Image Previewer: First Firefox Addon that Injects an In-Browser Miner?
A Firefox extension called Image Previewer was discovered today that not only displays popups, but also injects a Monero in-browser miner into Firefox. While we have seen numerous Chrome extensions injecting in-browser miners, this is the first time I have seen a Firefox addon with this behavior. [...]
https://www.bleepingcomputer.com/news/security/image-previewer-first-firefox-addon-that-injects-an-in-browser-miner/
A Firefox extension called Image Previewer was discovered today that not only displays popups, but also injects a Monero in-browser miner into Firefox. While we have seen numerous Chrome extensions injecting in-browser miners, this is the first time I have seen a Firefox addon with this behavior. [...]
https://www.bleepingcomputer.com/news/security/image-previewer-first-firefox-addon-that-injects-an-in-browser-miner/
BleepingComputer
Image Previewer: First Firefox Addon that Injects an In-Browser Miner?
A Firefox extension called Image Previewer was discovered today that not only displays popups, but also injects a Monero in-browser miner into Firefox. While we have seen numerous Chrome extensions injecting in-browser miners, this is the first time I have…
Google Chrome to Feature Built-In Image Lazy Loading
Future versions of Google Chrome will feature built-in support for lazy loading, a mechanism to defer the loading of images and iframes if they are not visible on the user's screen at load time. [...]
https://www.bleepingcomputer.com/news/google/google-chrome-to-feature-built-in-image-lazy-loading/
Future versions of Google Chrome will feature built-in support for lazy loading, a mechanism to defer the loading of images and iframes if they are not visible on the user's screen at load time. [...]
https://www.bleepingcomputer.com/news/google/google-chrome-to-feature-built-in-image-lazy-loading/
BleepingComputer
Google Chrome to Feature Built-In Image Lazy Loading
Future versions of Google Chrome will feature built-in support for lazy loading, a mechanism to defer the loading of images and iframes if they are not visible on the user's screen at load time.
MindLost Ransomware Is a Piece of Junk That Wants to Collect Credit Card Details
Security researchers have discovered a new strain of ransomware that encrypts users files and redirects users to an online page to pay the ransom via credit/debit card. [...]
https://www.bleepingcomputer.com/news/security/mindlost-ransomware-is-a-piece-of-junk-that-wants-to-collect-credit-card-details/
Security researchers have discovered a new strain of ransomware that encrypts users files and redirects users to an online page to pay the ransom via credit/debit card. [...]
https://www.bleepingcomputer.com/news/security/mindlost-ransomware-is-a-piece-of-junk-that-wants-to-collect-credit-card-details/
BleepingComputer
MindLost Ransomware Is a Piece of Junk That Wants to Collect Credit Card Details
Security researchers have discovered a new strain of ransomware that encrypts users files and redirects users to an online page to pay the ransom via credit/debit card.
We May Soon See Malware Leveraging the Meltdown and Spectre Vulnerabilities
Security researchers are seeing an ever-increasing number of malware samples that are experimenting with the Meltdown and Spectre vulnerabilities. [...]
https://www.bleepingcomputer.com/news/security/we-may-soon-see-malware-leveraging-the-meltdown-and-spectre-vulnerabilities/
Security researchers are seeing an ever-increasing number of malware samples that are experimenting with the Meltdown and Spectre vulnerabilities. [...]
https://www.bleepingcomputer.com/news/security/we-may-soon-see-malware-leveraging-the-meltdown-and-spectre-vulnerabilities/
BleepingComputer
We May Soon See Malware Leveraging the Meltdown and Spectre Vulnerabilities
Security researchers are seeing an ever-increasing number of suspicious file samples that are experimenting with the Meltdown and Spectre vulnerabilities.
