Pierluigi Paganini
September 19, 2014
ICS-CERT issued a security advisory for the existence of vulnerabilities in a variety of Schneider Electric StruxureWare SCADA Expert ClearSCADA versions. According to a recent advisory issued by the ICS-CERT (ICSA-14-259-01) several Electricâs StruxureWare SCADA Expert ClearSCADA are affected by different vulnerabilities. The independent researcher Aditya Sood has discovered a weak hashing algorithm and CSRF vulnerability in […]
Pierluigi Paganini
September 18, 2014
A report issued by the Senate Armed Services Committee reveals alleged Chinese hackers conducted dozens of cyber attacks on US defense contractors. A study conducted by the Senate Armed Services Committee discovered that hackers gained access to the systems run by US defense contractors work for the US Transportation Command (TRANSCOM). The Senate study released […]
Pierluigi Paganini
September 17, 2014
WikiLeaks has published copies of the criticized FinFisher surveillance software, claiming that the malware is sold to the most “abusive” regimes in the world. Copies of the surveillance software âFinFisherâ were made available for public scrutiny by WikiLeaks early this week. The international, online journalistic organization has decided to publish the public disclose the criticized software online to allow […]
Pierluigi Paganini
September 16, 2014
Experts at IBM Trusteer security firms have discovered a massively distributed Citadel trojan targets Middle Eastern Petrochemical companies. Researchers at IBM Trusteer have recently discovered targeted cyber attacks using a variant of the popular Citadel trojan on several Middle Eastern petrochemical companies. The Citadel Trojan is a malware designed to steal personal information, including banking and […]
Pierluigi Paganini
September 16, 2014
Trustwave has detected a new series of attacks on servers worldwide based on the exploitation of old CGI-PHP vulnerability to spread BoSSaBoTv2 botnet. It was 2012 when security experts discovered a security flaw (CVE-2012-1823) in some PHP builds that could be exploited by a threat actor to remotely execute commands on the affected server, if PHP was […]
Pierluigi Paganini
September 15, 2014
Security experts at Dr.Web spotted a new strain of Android ransomware which sets unlock password on compromised devices and is also able to send SMS. Ransomware is one of most prolific cyber threats to criminal ecosystem and according to security firms cyber gangs are increasing use the malicious code improving its capabilities with new features. Recently, […]
Pierluigi Paganini
September 13, 2014
A Brazilian newspaper’s website has been hacked to serve a malware that tries to change the victimâs router DNS settings brute forcing the admin panel. A Brazilian political newspaperâs website has been compromised with malware that tries to change the victimâs router DNS settings. The security firm Securi has published a blog post on a […]
Pierluigi Paganini
September 12, 2014
Security experts at TrendMicro have uncovered a new malicious campaign based on a Chrome extension deployed on the official Chrome Store. A few months ago I wrote an article on the presence of a malicious Chrome browser extension, dubbed Cryptsy Dogecoin (DOGE) Live Ticker, available on the official store that was able to steal digital coins. […]
Pierluigi Paganini
September 11, 2014
Security experts warn Dyre malware is being used by cyber criminals for corporate espionage instead harvest banking credentials. Dyre is the name of a new variant of the immortal Zeus banking trojan worries cyber security experts, this new strain doesn’t limit its stealing activity to user’s banking credentials, but search for customer information. Dyre has been detected […]
Pierluigi Paganini
September 09, 2014
Experts at Clearsky detected the Gholee virus which was likely developed by highly qualified factors, which may even be related to Israelâs long-time nemesis Iran. Experts from Clearsky, an Israeli cyber-security company, detected an âoperation protective edgeâ themed spear phishing attack, carried out via emails containing a malicious excel file. Once opened and its VBA […]
