Malware & Threats

Malware & Threats

Issued by: Security Week

The warning comes almost exactly one month after the first disclosure of a Log4j remote code execution vulnerability that threatens major damage on the internet and heightens the urgency for enterprise defenders to find and fix the issue. According to an advisory from NHS Digital, attackers are exploiting the critical vulnerability in the Apache Tomcat…

Malware & Threats

Issued by: Blog Malwarebytes

Patchwork is an Indian threat actor that has been active since December 2015 and usually targets Pakistan via spear phishing attacks. In its most recent campaign from late November to early December 2021, Patchwork has used malicious RTF files to drop a variant of the BADNEWS (Ragnatela) Remote Administration Trojan (RAT). What is interesting among…

Application Security, Malware & Threats

Issued by: Security Week

The State Auditor’s Office reassured 60,000 state employees on Monday that their pay would be deposited on Friday, WSAZ-TV reported. State officials learned two weeks ago that the attack took West Virginia’s payroll time and leave accounting system off line. Since then, the auditor’s staff has worked with payroll administrators in affected state agencies to…

Malware & Threats

Issued by: Kaspersky Blog

No one — gamer, cryptocurrency investor, or online shopper — is safe from scammers. But no matter who the victim is or how sophisticated the scheme may be, there is always a way to sniff out fraud before it’s too late. Today we’re looking at five common signs of online scams to help you avoid…

Malware & Threats

Issued by: Security Week

The attacks targeted 35,000 devices in 195 countries between January and November 2021, including devices housed by high-profile organizations. Roughly seven percent of the targets were ICS, with the engineering and building automation sectors being most impacted. Attacks were also aimed at military industrial enterprises and research laboratories. In many cases, the attackers targeted engineering…

Malware & Threats

Issued by: Security Week

The so-called cyberbunker in southwestern Germany had allegedly been used to operate darknet networks such as “Wall Street Market” and “Fraudsters”, which have since been shut down. A court in Trier sentenced the main defendant, a Dutchman, to five years and nine months in jail. Six other defendants were sentenced to prison terms ranging from…