Smominru Botnet Infected Over 500,000 Windows Machines
Over 526,000 Windows computers —mainly Windows servers— have been infected with Monero mining software by a group that operates the biggest such botnet known to date. [...]
https://www.bleepingcomputer.com/news/security/smominru-botnet-infected-over-500-000-windows-machines/
Over 526,000 Windows computers —mainly Windows servers— have been infected with Monero mining software by a group that operates the biggest such botnet known to date. [...]
https://www.bleepingcomputer.com/news/security/smominru-botnet-infected-over-500-000-windows-machines/
BleepingComputer
Smominru Botnet Infected Over 500,000 Windows Machines
Over 526,000 Windows computers —mainly Windows servers— have been infected with Monero mining software by a group that operates the biggest such botnet known to date.
New Adobe Flash Zero-Day Spotted in the Wild
South Korean authorities have issued a warning regarding a brand new Flash zero-day deployed in the wild. [...]
https://www.bleepingcomputer.com/news/security/new-adobe-flash-zero-day-spotted-in-the-wild/
South Korean authorities have issued a warning regarding a brand new Flash zero-day deployed in the wild. [...]
https://www.bleepingcomputer.com/news/security/new-adobe-flash-zero-day-spotted-in-the-wild/
BleepingComputer
New Adobe Flash Zero-Day Spotted in the Wild
South Korean authorities have issued a warning regarding a brand new Flash zero-day deployed in the wild.
Ransomware Hero to Receive FBI Award
The US Federal Bureau of Investigation (FBI) announced on Tuesday that it would be awarding the FBI Director's Community Leadership Award to Michael Gillespie for his efforts in combating ransomware and helping users who fell victims to this threat. [...]
https://www.bleepingcomputer.com/news/security/ransomware-hero-to-receive-fbi-award/
The US Federal Bureau of Investigation (FBI) announced on Tuesday that it would be awarding the FBI Director's Community Leadership Award to Michael Gillespie for his efforts in combating ransomware and helping users who fell victims to this threat. [...]
https://www.bleepingcomputer.com/news/security/ransomware-hero-to-receive-fbi-award/
BleepingComputer
Ransomware Hero to Receive FBI Award
The US Federal Bureau of Investigation (FBI) announced on Tuesday that it would be awarding the FBI Director's Community Leadership Award to Michael Gillespie for his efforts in combating ransomware and helping users who fell victims to this threat.
Windows 10 Overtakes Windows 7 to Become Most Popular Windows Version
Windows 10 has surpassed Windows 7 for the first time, according to analytics firm StatCounter. In a presser released today, the company says that according to data gathered in January 2018, Windows 10 reached 42.78% in terms of worldwide internet usage, compared to 41.86% for Windows 7, and 8.72% for Windows 8.1,. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-overtakes-windows-7-to-become-most-popular-windows-version/
Windows 10 has surpassed Windows 7 for the first time, according to analytics firm StatCounter. In a presser released today, the company says that according to data gathered in January 2018, Windows 10 reached 42.78% in terms of worldwide internet usage, compared to 41.86% for Windows 7, and 8.72% for Windows 8.1,. [...]
https://www.bleepingcomputer.com/news/microsoft/windows-10-overtakes-windows-7-to-become-most-popular-windows-version/
BleepingComputer
Windows 10 Overtakes Windows 7 to Become Most Popular Windows Version
Windows 10 has surpassed Windows 7 for the first time, according to analytics firm StatCounter. In a presser released today, the company says that according to data gathered in January 2018, Windows 10 reached 42.78% in terms of worldwide internet usage,…
PSA: Beware of Sites Pretending to be Manual Firefox Updates
A family of malicious Firefox addons have been discovered being pushed by sites pretending to be a manual update for Firefox. These sites utilize a combination of javascript alerts, user authentication prompts, and full screen views to try and coerce the user into installing the unwanted addons. [...]
https://www.bleepingcomputer.com/news/security/psa-beware-of-sites-pretending-to-be-manual-firefox-updates/
A family of malicious Firefox addons have been discovered being pushed by sites pretending to be a manual update for Firefox. These sites utilize a combination of javascript alerts, user authentication prompts, and full screen views to try and coerce the user into installing the unwanted addons. [...]
