Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “Recently, a new infection vector that cracks Windows machines through SMB password brute force is on the rise” reads the analysis published by AVAST.

Mining 129

Mining Passwords Communications IT 129

Security Affairs

AUGUST 28, 2018

According to the threat intelligence firm Volexity, the CVE-2018-11776 vulnerability is already being abused in malicious attacks in the wild. Just yesterday I wrote about the availability online of the exploit code for the recently discovered Critical remote code execution vulnerability CVE-2018-11776 in Apache Struts 2.

Mining 48

Mining IoT Risk IT 48

Security Affairs

JUNE 27, 2021

Researchers have discovered a strain of cryptocurrency-mining malware, tracked as Crackonosh, that abuses Windows Safe mode to avoid detection. . ” reads the analysis published by Avast. The final stage of the Crackonosh attack chain is the installation of the coinminer XMRig to mine the Monero (XMR) cryptocurrency.

Mining 110

Mining File names Security IT 110

Security Affairs

OCTOBER 13, 2021

” reads the analysis published by the expert. ” The malware was first spotted in February 2018 by researchers from Proofpoint when the bot was using the EternalBlue exploit to infect Windows computers and recruit them in Monero cryptocurrency mining activities. ” continues the analysis.

ROT 103

ROT Mining Encryption IT 103

Security Affairs

SEPTEMBER 17, 2021

CVE-2020-14882 Oracle WebLogic Server RCE, and CVE-2018-20062 ThinkPHP RCE) and targeting sites and systems protected with weak administrative credentials. Upon infecting a system, the malware abuses its resources to mine cryptocurrency. . ” concludes the analysis. ” said Akamai researcher Larry Cashdollar.

Honeypots 89

Honeypots Mining Encryption Access 89

The Last Watchdog

SEPTEMBER 18, 2018

I talked with Jonathan Sander, Chief Technology Officer with STEALTHbits Technologies , about this at Black Hat USA 2018. The main difference between the two is organization and analysis. For structured data, users can run simple analysis tools, i.e., content searches, to find what they need. Ransomware target.

Unstructured data 194

Unstructured data Ransomware Mining Encryption 194

Security Affairs

FEBRUARY 15, 2019

” reads the analysis published by Symantec. “As soon as the apps are downloaded and launched, they fetch a coin-mining JavaScript library by triggering Google Tag Manager (GTM) in their domain servers. ” The malicious apps were added to the Microsoft Store between April and December 2018.

Mining 90

Mining Libraries Analytics Security 90

Security Affairs

JANUARY 31, 2021

In our analysis, we found Pro-Ocean targeting Apache ActiveMQ (CVE-2016-3088), Oracle WebLogic (CVE-2017-10271) and Redis (unsecure instances).” ” reads the analysis published by Palo Alto Networks. ” continues the analysis. “Pro-Ocean uses known vulnerabilities to target cloud applications.

Cloud 85

Cloud Libraries Mining IT 85

Security Affairs

SEPTEMBER 13, 2019

A new cryptocurrency-mining botnet tracked as WatchBog is heavily using the Pastebin service for command and control (C&C) operations. Cisco Talos researchers discovered a new cryptocurrency -mining botnet tracked as WatchBog is heavily using the Pastebin service for command and control. ” continues Talos.

Mining 81

Mining IT Security Information Security 81

Security Affairs

MARCH 21, 2022

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “The analysis showed that the worming module targets older well-known vulnerabilities, e.g., EternalBlue and Hot Potato Windows Privilege Escalation.

Mining 75

Mining Passwords Risk IT 75

Security Affairs

NOVEMBER 26, 2019

Security experts at Microsoft analyzed a new strain of cryptocurrency miner tracked as Dexphot that has been active since at least October 2018. The malicious code abuse of the resources of the infected machine to mine cryptocurrency , according to the experts it has already infected 80,000 computers worldwide.

File names 122

File names Encryption Mining Security 122

Security Affairs

JANUARY 4, 2019

. “Starting in mid-November 2018, our telemetry reports indicate that the newest version of the NRSMiner cryptominer, which uses the Eternal Blue exploit to propagate to vulnerable systems within a local network, is actively spreading in Asia. ” reads the analysis published by F-Secure. ” continues the analysis.

Mining 86

Mining File names Access IT 86

Security Affairs

FEBRUARY 8, 2022

Roaming Mantis surfaced in March 2018 when hacked routers in Japan redirecting users to compromised websites. ” reads the analysis published by Kaspersky. The analysis of Wroba.g/Wroba.o The Roaming Mantis SMS phishing campaign is now targeting Android and iPhone users in Europe with malicious apps and phishing pages.

