Another Ransomware-as-a-Service project is being shut down by its operators Nemty ransomware, which was first released back in the summer of 2019, is being shut down by its operators. The revelation came to light as security researchers have found a post on the underground hacking forums, written in Russian. The […]
Viruses and parasites
Fresh IoT botnet called Dark_nexus spotted on the landscape Actively tracked by cybersecurity experts for quite a while, a rapidly elevating bonnet called Dark_nexus has been brought to the daylight, counting 1,372 bots under its authority. Revealed and investigated by the security vendor Bitdefender, the new cyber threat is expected […]
Experts warn: new Dark_nexus IoT botnet in the wild
Misconfigured Docker API ports left exposed without passwords used to spread new crypto-mining malware Security researchers released a report on a new attack campaign that targets Docker servers and delivers Kinsing malware.[1] By connecting to open API of Docker server, attackers can run files, and trigger shell scripts that lead […]
Hackers abuse misconfigured Docker servers to release Kinsing malware
Phishing surrounding coronavirus outbreak continues – scam emails deliver a new version of Zeus Sphinx banking trojan While some cybercriminals promise to spare infecting healthcare providers with malware during a difficult time of coronavirus outbreak,[1] others are keen to use it for personal gain. Security researchers at IBM X-Force uncovered […]
Resurface of Zeus Sphinx trojan: threat actors abusing COVID-19 crisis
The so-called BadUSB attack executed with the help of a letter that included a gift card from BestBuy Trustwave security research team published an article about a relatively rare malware distribution case.[1] A physical USB drive was sent to an undisclosed US hospitality company – it also included a brief […]
Rare phishing attack: company delivered malware-laden USB drive
TrickBot malware developers released malicious Android application to bypass the two-factor authentication protection used by various banks Malware authors released a new Android application that can intercept one-time authorization codes sent to various online banking customers via SMS or push notification. This way bypassing the security and completing fraudulent transactions.[1] This […]
TrickBot uses a malicious Android app to bypass 2FA by ...
Two websites providing misleading protection software were investigated by cybersecurity specialists Hackers decided to play a joke on the users and created two suspicious websites named corona-antivirus.com and antivirus-covid19.site aiming to advertise some type of antivirus tool that is supposed to protect the users from the widespread Corona disease. As […]
BlackNET malware spread via fake Corona antivirus tool
Hackers follow each others’ techniques: Sodinokibi distributes data stolen from victims on hacker forums Data, possibly belonging to consultancy firm Brooks International got exposed online due to the refusal paying demanded ransom[1] when Sodinokibi ransomware[2] infected their system. Now developers release information on hacking forums and sell details about their […]
Sodinokibi creators leak and sell data stolen from organizations
France claims that Pysa (Mespinoza) malware has already hit some local networks Mespinoza ransomware was first spotted by a cybersecurity researcher named Amigo-A who announced his findings on Twitter on October 25th, 2019.[1] When this malicious piece of software first showed up, it locked files by using a unique cipher, […]
A new variant of Pysa ransomware is infecting French governments
Unauthorized investigation reveals that the international e-discovery company Epiq Global been hit by ransomware The international e-discovery company Epiq Global was forced to take systems offline after the unauthorized activity.[1] Legal services giant got hit by Ryuk ransomware and malware started to encrypt data in devices throughout the network until […]