BleepingComputer
10.4K subscribers
41 photos
24.5K links
Latest news and stories from BleepingComputer.com

From a bleeping computer to a working computer.
Download Telegram
15% of All IoT Device Owners Don't Change Default Passwords

Simple statistics can tell you a lot about the state of security in a market niche. For example, if we'd said that just five passwords would grant you access to 10% of all the IoT devices available online, you'd be right to feel concerned. [...]

https://www.bleepingcomputer.com/news/security/15-percent-of-all-iot-device-owners-dont-change-default-passwords/
Unprotected Database Exposes Details of 198 Million US Voters

An Amazon S3 bucket containing the personal details of over 198 million Americans was left exposed online with no protection, according to UpGuard, a cyber-security whose researchers came across the database last week. [...]

https://www.bleepingcomputer.com/news/government/unprotected-database-exposes-details-of-198-million-us-voters/
South Korean Web Hosting Provider Pays $1 Million in Ransomware Demand

Nayana, a web hosting provider based in South Korea, announced it is in the process of paying a three-tier ransom demand of nearly $1 million worth of Bitcoin, following a ransomware infection that encrypted data on customer' servers. [...]

https://www.bleepingcomputer.com/news/security/south-korean-web-hosting-provider-pays-1-million-in-ransomware-demand/
McAfee Releases Free Tool That Removes Pinkslipbot Leftovers That Use Your PC as Proxy

Last week, McAfee released a tool named AmIPinkC2, a Windows command-line application that removes remnant files of Pinkslipbot infections that allow the malware to continue to use previously infected computers as proxy relays, even if the original malware's binary has been cleaned and removed from infected hosts. [...]

https://www.bleepingcomputer.com/news/security/mcafee-releases-free-tool-that-removes-pinkslipbot-leftovers-that-use-your-pc-as-proxy/
TrickBot Activity Ramps up, Now Targeting CRMs and PayPal Users

Several security researchers have spotted an increase in malware campaigns distributing the TrickBot banking trojan, going after a host of targets ranging from regular e-banking applications to PayPal accounts and business CRMs. [...]

https://www.bleepingcomputer.com/news/security/trickbot-activity-ramps-up-now-targeting-crms-and-paypal-users/
Cryptocurrency Miner Delivered via NSA's DOUBLEPULSAR Backdoor

Windows computers are being targeted with a new cryptocurrency miner that uses an NSA hacking tool to infect users' PCs. Detected under the generic name of Trojan.BtcMine.1259, this trojan was first spotted last week by Russian antivirus vendor Dr.Web. [...]

https://www.bleepingcomputer.com/news/security/cryptocurrency-miner-delivered-via-nsas-doublepulsar-backdoor/
95% of Windows 10 PCs Have a Modern Antivirus Installed

Microsoft has responded to a complaint filed by Kaspersky Labs, which accused the OS maker of using its dominant market position to push its antivirus β€” Windows Defender β€” on Windows 10 users, on the detriment of third-party AVs. [...]

https://www.bleepingcomputer.com/news/microsoft/95-percent-of-windows-10-pcs-have-a-modern-antivirus-installed/
TeslaWare Plays Russian Roulette with your Files

I was told about a new ransomware called TeslaWare that is being promoted on a black hat criminal site. After a quick search, I was able to find a sample that was compiled yesterday and I began to dig into to it.  What did I find? That the marketing poster promoting TeslaWare was more advanced than the ransomware itself. [...]

https://www.bleepingcomputer.com/news/security/teslaware-plays-russian-roulette-with-your-files/
Locky Ransomware Returns, but Targets Only Windows XP & Vista

The Locky ransomware is back, spreading via a massive wave of spam emails distributed by the Necurs botnet, but the campaign appears to be a half-baked effort because the ransomware is not able to encrypt files on modern Windows OS versions, locking files only on older Windows XP & Vista machines. [...]

https://www.bleepingcomputer.com/news/security/locky-ransomware-returns-but-targets-only-windows-xp-and-vista/
Chrome and Firefox Headless Modes May Spur New Adware & Clickfraud Tactics

During the past month, both Google and Mozilla developers have added support in their respective browsers for "headless mode," a mechanism that allows browsers to run silently in the OS background and with no visible GUI. [...]

https://www.bleepingcomputer.com/news/security/chrome-and-firefox-headless-modes-may-spur-new-adware-and-clickfraud-tactics/
New GhostHook Attack Bypasses Windows PatchGuard Protections

Security experts have discovered a method of bypassing Windows PatchGuard protections and hooking malicious code into the Windows kernel, which allows an attacker to plant rootkits on systems previously thought to be impregnable. [...]

https://www.bleepingcomputer.com/news/security/new-ghosthook-attack-bypasses-windows-patchguard-protections/