybercrime, dark web, Don't miss, Malware, News, Ransomware, Sophos, threat / SecurityTicks

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate 2024-04-18 at 08:01 By Help Net Security Since June 2023, Sophos X-Ops has discovered 19 junk gun ransomware variants — cheap, independently produced, and crudely constructed — on the dark web. The developers of these junk gun variants are attempting to

React to this headline:

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate Read More »

Threat Actors Manipulate GitHub Search to Deliver Malware

GitHub, Malware, Malware & Threats / SecurityTicks

Threat Actors Manipulate GitHub Search to Deliver Malware 2024-04-12 at 14:31 By Ionut Arghire Checkmarx warns of a new attack relying on GitHub search manipulation to deliver malicious code. The post Threat Actors Manipulate GitHub Search to Deliver Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Threat Actors Manipulate GitHub Search to Deliver Malware Read More »

New Latrodectus loader steps in for Qbot

Don't miss, Hot stuff, initial access broker, Malware, News, Proofpoint, Team Cymru / SecurityTicks

New Latrodectus loader steps in for Qbot 2024-04-09 at 14:02 By Zeljka Zorz New (down)loader malware called Latrodectus is being leveraged by initial access brokers and it looks like it might have been written by the same developers who created the IcedID loader. Malware delivery campaigns “[Latrodectus] was first observed being distributed by TA577, an

React to this headline:

New Latrodectus loader steps in for Qbot Read More »

How Google plans to make stolen session cookies worthless for attackers

authentication, Chrome, cookies, Don't miss, Hot stuff, Malware, MFA, News, Privacy, public-key cryptography / SecurityTicks

How Google plans to make stolen session cookies worthless for attackers 2024-04-03 at 08:31 By Zeljka Zorz Google is working on a new security feature for Chrome called Device Bound Session Credentials (DBSC), meant to prevent attackers from using stolen session cookies to gain access user accounts. Session (i.e., authentication) cookies are stored by browsers

React to this headline:

How Google plans to make stolen session cookies worthless for attackers Read More »

Escalating malware tactics drive global cybercrime epidemic

cybercrime, cybersecurity, Malware, News, report, survey, WatchGuard / SecurityTicks

Escalating malware tactics drive global cybercrime epidemic 2024-04-01 at 06:31 By Help Net Security Evasive, basic, and encrypted malware all increased in Q4 2023, fueling a rise in total malware, according to WatchGuard. Threat actors employ diverse tactics The average malware detections rose 80% from the previous quarter, illustrating a substantial volume of malware threats

React to this headline:

Escalating malware tactics drive global cybercrime epidemic Read More »

Mystery malware targets Call of Duty cheaters, stealing their Bitcoin

Activision, Bitcoin, crypto drainer, Gaming, Malware, video game, vx-underground / SecurityTicks

Mystery malware targets Call of Duty cheaters, stealing their Bitcoin 2024-03-29 at 06:01 By Cointelegraph by Jesse Coghlan Malware database vx-underground has warned of a new info-stealing malware in cyberspace that is targeting video gamers, especially those who use cheating software. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Mystery malware targets Call of Duty cheaters, stealing their Bitcoin Read More »

Cybercriminals use cheap and simple infostealers to exfiltrate data

cybercrime, data breach, identity, Malware, News, passwords, report, SpyCloud, survey / SecurityTicks

Cybercriminals use cheap and simple infostealers to exfiltrate data 2024-03-28 at 06:01 By Help Net Security The rise in identity-based attacks can be attributed to a rapid increase in malware, according to SpyCloud. Researchers found that 61% of data breaches in 2023, involving over 343 million stolen credentials, were infostealer malware-related. Of these compromised identity

React to this headline:

Cybercriminals use cheap and simple infostealers to exfiltrate data Read More »