The Week in Ransomware - June 8th 2018 - CryBrazil, CryptConsole, and Magniber
This week we have seen a lot of CryptConsole variants, Magniber activity, & smaller variants released. Ransomware continues to decline as developers move toward more profitable miners and information stealing Trojans. Ransomware is not going away, instead of mass malspam campaigns, ransomware is moving to more targeted attacks. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-8th-2018-crybrazil-cryptconsole-and-magniber/
This week we have seen a lot of CryptConsole variants, Magniber activity, & smaller variants released. Ransomware continues to decline as developers move toward more profitable miners and information stealing Trojans. Ransomware is not going away, instead of mass malspam campaigns, ransomware is moving to more targeted attacks. [...]
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-8th-2018-crybrazil-cryptconsole-and-magniber/
BleepingComputer
The Week in Ransomware - June 8th 2018 - CryBrazil, CryptConsole, and Magniber
This week we have seen a lot of CryptConsole variants, Magniber activity, & smaller variants released. Ransomware continues to decline as developers move toward more profitable miners and information stealing Trojans. Ransomware is not going away, instead…
F-Secure Fixes Serious Vulnerability in Antivirus Products
F-Secure has fixed a severe vulnerability in its home and enterprise antivirus products that could have allowed an attacker to execute malicious code on the user's machine and take over affected PCs [...]
https://www.bleepingcomputer.com/news/security/f-secure-fixes-serious-vulnerability-in-antivirus-products/
F-Secure has fixed a severe vulnerability in its home and enterprise antivirus products that could have allowed an attacker to execute malicious code on the user's machine and take over affected PCs [...]
https://www.bleepingcomputer.com/news/security/f-secure-fixes-serious-vulnerability-in-antivirus-products/
BleepingComputer
F-Secure Fixes Serious Vulnerability in Antivirus Products
F-Secure has fixed a severe vulnerability in its home and enterprise antivirus products that could have allowed an attacker to execute malicious code on the user's machine and take over affected PCs
Microsoft Store Brings Remote App Install to Windows 10 With "Install on my devices"
Microsoft has added a new feature to the web version of the Microsoft Store called called "Install on my devices" that allows you to install an app on Windows 10 devices where you have an account. Similar to Google Play, this allows you to install apps on devices from the web, even if your not accessing the store from Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-store-brings-remote-app-install-to-windows-10-with-install-on-my-devices/
Microsoft has added a new feature to the web version of the Microsoft Store called called "Install on my devices" that allows you to install an app on Windows 10 devices where you have an account. Similar to Google Play, this allows you to install apps on devices from the web, even if your not accessing the store from Windows 10. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-store-brings-remote-app-install-to-windows-10-with-install-on-my-devices/
BleepingComputer
Microsoft Store Brings Remote App Install to Windows 10 With "Install on my devices"
Microsoft has added a new feature to the web version of the Microsoft Store called called "Install on my devices" that allows you to install an app on Windows 10 devices where you have an account. Similar to Google Play, this allows you to install apps on…
South Korean Cryptocurrency Exchange Coinrail Gets Hacked
South Korea-based cryptocurrency exchange Coinrail announced on Sunday a cyber-incident during which an intruder made off with a large amount of ICO tokens stored on the company's servers. [...]
https://www.bleepingcomputer.com/news/security/south-korean-cryptocurrency-exchange-coinrail-gets-hacked/
South Korea-based cryptocurrency exchange Coinrail announced on Sunday a cyber-incident during which an intruder made off with a large amount of ICO tokens stored on the company's servers. [...]
https://www.bleepingcomputer.com/news/security/south-korean-cryptocurrency-exchange-coinrail-gets-hacked/
BleepingComputer
South Korean Cryptocurrency Exchange Coinrail Gets Hacked
South Korea-based cryptocurrency exchange Coinrail announced on Sunday a cyber-incident during which an intruder made off with a large amount of ICO tokens stored on the company's servers.
