Browsing tag

malware

Malware-as-a-Service – New Black Rose Lucy Malware Targets Android Devices With a Special Logic for Xiaomi Phones

Malware-as-a-Service(MaaS) is a practice in which the attackers puts the malware for sale allows anyone with little technical knowledge can launch an attack. Checkpoint research team uncovered the new MaaS product, Black Rose Lucy, developed by Russian speaking team dubbed The Lucy Gang. The MaaS bundle contains a Lucy Loader which is used to remote […]

Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet

A Russian national namely Peter Yuryeich Levashov has pleaded guilty to operating the Kelihos botnet, which was used to launch a huge spamming and credential stealing campaign across the globe. Levashov, a 38-year old resident of St. Petersburg, Russia, was presented before a Connecticut US District Court and admitted to being involved in a large […]

New CHAINSHOT Malware Attack Carried Adobe Flash 0-day Exploit with Weaponized Microsoft Excel Documents

Newly discovered CHAINSHOT Malware attack using Adobe Flash 0-day vulnerability that carried by several Weaponized documents along with the encrypted malware payload. Researchers successfully cracked the 512-bit RSA key and decrypted the payload also the attack contains the several steps that follow each and every steps input. Attackers using the new toolkit that performed as […]

Schneider Electric Shipped USB Drives Loaded with Malware

Schneider Electric has released a warning and advisory notice according to which the USB drives shipped with some of the company’s products may be infected with malware. “Schneider Electric is aware that USB removable media shipped with the Conext Combox and Conext Battery Monitor products may have been exposed to malware during manufacturing at a […]

North Korean Government Sponsored Hacking Team Member Charged for Wannacry Ransomware and Sony Cyber Attack

North Korean Government sponsored APT “Lazarus Group,” member Park Jin Hyok charged for conspiracy to various most destructive Wannacry and Sony Cyber Attack. Lazarus Group conspiracy attacks conducted against various sectors such as entertainment, financial services, defense, technology, and virtual currency industries, academia, and electric utilities. Their activities including the development of various malware that […]

USB drives shipped with Schneider Solar products are infected with malware

The company announced that some of the USB drives it has shipped with its conext ComBox and Conext Battery Monitor products were infected with malware Schneider Electric has found a malicious code in the USB drives that have been sent with the products Conext ComBox and Conext Battery Monitor, as reported by ethical hacking specialists […]

WannaCry ransomware fame North Korean hacker tracked down by the US

It is no secret that the US government has always suspected and even accused North Korea was carrying out ransomware attacks using the destructive WannaCry ransomware and for hacking Sony Pictures. But it merely has remained a suspicion so far. However, now the US authorities have found solid evidence of the involvement of North Korean […]

Hackers Launching GandCrab Ransomware via New Fallout Exploit Kit using Malvertising Campaign

Cybercriminals now using new Fallout Exploit Kit for launching GandCrab Ransomware via Malvertising Campaign that targets many victims around the world. This malvertising campaign mainly affected users in  Japan, Korea, the Middle East, Southern Europe, Asia Pacific region and other countries. Along with this Exploit kit, there are additional domains, regions, and payloads associated with the campaign […]

MEGA Chrome extension hacked with cryptocurrency malware

Cloud storage solution MEGA delivered Monero cryptocurrency malware. 21st-century technologies like blockchain are regarded as groundbreaking inventions. However, the security aspect of the new age digital systems has always been criticized for being lackluster and flawed. This concern is reinforced frequently as digital technologies are successfully compromised quite often. According to the latest reports, file-sharing cloud […]

A New Banking Malware Disguises as Security Module Steals Your Banking Credentials

A new unique banking malware dubbed CamuBot poses itself like a security module from the bank to gain victim’s trust and tempt them into installing the malware on their device. The threat actor’s actively targeting the companies and public sector organizations using a number of social engineering techniques to bypass the security controls. Security researchers […]

CamuBot banking malware is able to bypass biometric authentication

This malware variant targets Brazilian banking institutions clients A large numbers of customers from different Brazilian banks are being warned about a malware known as CamuBot, hidden in plain sight and presented to the victim as a security module required for the final user provided by the bank. This malware even includes logos from banks that make it […]

Payment card data stealing malware campaign affects dozens of websites each day

It has been recommended to block Magento e-commerce software; otherwise the details of your card will end up in Moscow Over the last six months more than 7k e-commerce websites have been infected with malicious JavaScript designed to collect payment cards details from users as they concretize their online orders. Willem de Groot, ethical hacking expert based in Holland […]

CamuBot Malware Camouflaged as Bank Security App to Steal Credentials

A new banking malware has been discovered that is targeting bank customers in Brazil. Dubbed as CamuBot, it is identified to be a unique malware because it is disguised as a necessary security module of the bank. The malware can also bypass the biometric authentication feature, which is a disturbing sign. According to IBM X-Force […]

Hackers Uploaded 130 Malicious Apps on Google Play Store to Generate Illegal Revenue

Cyber Criminals uploaded around 130 malicious Android apps on Google play store that mimics as various well-known applications to generate illegal revenue by promoting paid mobile services. Hackers distributing malicious trojan file as an official application on the “Eldorado” trade network via Google Play store using other software. In this case, researchers uncovered two modified […]

Hackers Abusing Windows Management Interface Command Tool to Deliver Malware That Steal Email Account Passwords

Cybercriminals are continuing to innovate and use legitimate tools to deliver the malicious file, with this new campaign attacker used WMIC (Windows Management Interface Command) to deliver the information-stealing malware. WMIC is a command line interface that allows users to run WMI operations, which used to get the status of the local or remote computer systems. […]

Chinese Threat Actors Rocke Launching Sophisticated Crypto-mining Malware to Mine Monero Cryptocurrency

New threat actor called Rocke distributing and executing crypto-mining malware using variously sophisticated toolkit and Git repositories to mine Monero cryptocurrency. Malicious cryptocurrency miners are significantly increasing day by day in various form to generate revenue by various cyber criminals group and individuals. In this case, an attacker using various distribution method including  HttpFileServers (HFS), and […]

Cobalt APT Hackers Attack Financial Organizations using Malware via Weaponized MS Word Document

Cobalt cyber criminals gang spreading new malware campaign using Weaponized MS Word Document to attack various financial institutions and also this group using various sophisticated Tools to evade the windows defense. Cobalt hackers have a strong tracking record of a various cyber attack and they are primarily targeting financial organizations using ATM malware also researchers […]

Cryptomining scripts will be blocked in upcoming versions of Firefox browser

In all the future versions of the Firefox web browser, cryptojacking malware will be blocked. Mozilla, the company behind Firefox browser, announced on August 30 that it is launching an anti-tracking initiative, which will be implemented broadly over the next few months. Firefox has cited the study from Ghostery, a browser extension that about 55.4% […]

Newly Discovered Android Malware Stealing Data from Messaging Applications WhatsApp, Viber, Facebook

A new Android spyware family named as BusyGasper which is distributed by unknown threat actors that contains unique spy implant with stand-out features such as device sensors listeners, motion detectors. Apart from this, BusyGasper capable of exfiltrating data from messaging applications such as WhatsApp, Viber, Facebook along with keylogging capabilities. It communicating via FTP server to […]