https://www.bleepingcomputer.com/news/security/psa-beware-of-sites-pretending-to-be-manual-firefox-updates/
BleepingComputer
PSA: Beware of Sites Pretending to be Manual Firefox Updates
A family of malicious Firefox addons have been discovered being pushed by sites pretending to be a manual update for Firefox. These sites utilize a combination of javascript alerts, user authentication prompts, and full screen views to try and coerce the…
First Malicious Chrome Extensions Detected Using Session Replay Scripts
Just three months after Princeton researchers were warning users of the dangers of "session replay" attacks, developers of malicious Chrome extensions have incorporated this "trick" into their latest "releases." [...]
https://www.bleepingcomputer.com/news/security/first-malicious-chrome-extensions-detected-using-session-replay-scripts/
Just three months after Princeton researchers were warning users of the dangers of "session replay" attacks, developers of malicious Chrome extensions have incorporated this "trick" into their latest "releases." [...]
https://www.bleepingcomputer.com/news/security/first-malicious-chrome-extensions-detected-using-session-replay-scripts/
BleepingComputer
First Malicious Chrome Extensions Detected Using Session Replay Scripts
Just three months after Princeton researchers were warning users of the dangers of "session replay" attacks, developers of malicious Chrome extensions have incorporated this "trick" into their latest "releases."
Mining Botnet Targeting Redis and OrientDB Servers Made Almost $1 Million
A Monero-mining botnet targeting Redis and OrientDB servers has infected nearly 4,400 servers and has mined over $925,000 worth of Monero since March 2017. [...]
https://www.bleepingcomputer.com/news/security/mining-botnet-targeting-redis-and-orientdb-servers-made-almost-1-million/
A Monero-mining botnet targeting Redis and OrientDB servers has infected nearly 4,400 servers and has mined over $925,000 worth of Monero since March 2017. [...]
https://www.bleepingcomputer.com/news/security/mining-botnet-targeting-redis-and-orientdb-servers-made-almost-1-million/
BleepingComputer
Mining Botnet Targeting Redis and OrientDB Servers Made Almost $1 Million
A Monero-mining botnet targeting Redis and OrientDB servers has infected nearly 4,400 servers and has mined over $925,000 worth of Monero since March 2017.
Microsoft Office 2019 Will Work on Windows 10 Exclusively
Microsoft announced yesterday that future versions of the standalone Office 2019 app will work on Windows 10 versions exclusively. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-office-2019-will-work-on-windows-10-exclusively/
Microsoft announced yesterday that future versions of the standalone Office 2019 app will work on Windows 10 versions exclusively. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-office-2019-will-work-on-windows-10-exclusively/
BleepingComputer
Microsoft Office 2019 Will Work on Windows 10 Exclusively
Microsoft announced yesterday that future versions of the standalone Office 2019 app will work on Windows 10 versions exclusively.
Teen Arrested for Creating Malware That Steals Cryptocurrency Wallet Passwords
Japanese police have arrested a 17-year-old boy on suspicion of creating malware that steals private keys (passwords) that are used to access cryptocurrency wallets. He's also under investigation for using these passwords to steal funds from victims, albeit no charges have been filed. [...]
https://www.bleepingcomputer.com/news/cryptocurrency/teen-arrested-for-creating-malware-that-steals-cryptocurrency-wallet-passwords/
Japanese police have arrested a 17-year-old boy on suspicion of creating malware that steals private keys (passwords) that are used to access cryptocurrency wallets. He's also under investigation for using these passwords to steal funds from victims, albeit no charges have been filed. [...]