Tens of Thousands of Android Devices Are Exposing Their Debug Port
The security community raised the alarm regarding a serious issue last week —that of Android devices shipping with their debug port open to remote connections. [...]
https://www.bleepingcomputer.com/news/security/tens-of-thousands-of-android-devices-are-exposing-their-debug-port/
The security community raised the alarm regarding a serious issue last week —that of Android devices shipping with their debug port open to remote connections. [...]
https://www.bleepingcomputer.com/news/security/tens-of-thousands-of-android-devices-are-exposing-their-debug-port/
BleepingComputer
Tens of Thousands of Android Devices Are Exposing Their Debug Port
The security community raised the alarm regarding a serious issue last week —that of Android devices shipping with their debug port open to remote connections.
Hackers Stole Over $20 Million From Misconfigured Ethereum Clients
A group of hackers has stolen over $20 million worth of Ethereum from Ethereum-based apps and mining rigs, Chinese cyber-security firm Qihoo 360 Netlab reported today. [...]
https://www.bleepingcomputer.com/news/security/hackers-stole-over-20-million-from-misconfigured-ethereum-clients/
A group of hackers has stolen over $20 million worth of Ethereum from Ethereum-based apps and mining rigs, Chinese cyber-security firm Qihoo 360 Netlab reported today. [...]
https://www.bleepingcomputer.com/news/security/hackers-stole-over-20-million-from-misconfigured-ethereum-clients/
BleepingComputer
Hackers Stole Over $20 Million From Misconfigured Ethereum Clients
A group of hackers has stolen over $20 million worth of Ethereum from Ethereum-based apps and mining rigs, Chinese cyber-security firm Qihoo 360 Netlab reported today.
Weight Watchers IT Infrastructure Exposed via No-Password Kubernetes Server
Just like many companies before it, weight loss program Weight Watchers suffered a small security breach after security researchers found a crucial server exposed on the Internet that was holding the configuration info for some of the company's IT infrastructure. [...]
https://www.bleepingcomputer.com/news/security/weight-watchers-it-infrastructure-exposed-via-no-password-kubernetes-server/
Just like many companies before it, weight loss program Weight Watchers suffered a small security breach after security researchers found a crucial server exposed on the Internet that was holding the configuration info for some of the company's IT infrastructure. [...]
https://www.bleepingcomputer.com/news/security/weight-watchers-it-infrastructure-exposed-via-no-password-kubernetes-server/
BleepingComputer
Weight Watchers IT Infrastructure Exposed via No-Password Kubernetes Server
Just like many companies before it, weight loss program Weight Watchers suffered a small security breach after security researchers found a crucial server exposed on the Internet that was holding the configuration info for some of the company's IT infrastructure.
CryptoCurrency Miner Plays Hide-and-seek with Popular Games and Tools
When the CPU utilization on a computer is high, games become less responsive, frame rate goes down, and gameplay stutters. To diagnose these problems, users will commonly open process manager utilities such as Task Manager, Process Explorer, or Process Hacker to determine if any processes are using too much of the CPU power. [...]
https://www.bleepingcomputer.com/news/security/cryptocurrency-miner-plays-hide-and-seek-with-popular-games-and-tools/
When the CPU utilization on a computer is high, games become less responsive, frame rate goes down, and gameplay stutters. To diagnose these problems, users will commonly open process manager utilities such as Task Manager, Process Explorer, or Process Hacker to determine if any processes are using too much of the CPU power. [...]
