Malware & Threats Archives - Page 38 of 107

JFrog’s New Tools Flag Malicious JavaScript Packages

Issued by: Dark Reading

DevOps security firm JFrog released three open source security tools in response to recent issues with software registry npm to help JavaScript developers detect and prevent the installation of problematic packages. Software supply chain attacks are becoming a big problem in the open source software ecosystem, with attackers sneaking information stealers, keyloggers, and other types…

Malware & Threats

TianySpy Malware Uses Smishing Disguised as Message From Telco

Issued by: Trend Micro Blog

It has been some time since SMS or text messaging has become a means to spread mobile malware. In September 2021, Trend Micro confirmed a new mobile malware infection chain targeting both Android and iPhone devices. The chain is triggered by a smishing message that appears to be sent from a telecommunications company. It is…

Malware & Threats

Tales from the Dark Web, Part 2: Ransomware Stacked With Distribution Services Creates the Perfect Storm

Issued by: Dark Reading

Ransomware incidents have increased dramatically over the past few years. Complaints about ransomware attacks to the FBI’s Internet Crime Complaint Center surged 62% in the first half of 2021 compared to a similar time frame in 2020, according to the Cybersecurity and Infrastructure Security Agency. To blunt this growing threat, security professionals need to understand…

Malware & Threats

Assange Wins First Stage in Effort to Appeal US Extradition

Issued by: Security Week

The High Court in London gave Assange permission to appeal the case to the U.K. Supreme Court. But the Supreme Court must agree to accept the case before it can move forward. “Make no mistake, we won today in court,” Assange’s fiancee, Stella Moris, said outside the courthouse, noting that he remains in custody at…

Malware & Threats

Ukraine Attack: Hackers Had Access for Months Before Causing Damage

Issued by: Security Week

Tens of Ukrainian government websites were hacked earlier this month, many of them defaced with messages suggesting the attack was in response to the country’s pro-Western stance. Ukraine has blamed Russia for the attack, but the Kremlin has denied the accusations. The attack involved a new and destructive piece of malware that has been named…

Malware & Threats

Nigerian Authorities Arrest 11 Members of Prolific BEC Fraud Group

Issued by: Security Week

The 11 suspects were arrested as part of a 10-day operation (December 13-22, 2021) in which the Nigerian Police collaborated with Interpol and private security firms Palo Alto Networks and Group-IB. The individuals are believed to be collectively involved in BEC attacks targeting more than 50,000 victims. On the laptop of one of the suspects,…

Malware & Threats

Living Off the “Edge” of the Land

Issued by: Security Week

Edge computing is eminently practical in that it solves several important problems, many of which are related to the latency created when data must travel long distances. The edge offers significant functional and economic benefits, such as the emergence of a new breed of real-time applications. And the need for more edges has increased due…

Malware & Threats

Multi-Factor Authentication Bypass Led to Box Account Takeover

Issued by: Security Week

Because of the vulnerability – which was addressed in November 2021 – an attacker only needed stolen credentials to access an organization’s Box account and steal sensitive data, provided that the account has SMS-based MFA enabled (which has long been proven insecure). Box, which claims that close to 100,000 companies use its platform, allows users…

Malware & Threats

Russia Lays the Smackdown on REvil Ransomware Gang

Issued by: Security Week

Members of the hacker group, also known as Sodinokibi, have been charged with crimes in Russia, and its infrastructure has “been liquidated,” the public relations arm of Moscow’s FSB security agency told Russia’s Interfax news agency. The special operation, conducted by Russian authorities, was reportedly at the request of the United States. “The FSB of…

Malware & Threats

Ransomware cyberattack forces New Mexico jail to lock down

Issued by: Blog Malwarebytes

Five days after the new year, the Metropolitan Detention Center (MDC) in Bernalillo County, New Mexico suddenly went on lockdown. The reason? A ransomware cyberattack has knocked the jail’s internet connection offline, rendering most of their data systems, security cameras, and automatic doors unusable. Prisoners were confined in their cells while MDC technicians struggled to…