New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

ByPR 24
New Pingback Malware Using ICMP Tunneling to Evade C&C Detection | IT Security News

Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems.
Called ‘Pingback,’ the Windows malware leverages Internet Control Message Protocol (ICMP) tunneling for covert bot communications, allowing the adversary to utilize ICMP packets to piggyback

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

Newly Discovered Dell Bugs Impact 30 Million PCs

Newly Discovered Dell Bugs Impact 30 Million PCs

ByPR 24

Security researchers have warned that at least 30 million Dell computers may be at risk after discovering multiple vulnerabilities that could allow attackers to execute arbitrary code within the machines’ BIOS. Security vendor Eclypsium said 129 Dell models were affected by the chain of four bugs, which have a cumulative CVSS score of 8.4 (high). “These…

Iran names suspect in Natanz attack, says he fled country

Iran names suspect in Natanz attack, says he fled country

ByPR 24

State television named the suspect as 43-year-old Reza Karimi. It showed a passport-style photograph of a man it identified as Karimi, saying he was born in the nearby city of Kashan, Iran. The report also aired what appeared to be an Interpol “red notice” seeking his arrest. The arrest notice was not immediately accessible on…

US Offering $10 Million Reward for Cyberthreat Information

US Offering $10 Million Reward for Cyberthreat Information

ByPR 24

Cybercrime , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime State Department, DHS Focus on Ransomware Threats to Critical Infrastructure Scott Ferguson (Ferguson_Writes) • July 15, 2021     Source: US State Department The U.S. Department of State is now offering rewards of up to $10 million for information about cyberthreats to the nation’s…

InfoSec Handlers Diary Blog

InfoSec Handlers Diary Blog

ByPR 24

Ransomware attacks continue to be in the headlines everywhere, and are also an almost weekly reoccurring subject in the SANS Newsbites. As useful as many of the reports are that security firms and researchers publish on the subject, they often focus heavily on one particular incident or type of ransomware, and the associated “indicators of…

CVE-2021-20454 – Alert Detail – Security Database

CVE-2021-20454 – Alert Detail – Security Database

ByPR 24

Executive Summary Informations Name CVE-2021-20454 First vendor Publication 2021-04-21 Vendor Cve Last vendor Modification 2021-04-21 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA   Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

Lazarus APT has found a clever way to conceal its malicious code

Lazarus APT has found a clever way to conceal its malicious code

ByPR 24

Lazarus APT, a North Korean threat actor known for its sophisticated attacks, has been observed using a clever method to bypass security mechanisms by hiding its malicious code within a bitmap (.BMP) image file used to drop a remote access trojan (RAT) capable of stealing sensitive information. According to researchers at Malwarebytes Labs,…