Ramnit Botnet Comeback Continues in 2017
Ramnit, a banking trojan whose botnet survived a takedown attempt in 2015, is continuing its comeback in 2017, after coming back to life at the end of 2015 and regaining its strength over the course of 2016. [...]
https://www.bleepingcomputer.com/news/security/ramnit-botnet-comeback-continues-in-2017/
Ramnit, a banking trojan whose botnet survived a takedown attempt in 2015, is continuing its comeback in 2017, after coming back to life at the end of 2015 and regaining its strength over the course of 2016. [...]
https://www.bleepingcomputer.com/news/security/ramnit-botnet-comeback-continues-in-2017/
BleepingComputer
Ramnit Botnet Comeback Continues in 2017
Ramnit, a banking trojan whose botnet survived a takedown attempt in 2015, is continuing its comeback in 2017, after coming back to life at the end of 2015 and regaining its strength over the course of 2016.
Malware Used to Attack Polish Banks Contained False Flags Blaming Russian Hackers
Malware samples used in the recent attacks against several Polish banks contained planted evidence that attempted to blame the attacks on Russian-speaking hackers. [...]
https://www.bleepingcomputer.com/news/security/malware-used-to-attack-polish-banks-contained-false-flags-blaming-russian-hackers/
Malware samples used in the recent attacks against several Polish banks contained planted evidence that attempted to blame the attacks on Russian-speaking hackers. [...]
https://www.bleepingcomputer.com/news/security/malware-used-to-attack-polish-banks-contained-false-flags-blaming-russian-hackers/
BleepingComputer
Malware Used to Attack Polish Banks Contained False Flags Blaming Russian Hackers
Malware samples used in the recent attacks against several Polish banks contained planted evidence that attempted to blame the attacks on Russian-speaking hackers.
PHP Becomes First Programming Language to Add Modern Cryptography Library in Its Core
The PHP team has unanimously voted to integrate the Libsodium library in the PHP core, and by doing so, becoming the first programming language to support a modern cryptography library by default. [...]
https://www.bleepingcomputer.com/news/security/php-becomes-first-programming-language-to-add-modern-cryptography-library-in-its-core/
The PHP team has unanimously voted to integrate the Libsodium library in the PHP core, and by doing so, becoming the first programming language to support a modern cryptography library by default. [...]
https://www.bleepingcomputer.com/news/security/php-becomes-first-programming-language-to-add-modern-cryptography-library-in-its-core/
BleepingComputer
PHP Becomes First Programming Language to Add Modern Cryptography Library in Its Core
The PHP team has unanimously voted to integrate the Libsodium library in the PHP core, and by doing so, becoming the first programming language to support a modern cryptography library by default.
Google, Bing Sign Anti-Piracy Deal That Will Demote Torrents in Search Results
Under the coordination of the UK government, rights holders and today's top two search engines have reached and signed an agreement that will demote piracy-related links in search results. [...]
https://www.bleepingcomputer.com/news/legal/google-bing-sign-anti-piracy-deal-that-will-demote-torrents-in-search-results/
Under the coordination of the UK government, rights holders and today's top two search engines have reached and signed an agreement that will demote piracy-related links in search results. [...]
https://www.bleepingcomputer.com/news/legal/google-bing-sign-anti-piracy-deal-that-will-demote-torrents-in-search-results/
BleepingComputer
Google, Bing Sign Anti-Piracy Deal That Will Demote Torrents in Search Results
Under the coordination of the UK government, rights holders and today's top two search engines have reached and signed an agreement that will demote piracy-related links in search results.
Java and Python Contain Security Flaws That Allow Attackers to Bypass Firewalls
Both Java and Python contain similar security flaws that allow an attacker to bypass firewalls by injecting malicious commands inside FTP URLs. [...]
https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/
Both Java and Python contain similar security flaws that allow an attacker to bypass firewalls by injecting malicious commands inside FTP URLs. [...]
https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/
BleepingComputer
Java and Python Contain Security Flaws That Allow Attackers to Bypass Firewalls
Both Java and Python contain similar security flaws that allow an attacker to bypass firewalls by injecting malicious commands inside FTP URLs.
8 Trends in Android Ransomware, According to ESET
Not everyone has the time of day to read an 18-page report on the state of Android ransomware, so that's why we read it for you and summarized its main findings below. [...]
https://www.bleepingcomputer.com/news/security/8-trends-in-android-ransomware-according-to-eset/
Not everyone has the time of day to read an 18-page report on the state of Android ransomware, so that's why we read it for you and summarized its main findings below. [...]
https://www.bleepingcomputer.com/news/security/8-trends-in-android-ransomware-according-to-eset/
BleepingComputer
8 Trends in Android Ransomware, According to ESET
Not everyone has the time of day to read an 18-page report on the state of Android ransomware, so that's why we read it for you and summarized its main findings below.
