Monday, 3 April 2017

Fake Flash Player Ads in Skype Lead to Malware

Skype users appear to have been targeted in a recent malvertising campaign that was aggressively pushing malware hidden behind a fake Flash Player package.

read more



from SecurityWeek RSS Feed http://ift.tt/2nxGJG5
via https://ifttt.com/ IFTTT

Lazarus APT Spinoff Linked to Banking Hacks

The Lazarus Group has splintered off a group whose mission is to attack banks and steal money in order to fund its operations.

from Threatpost | The first stop for security news http://ift.tt/2nQdiRj
via https://ifttt.com/ IFTTT

Инструменты атаки 20-летней давности могут быть до сих пор актуальны

Инструменты атаки 20-летней давности могут быть до сих пор актуальны

Эксперты «Лаборатории Касперского» и исследователи из университета King’s College London начали изучать возможную связь между серией кибератак на правительственные ресурсы США в конце 1990-х и современными кампаниями кибершпионажа.



from Новости информационной безопасности - Anti-Malware.ru http://ift.tt/2nxlV1m
via https://ifttt.com/ IFTTT

Fileless Banking Malware Attackers Break In, Cash Out, Disappear

Attackers behind February's fileless malware attacks dropped malware on some bank ATMs that gave them the ability to dispense money, "at any time, at the touch of a button."

from Threatpost | The first stop for security news http://ift.tt/2nxlLap
via https://ifttt.com/ IFTTT

Android Beats Windows to Become World's Most Popular Operating System

It's an impressive milestone for Google — For the first time in decades, Android has been crowned as the world's most popular operating system in terms of Internet usage, knocking Microsoft Windows off the top spot. According to a new report from web traffic analytics firm StatCounter, Google's Android is the most popular operating system worldwide in terms of total internet usage across


from The Hacker News http://ift.tt/2ou5rvf
via https://ifttt.com/ IFTTT

Lines Around Cyber Threat Intelligence Sharing Blurring

The lines between between information shared between intelligence services, companies, and the government are getting increasingly blurry, a Georgetown professor warned.

from Threatpost | The first stop for security news http://ift.tt/2oBYu8T
via https://ifttt.com/ IFTTT

Memory Corruption Mitigations Doing Their Job

At the Security Analyst Summit, Mark Dowd described how memory corruption mitigations are successfully driving up exploit development costs.

from Threatpost | The first stop for security news http://ift.tt/2nTefd9
via https://ifttt.com/ IFTTT

Fake SEO Plugin Used In WordPress Malware Attacks

Malware that passes itself off as a WordPress SEO plugin has been infecting sites and opening a backdoor for hackers on thousands of sites.

from Threatpost | The first stop for security news http://ift.tt/2nTiO7r
via https://ifttt.com/ IFTTT

Russian-Speaking Turla Joins APT Elite

Researchers may have found a link between Moonlight Maze of the late ’90s and the Turla APT, which would elevate Turla to the ranks of the Equation Group as an elite nation-state attacker.

from Threatpost | The first stop for security news http://ift.tt/2oBYgPd
via https://ifttt.com/ IFTTT

ESET препарировала Carbon, сложный бэкдор кибергруппировки Turla

ESET препарировала Carbon, сложный бэкдор кибергруппировки Turla

Специалисты ESET выполнили анализ Carbon – бэкдора второго этапа из арсенала кибергруппировки Turla. Хакеры Turla используют широкий спектр инструментов, предназначенных для кибершпионажа. Жертвами группировки становились крупные организации из Европы и США.



from Новости информационной безопасности - Anti-Malware.ru http://ift.tt/2nSPv4V
via https://ifttt.com/ IFTTT

«Эмулятор» Nintendo Switch используется для мошенничества

Мошенники распространяют нежелательное ПО, предлагая фальшивый эмулятор Nintendo Switch.

from Новости - SecurityLab.ru http://ift.tt/2ot4UK1
via https://ifttt.com/ IFTTT

Обзор инцидентов безопасности за прошлую неделю

Краткий обзор главных событий в мире ИБ за период с 27 марта по 2 апреля 2017 года.

from Новости - SecurityLab.ru http://ift.tt/2oB8Upg
via https://ifttt.com/ IFTTT

New "USB Canary" Keeps Close Watch on USB Ports

New "USB Canary" Tool for Linux Monitors USB Ports 24/7

A new open source tool can provide Linux users with the ability to receive an alert any time someone attempts to plug a device into one of their machine’s USB ports.

read more



from SecurityWeek RSS Feed http://ift.tt/2nShMZ8
via https://ifttt.com/ IFTTT

Splunk Patches Information Theft and XSS Flaws

Splunk last week released an update for Splunk Enterprise to address an information theft bug and a persistent Cross Site Scripting (XSS) vulnerability.

read more



from SecurityWeek RSS Feed http://ift.tt/2oteLjH
via https://ifttt.com/ IFTTT

UEFI Vulnerabilities Found in Gigabyte Mini PCs

Endpoint security firm Cylance has disclosed the details of two potentially serious UEFI vulnerabilities that can be exploited to install a backdoor on some Gigabyte BRIX mini PCs. The vendor is working on a firmware update that will address the flaws.

read more



from SecurityWeek RSS Feed http://ift.tt/2n418Hn
via https://ifttt.com/ IFTTT

APT29 Uses Stealthy Backdoor to Maintain Access to Targets

Researchers at FireEye-owned Mandiant have conducted a detailed analysis of a stealthy backdoor used by the Russia-linked cyberespionage group APT29 to maintain access to targeted systems.

read more



from SecurityWeek RSS Feed http://ift.tt/2nOon5n
via https://ifttt.com/ IFTTT

«Русские хакеры» атаковали международную спортивную ассоциацию

Хакеров интересовали данные о приеме спортсменами запрещенных препаратов для лечения.

from Новости - SecurityLab.ru http://ift.tt/2nw527c
via https://ifttt.com/ IFTTT

Пользователям Skype угрожает вымогательское ПО

Вредонос распространяется через фальшивое обновление Adobe Flash Player.

from Новости - SecurityLab.ru http://ift.tt/2osDfZP
via https://ifttt.com/ IFTTT

Social Media Passwords Provide Easy Route into Corporate Networks

A combination of 'security fatigue' among users and inadequate password controls among the social media giants is providing a large attack vector for cybercriminals. This is the conclusion of a newly published survey that queried more than 250 security professionals at the RSA Conference in San Francisco in February 2017.

read more



from SecurityWeek RSS Feed http://ift.tt/2nO9HDr
via https://ifttt.com/ IFTTT