https://www.bleepingcomputer.com/news/security/cryptocurrency-miner-plays-hide-and-seek-with-popular-games-and-tools/
BleepingComputer
CryptoCurrency Miner Plays Hide-and-seek with Popular Games and Tools
When the CPU utilization on a computer is high, games become less responsive, frame rate goes down, and gameplay stutters. To diagnose these problems, users will commonly open process manager utilities such as Task Manager, Process Explorer, or Process Hacker…
Microsoft Ending Support for Windows 7, 8, & Older Apps in the Microsoft Forums
Over the weekend, Microsoft announced that starting on July 1st 2018 they are no longer offering official support for Windows 7, Windows 8, Windows 8.1, and a wide variety of older applications in the Microsoft Community forums. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-ending-support-for-windows-7-8-and-older-apps-in-the-microsoft-forums/
Over the weekend, Microsoft announced that starting on July 1st 2018 they are no longer offering official support for Windows 7, Windows 8, Windows 8.1, and a wide variety of older applications in the Microsoft Community forums. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-ending-support-for-windows-7-8-and-older-apps-in-the-microsoft-forums/
BleepingComputer
Microsoft Ending Support for Windows 7, 8, & Older Apps in the Microsoft Forums
Over the weekend, Microsoft announced that starting on July 1st 2018 they are no longer offering official support for Windows 7, Windows 8, Windows 8.1, and a wide variety of older applications in the Microsoft Community forums.
Apple Bans Apps That Mine Cryptocurrencies
Apple has updated its review guidelines to specifically prohibit iOS and Mac apps uploaded on the company's official App Store from utilizing users' devices for cryptocurrency mining operations. [...]
https://www.bleepingcomputer.com/news/apple/apple-bans-apps-that-mine-cryptocurrencies/
Apple has updated its review guidelines to specifically prohibit iOS and Mac apps uploaded on the company's official App Store from utilizing users' devices for cryptocurrency mining operations. [...]
https://www.bleepingcomputer.com/news/apple/apple-bans-apps-that-mine-cryptocurrencies/
BleepingComputer
Apple Bans Apps That Mine Cryptocurrencies
Apple has updated its review guidelines to specifically prohibit iOS and Mac apps uploaded on the company's official App Store from utilizing users' devices for cryptocurrency mining operations.
USA Sanctions Russian Entities Over Alleged Ties to Russian FSB
The U.S. Department of the Treasury announced today that they have imposed sanctions on five Russian entities and 3 Russian individuals for allegedly being controlled by or aiding Russia's Federal Security Service (FSB) in the operation of cyber attacks. [...]
https://www.bleepingcomputer.com/news/security/usa-sanctions-russian-entities-over-alleged-ties-to-russian-fsb/
The U.S. Department of the Treasury announced today that they have imposed sanctions on five Russian entities and 3 Russian individuals for allegedly being controlled by or aiding Russia's Federal Security Service (FSB) in the operation of cyber attacks. [...]
https://www.bleepingcomputer.com/news/security/usa-sanctions-russian-entities-over-alleged-ties-to-russian-fsb/
BleepingComputer
USA Sanctions Russian Entities Over Alleged Ties to Russian FSB
The U.S. Department of the Treasury announced today that they have imposed sanctions on five Russian entities and 3 Russian individuals for allegedly being controlled by or aiding Russia's Federal Security Service (FSB) in the operation of cyber attacks.
US Arrests 74 BEC Scammers, Including 29 Nigerians
US law enforcement announced today the arrests of 74 individuals accused of orchestrating BEC (business email compromise) scams through which they stole millions from users across the world. [...]
https://www.bleepingcomputer.com/news/security/us-arrests-74-bec-scammers-including-29-nigerians/
US law enforcement announced today the arrests of 74 individuals accused of orchestrating BEC (business email compromise) scams through which they stole millions from users across the world. [...]
https://www.bleepingcomputer.com/news/security/us-arrests-74-bec-scammers-including-29-nigerians/
BleepingComputer
US Arrests 74 BEC Scammers, Including 29 Nigerians
US law enforcement announced today the arrests of 74 individuals accused of orchestrating BEC (business email compromise) scams through which they stole millions from users across the world.
