Sodinokibi Ransomware Pushed via Foreclosure Warning Spam

[ June 03, 2019 ] A malspam campaign targeting potential German victims is actively distributing Sodinokibi ransomware via spam emails disguised as foreclosure notifications with malicious attachments which pose as foreclosure notifications. After the Sodinokibi Ransomware is executed, it will run the commands to disable Windows startup repair and to delete shadow volume copies. The...

Zero-Day Flaw in Windows 10 Task Scheduler Gets Micropatch

[ June 03, 2019 ] An unpatched local privilege escalation zero-day vulnerability in Windows 10 received a temporary patch today. The fix is delivered through the 0patch platform and can be applied on systems without rebooting them. Exploit code is available for this zero-day flaw from researcher SandboxEscaper, who named it BearLPE when she published...

Popular Video Editing Software Website Hacked to Spread Banking Trojan

[ April 12, 2019 ] The official website of the VSDC software — one of the most popular, free video editing and converting app with over 1.3 million monthly visitors was hacked. hackers hijacked the VSDC website and replaced its software download links leading to malware versions, tricking visitors into installing dangerous Win32.Bolik.2 banking trojan...

Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password

[ April 12 , 2019 ] Researchers have unveiled several serious vulnerabilities in the wireless security protocol that could allow attackers to recover the password of the Wi-Fi network. Concretely, attackers can then read information that WPA3 was assumed to safely encrypt. This can be abused to steal sensitive transmitted information such as credit card...

Sophisticated ‘TajMahal APT Framework’ Remained Undetected for 5 Years

[ April 12, 2019 ] Cybersecurity researchers yesterday unveiled the existence of a highly sophisticated spyware framework that has been in operation for at least last 5 years—but remained undetected until recently. Dubbed TajMahal by researchers at Kaspersky Lab, the APT framework is a high-tech modular-based malware toolkit that not only supports a vast number...

Lens manufacturer Hoya Corporation suffers cyber attack causing partial factory shutdown

[ April 09, 2019 ] Hoya Corporation, the leading manufacturer of optical products in Japan, has disclosed that it suffered a serious cyber attack in late February. Due to the attack, a large section of its factories was shut down for three days. As many as 100 computers were infected with a virus that stole...

UK businesses suffering a cyber attack every minute

[ April 09, 2019 ] British businesses are being hit by more cyberattacks than ever before, according to new research. Findings from business ISP Beaming claims that on average, UK firms faced 119,659 internet-borne cyber attacks each in the first quarter of 2019 - equivalent to one per minute. Remotely controlled IoT applications and file...

FIN6 Hackers Group Targeting Enterprise Network to Deploy LockerGoga and Ryuk Ransomware

[ April 08, 2019 ] FIN6 cybercrime group tied with a LockerGoga and Ryuk ransomware that targets the enterprise network in an engineering industry by compromising the internet facing system. FIN6 using publicly available tools such as Cobalt Strike, Metasploit, Adfind and 7-Zip to conduct internal reconnaissance, compress data and other operation to gain the...

MikroTik RouterOS Vulnerability Allows Hackers to Perform DOS Attacks

[ April 08, 2019 ] A Serious vulnerability that discovered in MikroTik RouterOS allows attackers to perform DoS attack on the vulnerable router that causes the device to reboot. MikroTik provides hardware and software for Internet connectivity around the world and they also created a RouterOS software. This vulnerability allows the watchdog timer to reboots...

Arizona Beverages knocked offline by ransomware attack

[ April 04, 2019 ] Arizona Beverages, one of the largest beverage suppliers in the U.S., is recovering after a massive ransomware attack last month. The company, famous for its iced tea beverages, is still rebuilding its network almost two weeks after the attack hit, wiping hundreds of Windows computers and servers and effectively shutting...