https://www.bleepingcomputer.com/news/cryptocurrency/teen-arrested-for-creating-malware-that-steals-cryptocurrency-wallet-passwords/
BleepingComputer
Teen Arrested for Creating Malware That Steals Cryptocurrency Wallet Passwords
Japanese police have arrested a 17-year-old boy on suspicion of creating malware that steals private keys (passwords) that are used to access cryptocurrency wallets. He's also under investigation for using these passwords to steal funds from victims, albeit…
Scarabey Ransomware - A Scarab Version Targeting Enterprises
A new version of the Scarab ransomware has been spotted in the wild, but instead of being distributed via email spam campaigns, crooks are brute-forcing computers with weakly-secured RDP connections and are installing the ransomware manually on each system. [...]
https://www.bleepingcomputer.com/news/security/scarabey-ransomware-a-scarab-version-targeting-enterprises/
A new version of the Scarab ransomware has been spotted in the wild, but instead of being distributed via email spam campaigns, crooks are brute-forcing computers with weakly-secured RDP connections and are installing the ransomware manually on each system. [...]
https://www.bleepingcomputer.com/news/security/scarabey-ransomware-a-scarab-version-targeting-enterprises/
BleepingComputer
Scarabey Ransomware - A Scarab Version Targeting Enterprises
A new version of the Scarab ransomware has been spotted in the wild, but instead of being distributed via email spam campaigns, crooks are brute-forcing computers with weakly-secured RDP connections and are installing the ransomware manually on each system.
System Cryptomix Ransomware Variant Released
Michael Gillespie discovered a new Cryptomix variant uploaded to ID-Ransomware this week. Today, I was able to find a sample so we can see what has changed. For the most part, it is the same as previous variants except it now appends the .SERVER extension to encrypted files and changes the contact emails used by the ransomware. [...]
https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/
Michael Gillespie discovered a new Cryptomix variant uploaded to ID-Ransomware this week. Today, I was able to find a sample so we can see what has changed. For the most part, it is the same as previous variants except it now appends the .SERVER extension to encrypted files and changes the contact emails used by the ransomware. [...]
https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/
BleepingComputer
System Cryptomix Ransomware Variant Released
Michael Gillespie discovered a new Cryptomix variant uploaded to ID-Ransomware this week. Today, I was able to find a sample so we can see what has changed. For the most part, it is the same as previous variants except it now appends the .SERVER extension…
The Week in Ransomware - February 2nd 2018 - TOR Sites Stealing Ransom Payments & GandCrab
This has been an interesting week in ransomware news. We had the GandCrab ransomware being released and distributed by exploit kits, TOR gateways stealing ransom payments from ransomware devs, and a bunch of towns getting hit with ransomware. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-2nd-2018-tor-sites-stealing-ransom-payments-and-gandcrab/
This has been an interesting week in ransomware news. We had the GandCrab ransomware being released and distributed by exploit kits, TOR gateways stealing ransom payments from ransomware devs, and a bunch of towns getting hit with ransomware. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-february-2nd-2018-tor-sites-stealing-ransom-payments-and-gandcrab/
BleepingComputer
The Week in Ransomware - February 2nd 2018 - TOR Sites Stealing Ransom Payments & GandCrab
This has been an interesting week in ransomware news. We had the GandCrab ransomware being released and distributed by exploit kits, TOR gateways stealing ransom payments from ransomware devs, and a bunch of towns getting hit with ransomware.
New JenX IoT DDoS Botnet Offered Part of Gaming Server Rental Scheme
The operators of a gaming server rental business are believed to have built an IoT DDoS botnet, which they are now offering as part of the server rental scheme. [...]
https://www.bleepingcomputer.com/news/security/new-jenx-iot-ddos-botnet-offered-part-of-gaming-server-rental-scheme/
The operators of a gaming server rental business are believed to have built an IoT DDoS botnet, which they are now offering as part of the server rental scheme. [...]
https://www.bleepingcomputer.com/news/security/new-jenx-iot-ddos-botnet-offered-part-of-gaming-server-rental-scheme/
BleepingComputer
New JenX IoT DDoS Botnet Offered Part of Gaming Server Rental Scheme
The operators of a gaming server rental business are believed to have built an IoT DDoS botnet, which they are now offering as part of the server rental scheme.