Ethereum "Giveaway" Scammers Have Tricked People Out of $4.3 Million
Online crooks promoting fake "giveaways" have tricked people out of 8,148 Ether, currently worth around $4.3 million, according to statistical data compiled in EtherScamDB. [...]
https://www.bleepingcomputer.com/news/security/ethereum-giveaway-scammers-have-tricked-people-out-of-43-million/
Online crooks promoting fake "giveaways" have tricked people out of 8,148 Ether, currently worth around $4.3 million, according to statistical data compiled in EtherScamDB. [...]
https://www.bleepingcomputer.com/news/security/ethereum-giveaway-scammers-have-tricked-people-out-of-43-million/
BleepingComputer
Ethereum "Giveaway" Scammers Have Tricked People Out of $4.3 Million
Online crooks promoting fake "giveaways" have tricked people out of 8,148 Ether, currently worth around $4.3 million, according to statistical data compiled in EtherScamDB.
Around 5% of All Monero Currently in Circulation Has Been Mined Using Malware
At least 5% of all the Monero cryptocurrency currently in circulation has been mined using malware, and about 2% of the total daily hashrate comes from devices infected with cryptocurrency-mining malware. [...]
https://www.bleepingcomputer.com/news/security/around-5-percent-of-all-monero-currently-in-circulation-has-been-mined-using-malware/
At least 5% of all the Monero cryptocurrency currently in circulation has been mined using malware, and about 2% of the total daily hashrate comes from devices infected with cryptocurrency-mining malware. [...]
https://www.bleepingcomputer.com/news/security/around-5-percent-of-all-monero-currently-in-circulation-has-been-mined-using-malware/
BleepingComputer
Around 5% of All Monero Currently in Circulation Has Been Mined Using Malware
At least 5% of all the Monero cryptocurrency currently in circulation has been mined using malware, and about 2% of the total daily hashrate comes from devices infected with cryptocurrency-mining malware.
Trik Spam Botnet Leaks 43 Million Email Addresses
Over 43 million email addresses have leaked from the command and control server of a spam botnet, a security researcher has told Bleeping Computer today. [...]
https://www.bleepingcomputer.com/news/security/trik-spam-botnet-leaks-43-million-email-addresses/
Over 43 million email addresses have leaked from the command and control server of a spam botnet, a security researcher has told Bleeping Computer today. [...]
https://www.bleepingcomputer.com/news/security/trik-spam-botnet-leaks-43-million-email-addresses/
BleepingComputer
Trik Spam Botnet Leaks 43 Million Email Addresses
Over 43 million email addresses have leaked from the command and control server of a spam botnet, a security researcher has told Bleeping Computer today.
Mac Security Tool Bugs Allow Malware to Appear as Apple Software
A bug exists in third-party Mac security programs from Facebook, Google, VirusTotal, and more that allow malware to appear as legitimate programs code-signed by Apple. [...]
https://www.bleepingcomputer.com/news/security/mac-security-tool-bugs-allow-malware-to-appear-as-apple-software/
A bug exists in third-party Mac security programs from Facebook, Google, VirusTotal, and more that allow malware to appear as legitimate programs code-signed by Apple. [...]
https://www.bleepingcomputer.com/news/security/mac-security-tool-bugs-allow-malware-to-appear-as-apple-software/
BleepingComputer
Mac Security Tool Bugs Allow Malware to Appear as Apple Software
A bug exists in third-party Mac security programs from Facebook, Google, VirusTotal, and more that allow malware to appear as legitimate programs code-signed by Apple.
Microsoft June 2018 Patch Tuesday Fixes 50 Security Issues
Microsoft has released the June 2018 Patch Tuesday security updates, and this month's release comes with fixes for 50 vulnerabilities. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2018-patch-tuesday-fixes-50-security-issues/
Microsoft has released the June 2018 Patch Tuesday security updates, and this month's release comes with fixes for 50 vulnerabilities. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2018-patch-tuesday-fixes-50-security-issues/
BleepingComputer
Microsoft June 2018 Patch Tuesday Fixes 50 Security Issues
Microsoft has released the June 2018 Patch Tuesday security updates, and this month's release comes with fixes for 50 vulnerabilities.
