Exchange Servers Under Active Attack via ProxyShell Bugs
Exchange Servers Under Active Attack via ProxyShell Bugs
9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware | IT Security News 9. March 2021 Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial…
Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Self-Professed ‘King of Fraud’ Aleksandr Zhukov Ran Ads on Fake Sites Mathew J. Schwartz (euroinfosec) • May 31, 2021 Sources: Department of Justice, court documents A Russian man has been convicted of bilking advertisers out of more than $7 million in payments for…
3rd Party Risk Management , Breach Notification , Critical Infrastructure Security Microsoft, FireEye Find Additional Payloads Used During Supply Chain Attack Scott Ferguson (Ferguson_Writes) • March 4, 2021 Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds in December 2020, according to a pair of…
Are you doing enough to prevent scammers from hijacking your social media accounts? Even if you have chosen a strong, unique password for your online presence and enabled two-factor authentication it’s possible that you’ve overlooked another way in which online criminals could commandeer your social media accounts and spam out a message to your followers….
Cybercrime , Data Loss Prevention (DLP) , Endpoint Security 1.5 Million Facebook Passwords Among Leaked Data; Raccoon Infostealer Suspected Jeremy Kirk (jeremy_kirk) • June 10, 2021 A control panel for the Raccoon infostealer botnet, where subscribers can browse data stolen from compromised computers (Source: Hold Security) There’s such a surfeit of stolen data…
The Windows Subsystem for Linux (WSL) is a companion feature released by Microsoft in 2016 to run a Linux image in a near-native environment on Windows, allowing administrators to use Linux command-line tools without using a virtual machine. This was a novel implementation, although immediately doubts about security in this development began to arise. While…