The Hunt, Detect and Incident Response Approach to Mounting Malware Threats
It should be able to detect thousands of nodes per hour to expose hidden cyber threats and vulnerabilities. Keep Reading
Security Alert: FIN8 Is Back in Business, Targeting the Hospitality Industry
This is the first attack observed during 2019 that can be attributed to FIN8 with high probability, although there are a few indicators that overlap with known FIN7 attacks. Keep Reading
Government Networks Are Under Cyber Attack: Here’s How Cities, Agencies Can Fight Back
At the end of the day, these incidents reflect poor oversight, weak monitoring, poor systems or weak architectures. Keep Reading
GozNym Malware Network Taken Down in International Operation
An international law enforcement operation has dismantled a complex, globally operating organized cybercrime network. The network used GozNym malware in an attempt to steal an estimated $100 million from more than 41,000 victims, primarily businesses and financial institutions. Keep Reading
DHS, FBI Spot ‘Electricfish’ Malware from North Korean Government
Users or administrators should flag activity associated with the malware and report the activity to the Cybersecurity and Infrastructure Security Agency. Keep Reading
Spam Trends: Top Attachments Driving Malicious Campaigns
In February and March were huge spam campaigns using ZIP files to send out GandCrab ransomware and DOC and XLSM files to distribute Trickbot banking trojan. Keep Reading
Espionage Outfit Used Equation Group Tools Prior to Shadow Brokers Leak
Beginning in March 2016, Buckeye began using a variant of DoublePulsar (Backdoor.Doublepulsar), a backdoor that was subsequently released by the Shadow Brokers in 2017. Keep Reading
Massive eGobbler Malvertising Campaign Leverages Chrome Vulnerability to Target iOS Users
This group has a tendency to ramp up their buying around holidays and weekends. Typically these campaigns peak in volume over a period of 36–48 hours before going into a state of hibernation until the next big push. Keep Reading
Microsoft Edge Browser Permission Backdoor Can Allow Remote Attacks to Steal Data
Demonstration opened a malicious MHL file with a file manager. Internet Explorer automatically uploaded several files to a remote server. Keep Reading
Hackers Dupe Radiologists and AI Software by Manipulating Lung Cancer Scans
Malicious attackers can tamper with the scans to deliberately cause a misdiagnosis for insurance fraud, ransomware, cyberterrorism, or even murder. Attackers can even automate the entire process in a malware which can infect the hospital’s network. Keep Reading