Google Removes the Option of Installing Chrome Extensions via Remote Sites
Google announced plans today to gradually remove the option of installing Chrome extensions from a remote website, also known as an "inline installation." [...]
https://www.bleepingcomputer.com/news/google/google-removes-the-option-of-installing-chrome-extensions-via-remote-sites/
Google announced plans today to gradually remove the option of installing Chrome extensions from a remote website, also known as an "inline installation." [...]
https://www.bleepingcomputer.com/news/google/google-removes-the-option-of-installing-chrome-extensions-via-remote-sites/
BleepingComputer
Google Removes the Option of Installing Chrome Extensions via Remote Sites
Google announced plans today to gradually remove the option of installing Chrome extensions from a remote website, also known as an "inline installation."
Today, the EU Will Vote If to Ban Kaspersky Products From Official EU Networks
In a plenary session of the European Parliament that will be held today in Strasbourg, France, members of the European Parliament (MEPs) will vote on a motion for resolution which includes a clause to ban the use of software programs "that have been confirmed as malicious, such as Kaspersky Lab." [...]
https://www.bleepingcomputer.com/news/government/today-the-eu-will-vote-if-to-ban-kaspersky-products-from-official-eu-networks/
In a plenary session of the European Parliament that will be held today in Strasbourg, France, members of the European Parliament (MEPs) will vote on a motion for resolution which includes a clause to ban the use of software programs "that have been confirmed as malicious, such as Kaspersky Lab." [...]
https://www.bleepingcomputer.com/news/government/today-the-eu-will-vote-if-to-ban-kaspersky-products-from-official-eu-networks/
BleepingComputer
Today, the EU Will Vote on a Motion That Recommends Banning Kaspersky Products From Official EU Networks
In a plenary session of the European Parliament that will be held today in Strasbourg, France, members of the European Parliament (MEPs) will vote on a motion for resolution which includes a clause to ban the use of software programs "that have been confirmed…
Here's the Status of Meltdown and Spectre Mitigations in Windows
Yesterday's Patch Tuesday release included fixes for the latest Spectre vulnerability, known as Spectre variant 4, or SpectreNG. [...]
https://www.bleepingcomputer.com/news/security/heres-the-status-of-meltdown-and-spectre-mitigations-in-windows/
Yesterday's Patch Tuesday release included fixes for the latest Spectre vulnerability, known as Spectre variant 4, or SpectreNG. [...]
https://www.bleepingcomputer.com/news/security/heres-the-status-of-meltdown-and-spectre-mitigations-in-windows/
BleepingComputer
Here's the Status of Meltdown and Spectre Mitigations in Windows
Yesterday's Patch Tuesday release included fixes for the latest Spectre vulnerability, known as Spectre variant 4, or SpectreNG.
Cortana Hack Lets You Change Passwords on Locked PCs
Microsoft has patched a vulnerability in the Cortana smart assistant that could have allowed an attacker with access to a locked computer to use the smart assistant and access data on the device, execute malicious code, or even change the PC's password to access the device in its entirety. [...]
https://www.bleepingcomputer.com/news/security/cortana-hack-lets-you-change-passwords-on-locked-pcs/
Microsoft has patched a vulnerability in the Cortana smart assistant that could have allowed an attacker with access to a locked computer to use the smart assistant and access data on the device, execute malicious code, or even change the PC's password to access the device in its entirety. [...]
https://www.bleepingcomputer.com/news/security/cortana-hack-lets-you-change-passwords-on-locked-pcs/
BleepingComputer
Cortana Hack Lets You Change Passwords on Locked PCs
Microsoft has patched a vulnerability in the Cortana smart assistant that could have allowed an attacker with access to a locked computer to use the smart assistant and access data on the device, execute malicious code, or even change the PC's password to…