Malware

WatchBog cryptomining botnet now uses Pastebin for C2WatchBog cryptomining botnet now uses Pastebin for C2

WatchBog cryptomining botnet now uses Pastebin for C2

A new cryptocurrency-mining botnet tracked as WatchBog is heavily using the Pastebin service for command and control (C&C) operations. Cisco…

6 years ago
LokiBot info stealer involved in a targeted attack on a US CompanyLokiBot info stealer involved in a targeted attack on a US Company

LokiBot info stealer involved in a targeted attack on a US Company

Security researchers at Fortinet uncovered a malspam campaign aimed distributing the LokiBot malware at a US manufacturing company. FortiGuard SE…

6 years ago
The Wolcott school district suffered a second ransomware attack in 4 monthsThe Wolcott school district suffered a second ransomware attack in 4 months

The Wolcott school district suffered a second ransomware attack in 4 months

Another ransomware attack hits a school district, the victim is an institute in Connecticut that was targeted twice in only…

6 years ago
Dissecting the 10k Lines of the new TrickBot DropperDissecting the 10k Lines of the new TrickBot Dropper

Dissecting the 10k Lines of the new TrickBot Dropper

Malware researchers at Yoroi-Cybaze analyzed the TrickBot dropper, a threat that has infected victims since 2016. Introduction TrickBot it is one of…

6 years ago
Stealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate dataStealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate data

Stealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate data

ESET researchers discovered a new malware associated with the Stealth Falcon APT group that abuses the Windows BITS service to…

6 years ago
Symantec uncovered the link between China-Linked Thrip and Billbug groupsSymantec uncovered the link between China-Linked Thrip and Billbug groups

Symantec uncovered the link between China-Linked Thrip and Billbug groups

The China-linked APT group Thrip is continuing to target entities in Southeast Asia even after its activity was uncovered by…

6 years ago
China-linked APT3 was able to modify stolen NSA cyberweaponsChina-linked APT3 was able to modify stolen NSA cyberweapons

China-linked APT3 was able to modify stolen NSA cyberweapons

China-linked APT3 stole cyberweapons from the NSA and reverse engineered them to create its arsenal. In 2010, security firm FireEye…

6 years ago
Belarusian authorities seized XakFor, one of the largest Russian-speaking hacker sitesBelarusian authorities seized XakFor, one of the largest Russian-speaking hacker sites

Belarusian authorities seized XakFor, one of the largest Russian-speaking hacker sites

Ministry of Internal Affairs announced that Belarusian police have seized and shutdown XakFor, one of the largest hacking forums on…

6 years ago
Security Affairs newsletter Round 230Security Affairs newsletter Round 230

Security Affairs newsletter Round 230

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs Hi folk, let…

6 years ago
Experts found Joker Spyware in 24 apps in the Google Play storeExperts found Joker Spyware in 24 apps in the Google Play store

Experts found Joker Spyware in 24 apps in the Google Play store

Security experts at Google have removed from Google Play 24 apps because they were infected with a new spyware tracked…

6 years ago