Category: Anti-malware

By Eduard Kovacs on March 22, 2017   The threat group behind the cyber espionage campaign dubbed “Machete” continues to target entities in Spanish-speaking countries, endpoint security firm Cylance reported on Wednesday. Machete was first analyzed by Kaspersky Lab back in 2014. At the time, the company said the operation had been active since 2010,… Continue reading 'Machete' Continues to Spy on Spanish-Speaking Countries

Four years of active infection, claims security biz Dragos   22 Mar 2017 at 19:34, John Leyden   Malware posing as legitimate firmware for Siemens control gear has apparently infected industrial equipment worldwide over the past four years.   The cyber-nasty is packaged as software to be installed on Siemens programmable logic controllers (PLC), we’re… Continue reading Malware 'disguised as Siemens firmware drills into 10 industrial plants'

Nowadays, cybercriminals seem to prefer Fileless Malware Attacks on organizations. Most malware attacks can be detected, blocked and removed using malware removal tools or applications. However, Fileless Malware Attacks are non-malware attacks that utilize legitimate existing programs and applications and are hence able to bypass most endpoint protection systems. Further, the malware resides only in… Continue reading Increasing Fileless Malware Attacks

    Did careless cyber criminals working for the FSB blow the gaffe on the Yahoo! hack? WikiLeaks offers to share Vault 7 vulnerabilities with vendors, but it wants something in return. A look at the Atlantic Council’s recently concluded Cyber 9/12 competition. Does cabin fever increase the risk of being hacked? Enigma Software saw… Continue reading CyberWire Daily Podcast – WikiLeaks, Enigma Software, Kirk ransomware

By Ionut Arghire on March 21, 2017   Check Point security researchers have warned that tactics employed by a mobile Trojan targeting users in China might become a worldwide threat when adopted by Western malware.   Called the “Swearing Trojan”, the threat was discovered not long ago by Tencent Security researchers, who revealed that the threat… Continue reading “Swearing Trojan” Tactics Could Become Global Threat: Researchers

21st March 2017 By Usama Jawad                                               It’s been tough times for Microsoft Edge lately; it currently sports a user base of just over 5%, Google’s Project Zero keeps revealing the browser’s vulnerabilities, and new extensions are coming at a snail’s pace.   Now, at the Pwn2Own 2017 hacking event, Edge has been… Continue reading Microsoft Edge declared 'least secure' browser in hacking event as Chrome emerges unscathed

IT LIVES!                            21 Mar 2017  John Leyden   Cybercriminals behind the Necurs botnet have reactivated the zombie network and returned to their original business of using compromised machines as conduits for spam distribution.   In January, Cisco Talos reported that the Necurs botnet had gone offline, taking the typical volume of Locky… Continue reading World's worst botnet fiends switch from ransomware to stock scam spam

March 21, 2017 by Jérôme Segura   Over the last few days we have observed an increase in malvertising activity coming from adult websites that have significant traffic (several million monthly visits each). Malicious actors are using pop-under ads (adverts that load in a new browser window under the current active page) to surreptitiously redirect users to the RIG… Continue reading Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign

20th March 2017  By Catalin Cimpanu                    Scientists from the Hong Kong Baptist University (HKBU) have developed a new user authentication system that relies on reading lip motions while the user speaks a password out loud.   The technology is a mixture of traditional authentication solutions with the new wave of biometrics-based solutions.… Continue reading New Technology Combines Lip Motion and Passwords to Authenticate Users

March 20th 2017  By Catalin Cimpanu                                              Mozilla engineers released Firefox 52.0.1 to patch a security flaw that came to light last Friday, in the Pwn2Own 2017 hacking contest.   All in all, it took Mozilla engineers only 22 hours from the time the bug was used during… Continue reading It Took Mozilla 22 Hours to Patch a Firefox Vulnerability Discovered at Pwn2Own