Firefox 59 Will Add a New Privacy Feature That Strips Sensitive Data From URLs
Firefox 59 will strip referrer information from URLs while the user is in Private Browsing mode. The measure is meant to safeguard users from accidental data leaks of sensitive information. [...]
https://www.bleepingcomputer.com/news/software/firefox-59-will-add-a-new-privacy-feature-that-strips-sensitive-data-from-urls/
Firefox 59 will strip referrer information from URLs while the user is in Private Browsing mode. The measure is meant to safeguard users from accidental data leaks of sensitive information. [...]
https://www.bleepingcomputer.com/news/software/firefox-59-will-add-a-new-privacy-feature-that-strips-sensitive-data-from-urls/
BleepingComputer
Firefox 59 Will Add a New Privacy Feature That Strips Sensitive Data From URLs
Firefox 59 will strip referrer information from URLs while the user is in Private Browsing mode. The measure is meant to safeguard users from accidental data leaks of sensitive information.
Scammers Steal Over $1 Million Worth of Ethereum From Bee Token ICO Participants
Hundreds of users fell victims to email scams over the past week, sending over $1 million worth of Ethereum to a scammer who sent fake emails posing as the Bee Token ICO (Initial Coin Offering). [...]
https://www.bleepingcomputer.com/news/cryptocurrency/scammers-steal-over-1-million-worth-of-ethereum-from-bee-token-ico-participants/
Hundreds of users fell victims to email scams over the past week, sending over $1 million worth of Ethereum to a scammer who sent fake emails posing as the Bee Token ICO (Initial Coin Offering). [...]
https://www.bleepingcomputer.com/news/cryptocurrency/scammers-steal-over-1-million-worth-of-ethereum-from-bee-token-ico-participants/
BleepingComputer
Scammers Steal Over $1 Million Worth of Ethereum From Bee Token ICO Participants
Hundreds of users fell victims to email scams over the past week, sending over $1 million worth of Ethereum to a scammer who sent fake emails posing as the Bee Token ICO (Initial Coin Offering).
LKRG: Linux to Get a Loadable Kernel Module for Runtime Integrity Checking
Members of the open source community are working on a new security-focused project for the Linux kernel. Named Linux Kernel Runtime Guard (LKRG), this is a loadable kernel module that will perform runtime integrity checking of the Linux kernel. [...]
https://www.bleepingcomputer.com/news/linux/lkrg-linux-to-get-a-loadable-kernel-module-for-runtime-integrity-checking/
Members of the open source community are working on a new security-focused project for the Linux kernel. Named Linux Kernel Runtime Guard (LKRG), this is a loadable kernel module that will perform runtime integrity checking of the Linux kernel. [...]
https://www.bleepingcomputer.com/news/linux/lkrg-linux-to-get-a-loadable-kernel-module-for-runtime-integrity-checking/
BleepingComputer
LKRG: Linux to Get a Loadable Kernel Module for Runtime Integrity Checking
Members of the open source community are working on a new security-focused project for the Linux kernel. Named Linux Kernel Runtime Guard (LKRG), this is a loadable kernel module that will perform runtime integrity checking of the Linux kernel.
Android Devices Targeted by New Monero-Mining Botnet
A new botnet appeared over the weekend, and it's targeting Android devices by scanning for open debug ports so it can infect victims with malware that mines the Monero cryptocurrency. [...]
https://www.bleepingcomputer.com/news/security/android-devices-targeted-by-new-monero-mining-botnet/
A new botnet appeared over the weekend, and it's targeting Android devices by scanning for open debug ports so it can infect victims with malware that mines the Monero cryptocurrency. [...]
https://www.bleepingcomputer.com/news/security/android-devices-targeted-by-new-monero-mining-botnet/
BleepingComputer
Android Devices Targeted by New Monero-Mining Botnet
A new botnet appeared over the weekend, and it's targeting Android devices by scanning for open debug ports so it can infect victims with malware that mines the Monero cryptocurrency.