Unstoppable JavaScript Attack Helps Ad Fraud, Tech Support Scams, 0-Day Attacks
Argentinian security expert Manuel Caballero has published new research that shows how a website owner could show a constant stream of popups, even after the user has left his site, or even worse, execute his very own persistent JavaScript code while the user is on other domains. [...]
https://www.bleepingcomputer.com/news/security/unstoppable-javascript-attack-helps-ad-fraud-tech-support-scams-0-day-attacks/
Argentinian security expert Manuel Caballero has published new research that shows how a website owner could show a constant stream of popups, even after the user has left his site, or even worse, execute his very own persistent JavaScript code while the user is on other domains. [...]
https://www.bleepingcomputer.com/news/security/unstoppable-javascript-attack-helps-ad-fraud-tech-support-scams-0-day-attacks/
BleepingComputer
Unstoppable JavaScript Attack Helps Ad Fraud, Tech Support Scams, 0-Day Attacks
Argentinian security expert Manuel Caballero has published new research that shows how a website owner could show a constant stream of popups, even after the user has left his site, or even worse, execute his very own persistent JavaScript code while the…
Firefox Users Fingerprinted via Cached Intermediate HTTPS Certificates
The way in which Firefox caches intermediate CA certificates allows a third-party to deduce various details about website visitors and also link advertising profiles to private browsing sessions. [...]
https://www.bleepingcomputer.com/news/security/firefox-users-fingerprinted-via-cached-intermediate-https-certificates/
The way in which Firefox caches intermediate CA certificates allows a third-party to deduce various details about website visitors and also link advertising profiles to private browsing sessions. [...]
https://www.bleepingcomputer.com/news/security/firefox-users-fingerprinted-via-cached-intermediate-https-certificates/
BleepingComputer
Firefox Users Fingerprinted via Cached Intermediate HTTPS Certificates
The way in which Firefox caches intermediate CA certificates allows a third-party to deduce various details about website visitors and also link advertising profiles to private browsing sessions.
Avast Releases a Decryptor for Offline Versions of the CryptoMix Ransomware
Today, Avast released a decryptor for CryptoMix victim's that were encrypted while in offline mode. Offline mode is when the ransomware runs and encrypts a victim's computer while there is no Internet connection or the computer cannot connect to the ransomware's Command & Control server. [...]
https://www.bleepingcomputer.com/news/security/avast-releases-a-decryptor-for-offline-versions-of-the-cryptomix-ransomware/
Today, Avast released a decryptor for CryptoMix victim's that were encrypted while in offline mode. Offline mode is when the ransomware runs and encrypts a victim's computer while there is no Internet connection or the computer cannot connect to the ransomware's Command & Control server. [...]
https://www.bleepingcomputer.com/news/security/avast-releases-a-decryptor-for-offline-versions-of-the-cryptomix-ransomware/
BleepingComputer
Avast Releases a Decryptor for Offline Versions of the CryptoMix Ransomware
Today, Avast released a decryptor for CryptoMix victim's that were encrypted while in offline mode. Offline mode is when the ransomware runs and encrypts a victim's computer while there is no Internet connection or the computer cannot connect to the rans…
Microsoft Patches Remote Code Execution Vulnerability in Adobe Flash Player
Today Microsoft released the MS17-005 Security Update for Adobe Flash Player (4010250), which patches a remote code execution vulnerability in Adobe Flash Player. This update resolves the same vulnerabilities patched by Adobe on February 14th in their APSB17-04 update. [...]
https://www.bleepingcomputer.com/news/security/microsoft-patches-remote-code-execution-vulnerability-in-adobe-flash-player/
Today Microsoft released the MS17-005 Security Update for Adobe Flash Player (4010250), which patches a remote code execution vulnerability in Adobe Flash Player. This update resolves the same vulnerabilities patched by Adobe on February 14th in their APSB17-04 update. [...]
https://www.bleepingcomputer.com/news/security/microsoft-patches-remote-code-execution-vulnerability-in-adobe-flash-player/
BleepingComputer
Microsoft Patches Remote Code Execution Vulnerability in Adobe Flash Player
Today Microsoft released the MS17-005 Security Update for Adobe Flash Player (4010250), which patches a remote code execution vulnerability in Adobe Flash Player. This update resolves the same vulnerabilities patched by Adobe on February 14th in their APSB17…
Blizzard Ending Support for Windows XP and Vista
Blizzard announced over the weekend that it intends to end support for gamers on Windows XP and Vista operating systems by the end of 2017. [...]
https://www.bleepingcomputer.com/news/gaming/blizzard-ending-support-for-windows-xp-and-vista/
Blizzard announced over the weekend that it intends to end support for gamers on Windows XP and Vista operating systems by the end of 2017. [...]
https://www.bleepingcomputer.com/news/gaming/blizzard-ending-support-for-windows-xp-and-vista/
BleepingComputer
Blizzard Ending Support for Windows XP and Vista
Blizzard announced over the weekend that it intends to end support for gamers on Windows XP and Vista operating systems by the end of 2017.