Phishing 87

Phishing Mining IT Security 87

Security Affairs

JULY 25, 2019

Experts at Intezer researchers have spotted a strain of the Linux mining that also scans the Internet for Windows RDP servers vulnerable to the Bluekeep. ” continues the analysis. ” continues the analysis. ” reads a blog post published by Intezer. ” reads a blog post published by Intezer.

Mining 70

Mining Encryption IT Security 70

Security Affairs

AUGUST 8, 2019

Avast spotted a new strain of Clipsa malware that is used to mine and steal cryptocurrencies along with carrying out brute-force attacks on WordPress sites. Clipsa is a malware that is well known to cyber security community is able to steal cryptocurrency via clipoard hijacking and mine cryptocurrency after installing a miner. .

Mining 88

Mining Passwords IT Security 88

Security Affairs

JUNE 22, 2019

Trend Micro recently discovered an Android crypto-currency mining botnet that can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH). Security researchers at Trend Micro have discovered an new Android crypto-currency mining botnet that spreads via open ADB ( Android Debug Bridge ) ports and Secure Shell (SSH).

Mining 67

Mining Honeypots Authentication Communications 67

Security Affairs

FEBRUARY 19, 2019

As stated in a recent Eset report , the Shade infection had an increase during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size (shown in Figure 1). Technical analysis. Table 1: shade ransomware informations.

Ransomware 76

Ransomware Mining File names Encryption 76

Security Affairs

APRIL 26, 2019

” reads the analysis published Symantec. ” continues the analysis. ” Experts observed a spike in the activity of Beapy in March: Since Coinhive cryptocurrency mining service shut down in March, experts observed a drop in cryptojacking attacks. “ Beapy ( W32.Beapy

Mining 59

Mining Archiving Phishing Passwords 59

Security Affairs

OCTOBER 15, 2019

The cybercrime organization was first spotted in April 2018 by researchers at Cisco Talos, earlier 2019 researchers from Palo Alto Networks Unit42 found new malware samples used by the Rocke group for cryptojacking that uninstalls from Linux servers cloud security and monitoring products developed by Tencent Cloud and Alibaba Cloud. .

Mining 64

Mining Cloud Security Access 64

Security Affairs

MARCH 13, 2019

“Recently, 360 Total Security team intercepted a new worm PsMiner written in Go, which uses CVE-2018-1273, CVE-2017-10271, CVE-2015-1427, CVE-2014-3120 and other high-risk vulnerabilities ? ” reads the analysis published by the experts. ” reads the analysis published by the experts.

Mining 78

Mining Passwords Risk Security 78

Security Affairs

SEPTEMBER 19, 2019

In February 2018, researchers from Proofpoint discovered a huge botnet dubbed ‘Smominru’ that was using the EternalBlue exploit to infect Windows computers and recruit them in Monero cryptocurrency mining activities. Further data, including Indicators of Compromise, are reported in the analysis published by the experts.

Mining 78

Mining Access IT Security 78

Security Affairs

AUGUST 3, 2018

Experts uncovered a massive cryptojacking campaign that is targeting MikroTik routers to inject a Coinhive cryptocurrency mining script in the web traffic. — MalwareHunterBR (@MalwareHunterBR) July 30, 2018. — MalwareHunterBR (@MalwareHunterBR) July 30, 2018. ” continues the analysis.

Mining 69

Mining Libraries Security IT 69

Security Affairs

SEPTEMBER 29, 2018

” reads the analysis published by Avast. “Unlike the aforementioned IoT botnets, this one tries to be more stealthy and persistent once the device is compromised, and it does not (yet) do the usual stuff a botnet does like DDOS , attacking all the devices connected to the internet, or, of course, mining cryptocurrencies.”

IoT 85

IoT Communications Mining Encryption 85

Security Affairs

FEBRUARY 27, 2019

Cisco Talos experts have reported a spike in the attacks that leverage known flaws to compromise unsecured Elasticsearch clusters and use them to mine crypto-currencies. “Through ongoing analysis of honeypot traffic, Talos detected an increase in attacks targeting unsecured Elasticsearch clusters.

Search queries 83

Search queries Honeypots File names Mining 83

Krebs on Security

JULY 4, 2020

One of the most-read advice columns on this site is a 2018 piece called “ Plant Your Flag, Mark Your Territory ,” which tried to impress upon readers the importance of creating accounts at websites like those at the Social Security Administration , the IRS and others before crooks do it for you.

