New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

ByPR 24
New Pingback Malware Using ICMP Tunneling to Evade C&C Detection | IT Security News

Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems.
Called ‘Pingback,’ the Windows malware leverages Internet Control Message Protocol (ICMP) tunneling for covert bot communications, allowing the adversary to utilize ICMP packets to piggyback

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

Lazarus APT has found a clever way to conceal its malicious code

Lazarus APT has found a clever way to conceal its malicious code

ByPR 24

Lazarus APT, a North Korean threat actor known for its sophisticated attacks, has been observed using a clever method to bypass security mechanisms by hiding its malicious code within a bitmap (.BMP) image file used to drop a remote access trojan (RAT) capable of stealing sensitive information. According to researchers at Malwarebytes Labs,…

Guilty Plea in SIM Swapping Scam to Steal Cryptocurrency

Guilty Plea in SIM Swapping Scam to Steal Cryptocurrency

ByPR 24

Cryptocurrency Fraud , Cybercrime , Fraud Management & Cybercrime Prosecutors: Yearslong Scheme Resulted in Theft of $530,000 Prajeet Nair (@prajeetspeaks) • April 29, 2021     A Massachusetts man has pleaded guilty to running a yearslong scam that used SIM swapping and other hacking techniques to steal more than $530,000 worth of cryptocurrency, the U.S….

Guess Confirms Ransomware Attack and Data Breach

Guess Confirms Ransomware Attack and Data Breach

ByPR 24

Breach Notification , Fraud Management & Cybercrime , Incident & Breach Response DarkSide Ransomware Operation Had Claimed Clothing Retailer Was Victim of Its Attack Mathew J. Schwartz (euroinfosec) • July 13, 2021     Guess store in Miami (Photo: Phillip Pessar via Flickr/CC) Clothing retailer Guess suffered a ransomware attack and data breach earlier this…

Federal agencies given five days to find hacked Exchange servers

Federal agencies given five days to find hacked Exchange servers

ByPR 24

CISA, the US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, has told federal agencies that they have until 12:00pm EDT on Monday April 5 to scan their networks for evidence of intrusion by malicious actors, and report back the results. CISA is ordering agencies with on-premises Microsoft Exchange servers to urgently conduct the…

Attackers Were Inside SolarWinds in January 2019

Attackers Were Inside SolarWinds in January 2019

ByPR 24

Forensics , Next-Generation Technologies & Secure Development , Security Operations CEO Sudhakar Ramakrishna Says Clues Come From Analysis of Virtual Builds Jeremy Kirk (jeremy_kirk) • May 20, 2021     At the RSA Conference, SolarWinds CEO Sudhakar Ramakrishna said intruders were in the company’s systems in January 2019, eight months earlier than originally believed. (Photo:…