Security Affairs

FEBRUARY 16, 2021

In 2019, Telegram had introduced in animated stickers , this was the starting point for the investigation of the experts. The “ rlottie ” folder caught their attention, it was the folder used for the Samsung native library for playing Lottie animations, originally created by Airbnb. . ” continues the report.

Access 115

Access Libraries Encryption Security 115

Security Affairs

MAY 10, 2020

Crooks exploit CVE-2019-18935 deserialization vulnerability to achieve remote code execution in Blue Mockingbird Monero-Mining campaign. This issue could be exploited only when the encryption keys are obtained via a separate attack, meaning that the attackers have to chain more exploits in their campaigns. ” concludes the report.

Mining 88

Mining Libraries Access Encryption 88

Security Affairs

AUGUST 12, 2019

Searching online the expert first found an encrypted firmware, he found on a forum a Portable ROM Dumper , (a custom firmware update file that once loaded, dumps the memory of the camera into the SD Card) that allowed him to dump the camera’s firmware and load it into his disassembler (IDA Pro). ” continues the post.

Ransomware 92

Ransomware Encryption Libraries Authentication 92

Security Affairs

NOVEMBER 21, 2019

“Fast forwarded to October 11, 2019, our Anglerfish honeypot captured another suspicious ELF sample, and it turned out to be the Downloader of the previous suspicious ELF sample.” ” reads the analysis published by 360 Netlab. One of the addresses disguised the Bot sample as a Google font library “ roboto.

Honeypots 83

Honeypots Systems administration Passwords IoT 83

Security Affairs

NOVEMBER 18, 2020

In 2019, over 320 million users were registered with the MercadoLivre e-commerce platform. . ” reads the analysis published by Cybereason. Experts observed several variants over the recent months, it authors have improved encryption and implemented new functionality of the final Node.js SecurityAffairs – hacking, malware).

Phishing 119

Phishing Mining Libraries Encryption 119

Security Affairs

MAY 9, 2020

Dacls was first spotted by researchers at Qihoo 360 Netlab in December 2019 when it was used to target both Windows and Linux devices. ” reads the analysis published by the researchers. . ” reads the analysis published by the researchers. This library has been used by several threat actors.”

Libraries 88

Libraries Communications Encryption Authentication 88

Security Affairs

FEBRUARY 19, 2019

As stated in a recent Eset report , the Shade infection had an increase during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size (shown in Figure 1). Technical analysis. References to an Oil-Gas company.

Ransomware 76

Ransomware Mining File names Encryption 76

Security Affairs

SEPTEMBER 12, 2019

“In July and August 2019, CTU researchers discovered a new large global phishing operation launched by COBALT DICKENS. This operation is similar to the threat group’s August 2018 campaign , using compromised university resources to send library-themed phishing emails.”

Phishing 81

Phishing Libraries File names Metadata 81

Security Affairs

JUNE 18, 2020

” reads the analysis published by ESET. It exploits a vulnerability in the Windows wdigest.dll library and then uses an improved ListPlanting technique to inject its code into a trusted process. This allows the InvisiMole group to devise creative ways to operate under the radar.”

Military 85

Military Communications Libraries Encryption 85

Security Affairs

JANUARY 29, 2019

In the last weeks, the Cybaze-Yoroi ZLAB investigated a new APT28 campaign discovered in January 2019. The sample has been initially identified by an Italian independent security researcher, who warned the InfoSec community and shared the binary for further analysis. Technical Analysis. AutoIt script’s main function. Conclusion.

Communications 83

Communications Libraries Encryption Security 83

eSecurity Planet

DECEMBER 7, 2023

Encryption scrambles data to make it unreadable to those without decryption keys. Proper use of encryption preserves secrecy and radically lowers the potential damage of a successful cybersecurity attack. Encryption algorithm types will provide an overview of the mathematical algorithms used to encrypt data (AES, RSA, etc.),

Encryption 109

Encryption Authentication Passwords Communications 109

Security Affairs

MARCH 2, 2019

In February 2019, SI-LAB captured multiple samples of phishing campaigns using an Office Excel document carrying a malicious Excel 4.0 For more details on this finding see the Technical Analysis below. Technical Analysis. File name: patent-2019-02-20T093A283A05-1.xls Another document used by TA505 to spread FlawedAmmyy (.doc).

File names 89

File names Phishing Libraries IT 89

Security Affairs

APRIL 10, 2019

SI-LAB detected hundreds of users that were impacted by this malware between March 18th and 26th of 2019. The last days of March 2019 are making headlines due to a targeted cyber attack involving a new variant of infamous EMOTET malware. For more details and complete analysis of this malicious campaign see the Technical Analysis below.

Security 62

Security IT Access Cybersecurity 62

Security Affairs

JUNE 22, 2023

The experts discovered the attack while monitoring the network traffic of their own corporate Wi-Fi network dedicated to mobile devices using the Kaspersky Unified Monitoring and Analysis Platform (KUMA). According to Kaspersky researchers, Operation Triangulation began at least in 2019 and is still ongoing.

Libraries 97

Libraries Encryption Security IT 97

eSecurity Planet

FEBRUARY 3, 2021

Before jumping into the technical details regarding each new malware detected and proper safeguards, here is a brief look at the events to date: Sep 2019. This malware infiltrated SolarWinds in September 2019 with the expert insertion of code to avoid detection. Encryption. APT accessed SolarWinds; injects Sunspot malware.

Cybersecurity 62

Cybersecurity Access Authentication Cloud 62

Security Affairs

AUGUST 21, 2019

based research university took place on April 2019. The hackers exploited the CVE-2019-3396 vulnerability in Atlassian Confluence Server to compromise the systems and load additional payloads, including a variant of the China Chop web shell. ” reads the analysis published by FireEye. into memory.

Libraries 88

Libraries Education Phishing Encryption 88

Security Affairs

JULY 7, 2020

Lampion was first documented in December 2019 , and it was distributed in Portugal via phishing emails using templates based on the Portuguese Government Finance & Tax. VBS file leverages the Windows rundll32 library to inject the first DLL into memory (P-14-7.dll), More recently, in May 2020, a new variant of Lampion was observed.

Communications 102

Communications Cloud Phishing Encryption 102

Data Protector

OCTOBER 11, 2017

It will ensure that libraries can continue to archive material, that journalists can continue to enjoy the freedoms that we cherish in this country, and that the criminal justice system can continue to keep us safe. Decisions also follow a lengthy procedure, so the chances of having an adequacy decision in place by March 2019 are small.

GDPR 120

GDPR Personal data Government IT 120