Google Shutting Down 'Site Search' Service, Moving Customers to CSE
Google confirmed yesterday it was shutting down its Site Search service, which is the commercial version of the free service Google Custom Search, also known as Custom Search Engine (CSE). [...]
https://www.bleepingcomputer.com/news/google/google-shutting-down-site-search-service-moving-customers-to-cse/
Google confirmed yesterday it was shutting down its Site Search service, which is the commercial version of the free service Google Custom Search, also known as Custom Search Engine (CSE). [...]
https://www.bleepingcomputer.com/news/google/google-shutting-down-site-search-service-moving-customers-to-cse/
BleepingComputer
Google Shutting Down 'Site Search' Service, Moving Customers to CSE
Google confirmed yesterday it was shutting down its Site Search service, which is the commercial version of the free service Google Custom Search, also known as Custom Search Engine (CSE).
Website Uses "Add Extension to Leave" Popups to Infect Chrome Users
A malvertising campaign has specifically targeted and redirected Chrome users to a website they couldn't leave unless they agreed to install a rogue Chrome extension. [...]
https://www.bleepingcomputer.com/news/security/website-uses-add-extension-to-leave-popups-to-infect-chrome-users/
A malvertising campaign has specifically targeted and redirected Chrome users to a website they couldn't leave unless they agreed to install a rogue Chrome extension. [...]
https://www.bleepingcomputer.com/news/security/website-uses-add-extension-to-leave-popups-to-infect-chrome-users/
BleepingComputer
Website Uses "Add Extension to Leave" Popups to Infect Chrome Users
A malvertising campaign has specifically targeted and redirected Chrome users to a website they couldn't leave unless they agreed to install a rogue Chrome extension.
Cyber-Espionage Group Uses Microphones and Dropbox to Spy on Ukrainian Targets
A well-organized cyber-espionage group is infecting computers at selected targets in the Ukraine, turning on their microphone to record nearby audio, stealing documents, and storing exfiltrated data inside Dropbox accounts, according to security firm CyberX, who recently came across the malware used in these attacks. [...]
https://www.bleepingcomputer.com/news/security/cyber-espionage-group-uses-microphones-and-dropbox-to-spy-on-ukrainian-targets/
A well-organized cyber-espionage group is infecting computers at selected targets in the Ukraine, turning on their microphone to record nearby audio, stealing documents, and storing exfiltrated data inside Dropbox accounts, according to security firm CyberX, who recently came across the malware used in these attacks. [...]
https://www.bleepingcomputer.com/news/security/cyber-espionage-group-uses-microphones-and-dropbox-to-spy-on-ukrainian-targets/
BleepingComputer
Cyber-Espionage Group Uses Microphones and Dropbox to Spy on Ukrainian Targets
A well-organized cyber-espionage group is infecting computers at selected targets in Ukraine, turning on their microphone to record nearby audio, stealing documents, and storing exfiltrated data inside Dropbox accounts, according to security firm CyberX,…
Bitcoin Trader Hit By "Severe DDoS Attack" as Bitcoin Price Nears All-Time High
Top Bitcoin trading platform Bitfinex was hit yesterday late night by what its experts categorized as a "severe DDoS attack." [...]
https://www.bleepingcomputer.com/news/security/bitcoin-trader-hit-by-severe-ddos-attack-as-bitcoin-price-nears-all-time-high/
Top Bitcoin trading platform Bitfinex was hit yesterday late night by what its experts categorized as a "severe DDoS attack." [...]
https://www.bleepingcomputer.com/news/security/bitcoin-trader-hit-by-severe-ddos-attack-as-bitcoin-price-nears-all-time-high/
BleepingComputer
Bitcoin Trader Hit By "Severe DDoS Attack" as Bitcoin Price Nears All-Time High
Top Bitcoin trading platform Bitfinex was hit yesterday late night by what its experts categorized as a "severe DDoS attack."