Passwords 289

Passwords Authentication Insurance Mining 289

Security Affairs

SEPTEMBER 17, 2018

” reads the analysis published by Palo Alto Networks. In April 2018, while monitoring public data feeds, we noticed an interesting and previously unknown backdoor using HackingTeam’s leaked RCS source code.” ” continues the analysis. Further info, including IoCs, are reported in the analysis published by the experts.

Ransomware 90

Ransomware Mining Passwords Security 90

IT Governance

FEBRUARY 22, 2018

This week, we discuss new reports from Cisco, McAfee and the CSIS, and Big Brother Watch, and hear more about malicious Monero mining. Hello and welcome to the IT Governance podcast for Friday, 23 February 2018. I neglected to reveal the sum the criminals managed to mine in the few hours before they were detected.

Mining 66

Mining GDPR Risk Security awareness 66

Security Affairs

JULY 28, 2018

The attackers compromised a font package installed by a PDF editor app and used it to spread a crypto-mining malware on victims’ machines. ” reads the analysis published by Microsoft. The attackers decompiled and modified one MSI file, an Asian fonts pack, to add the malicious payload with the coin mining code.

Mining 50

Mining Cloud Communications Marketing 50

Security Affairs

AUGUST 31, 2019

” reads the analysis published by the experts. In September 2018, researchers observed the Hide and Seek (HNS) IoT botnet targeting Android devices with ADB option enabled. In June, Trend Micro discovered an Android crypto-currency mining botnet that can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH). .

IoT 80

IoT Passwords Mining Manufacturing 80

Security Affairs

SEPTEMBER 26, 2018

” reads the analysis published by BitDefender. ” In February 2018, security researchers at Qihoo 360’s Netlab have spotted an Android mining botnet that was targeting devices with ADB interface open.

IoT 100

IoT Mining Access Security 100

Security Affairs

NOVEMBER 19, 2019

The second half of 2018 saw a drop in the number of malicious programs downloaded via browsers reaching its minimum at less than 5%, while in the first half of 2019 only every 19 th download was initiated via means other than email. In 2018, their number grew to 3.6%, while in H1 2019 saw an unusual rise of up to 27.8%.

Ransomware 71

Ransomware Archiving Passwords Encryption 71

Security Affairs

APRIL 28, 2020

The Outlaw Hacking Group was first spotted by TrendMicro in 2018 when the cyber criminal crew targeted automotive and financial industries. Now, Shellbot has re-appeared in the threat landscape in a recent campaign, targeting organizations worldwide with a new IRC server and new Monero pools, so we decided to deepen the analysis.

Mining 101

Mining File names Honeypots IT 101

Security Affairs

JULY 5, 2019

” reads the analysis published by F5. ” Attackers leverage well-known flaws to compromise target systems, including security issues in ThinkPHP (CVE-2019-9082 and CVE-unassigned) , Atlassian Confluence (CVE-2019-3396) , and the popular Drupalgeddon vulnerability (CVE-2018-7600). .”

Passwords 88

Passwords Archiving Mining Access 88

Data Matters

SEPTEMBER 11, 2018

This post highlights three important regulatory updates: On August 14, 2018, the Securities and Exchange Commission (SEC or Commission) issued an administrative order, In the Matter of Tomahawk Exploration LLC and David Thompson Laurance , taking action against an unregistered and fraudulent initial coin offering (ICO). securities laws.

Education 74

Education Blockchain Sales Mining 74

Security Affairs

APRIL 23, 2019

Experts also linked the incident to the supply chain attack that targeted CCleaner in September 2018. The Operation ShadowHammer was d campaign was uncovered by experts from Kaspersky Lab and took place between June and November 2018, but experts discovered it in January 2019. ” reads the analysis published by Kaspersky.

Mining 73

Mining Encryption IT Government 73

Security Affairs

AUGUST 8, 2018

DDoS attacks, ransomware-based campaigns, cryptocurrency mining campaigns). ” reads the analysis published by Checkpoint security. “This C&C server has actually been active since 6 th March 2018 but didn’t attract attention because of the low capacity of the “black” botnet at that time. Pierluigi Paganini.

Encryption 47

Encryption Mining Security Ransomware 47

Security Affairs

DECEMBER 6, 2018

Technical analysis of the code revealed many similarities with another nation-state malware, the BlackEnergy malware that was specifically designed to target ISC-SCADA systems and attributed to Russian threat actors. Experts observed the exploitation of the Flash zero-day exploit in an attack aimed at the FSBI “Polyclinic No.

Mining 82

Mining Phishing Government Security 82