New Trump Locker Ransomware Is a Fraud, Just VenusLocker in Disguise
Yesterday, Bleeping Computer's Lawrence Abrams came across a new ransomware family that he named Trump Locker based on the email address crooks listed in the ransom note, and an image of US President Donald Trump the ransomware displayed before its ransom note. [...]
https://www.bleepingcomputer.com/news/security/new-trump-locker-ransomware-is-a-fraud-just-venuslocker-in-disguise/
Yesterday, Bleeping Computer's Lawrence Abrams came across a new ransomware family that he named Trump Locker based on the email address crooks listed in the ransom note, and an image of US President Donald Trump the ransomware displayed before its ransom note. [...]
https://www.bleepingcomputer.com/news/security/new-trump-locker-ransomware-is-a-fraud-just-venuslocker-in-disguise/
BleepingComputer
New Trump Locker Ransomware Is a Fraud, Just VenusLocker in Disguise
Yesterday, Bleeping Computer's Lawrence Abrams came across a new ransomware family that he named Trump Locker based on the email address crooks listed in the ransom note, and an image of US President Donald Trump the ransomware displayed before its ransom…
New macOS Patcher Ransomware Locks Data for Good, No Way to Recover Your Files
A newly discovered ransomware family calling itself Patcher is targeting macOS users, but according to security researchers from ESET, who discovered the ransomware last week, Patcher bungles the encryption process and leaves affected users with no way of recovering their files. [...]
https://www.bleepingcomputer.com/news/security/new-macos-patcher-ransomware-locks-data-for-good-no-way-to-recover-your-files/
A newly discovered ransomware family calling itself Patcher is targeting macOS users, but according to security researchers from ESET, who discovered the ransomware last week, Patcher bungles the encryption process and leaves affected users with no way of recovering their files. [...]
https://www.bleepingcomputer.com/news/security/new-macos-patcher-ransomware-locks-data-for-good-no-way-to-recover-your-files/
BleepingComputer
New macOS Patcher Ransomware Locks Data for Good, No Way to Recover Your Files
A newly discovered ransomware family calling itself Patcher is targeting macOS users, but according to security researchers from ESET, who discovered the ransomware last week, Patcher bungles the encryption process and leaves affected users with no way of…
Android Ransomware Asks Victims to Speak Unlock Code
A new variant of the Lockdroid Android ransomware has chosen a unique way of unlocking devices by asking users to speak a code provided after paying the ransom. [...]
https://www.bleepingcomputer.com/news/security/android-ransomware-asks-victims-to-speak-unlock-code/
A new variant of the Lockdroid Android ransomware has chosen a unique way of unlocking devices by asking users to speak a code provided after paying the ransom. [...]
https://www.bleepingcomputer.com/news/security/android-ransomware-asks-victims-to-speak-unlock-code/
BleepingComputer
Android Ransomware Asks Victims to Speak Unlock Code
A new variant of the Lockdroid Android ransomware has chosen a unique way of unlocking devices by asking users to speak a code provided after paying the ransom.
Linux Project Patches 11-Year-Old Security Flaw That Gives Attackers Root Access
The Linux team has patched a security flaw in the Linux kernel that can be exploited to gain root-level code execution rights from a low-privileged process. [...]
https://www.bleepingcomputer.com/news/security/linux-project-patches-11-year-old-security-flaw-that-gives-attackers-root-access/
The Linux team has patched a security flaw in the Linux kernel that can be exploited to gain root-level code execution rights from a low-privileged process. [...]
https://www.bleepingcomputer.com/news/security/linux-project-patches-11-year-old-security-flaw-that-gives-attackers-root-access/
BleepingComputer
Linux Project Patches 11-Year-Old Security Flaw That Gives Attackers Root Access
The Linux team has patched a security flaw in the Linux kernel that can be exploited to gain root-level code execution rights from a low-privileged process.
Malware Uses Blinking Hard Drive LEDs to Transmit Data to Nearby Cameras
Custom-made malware installed on an offline computer can use a hard drive's LED to send out sensitive data from infected computers to nearby cameras. [...]
https://www.bleepingcomputer.com/news/security/malware-uses-blinking-hard-drive-leds-to-transmit-data-to-nearby-cameras/
Custom-made malware installed on an offline computer can use a hard drive's LED to send out sensitive data from infected computers to nearby cameras. [...]
https://www.bleepingcomputer.com/news/security/malware-uses-blinking-hard-drive-leds-to-transmit-data-to-nearby-cameras/
BleepingComputer
Malware Uses Blinking Hard Drive LEDs to Transmit Data to Nearby Cameras
Custom-made malware installed on an offline computer can use a hard drive's LED to send out sensitive data from infected computers to nearby cameras.