Security Affairs

FEBRUARY 2, 2022

The Sugar malware was first discovered in the wild in November 2021, it is a Delphi malware that borrows code from other ransomware families. ” reads the analysis published by Walmart. Other similarities were found by the experts in the GPLib library used for encryption/decryption operations.

Ransomware 98

Ransomware Retail Libraries Encryption 98

Security Affairs

MAY 7, 2022

” reads the analysis published by Kaspersky researcher Denis Legezo. The experts discovered that the attackers are hiding encrypted shellcode containing the next-stage malware as 8KB pieces in event logs. ” continues the analysis. Threat actors also used to sign modules to avoid detection.

Encryption 86

Encryption Libraries Archiving Communications 86

Security Affairs

JULY 16, 2021

In April 2021, more than 500,000 Huawei users were infected with the Joker malware after they have downloaded tainted apps from the company’s official Android store. The developers are embedding Joker as a payload that can be encrypted in different ways, either a.dex file xored or encrypted with a number, or through the same.

Encryption 138

Encryption Libraries Cloud Security 138

Security Affairs

JUNE 22, 2021

The ransomware uses OpenSSL’s AES algorithm with CBC mode to encrypt files and leverages Telegram’s API for C2 communications. The ransomware appends radioactive symbols (“ ”) to the filenames of encrypted files. . ip: 185.141.25.168 [link] pic.twitter.com/6WhAFlxk1L — r3dbU7z (@r3dbU7z) May 29, 2021.

Ransomware 104

Ransomware Encryption Passwords Cloud 104

Security Affairs

JUNE 29, 2022

To control the browser, the malware uses a library called Rod. The malware encrypts all the data with a key that is unique for each sample and sends it along with a sample identifier to the C2 server located at the domain name youbot[.]solutions. ” “The business listing has a logo of an eye in a red circle.

Authentication 97

Authentication Libraries Encryption Marketing 97

eSecurity Planet

AUGUST 13, 2021

While several open-source tools exist for disk and data capture, network analysis, and specific device forensics, a growing number of vendors are building off what’s publicly available. This article looks at the top digital forensic software tools of 2021 and what customers should consider when buying or acquiring a DSF tool.

e-Discovery 139

e-Discovery Computer and Electronics Marketing Compliance 139

eSecurity Planet

FEBRUARY 3, 2021

On February 2, 2021, Reuters reported that a second advanced persistent threat ( APT ), connected to China, also exploited SolarWinds software. On February 3, 2021, threat detection and response vendor Trustwave released three additional findings on SolarWinds vulnerabilities. Also Read: Top CASB Security Vendors for 2021.

Cybersecurity 62

Cybersecurity Access Authentication Cloud 62

Security Affairs

JULY 14, 2021

The Uptycs threat research team has been observing over 90% of macOS malware in our daily analysis and customer telemetry alerts using shell scripts. The openssl program is a command line tool in macOS for using the various cryptography functions (SSL, TLS) of OpenSSL’s crypto library from the shell.

Encryption 121

Encryption Passwords Libraries Security 121

Security Affairs

MAY 6, 2021

This piece of malware is focused on stealing banking credentials and victim’s secrets using different techniques tactics and procedures (TTP) which have evolved over the years, including its delivery mechanisms, C2 techniques, and anti-analysis and reversing features. h/t @MiguelSantareno – malware submitted on 0xSI_f33d.

Encryption 101

Encryption Libraries Ransomware IT 101

Security Affairs

FEBRUARY 16, 2021

Latin American trojans share the same modus operandi and even modules and blocks of code observed during the analysis of several malware samples. Filename: FT.FATURA.EKFUHLWS+LUVPBC0DGZUWISOAPDK.msi MD5 : 70aa68c29622df360dea76daa4255835 Creation time: 2/5/2021 7:10:49 AM. MSI file – The Javali Dropper. Filename: Avira.exe / rundll32.exe

Libraries 118

Libraries Communications Phishing Encryption 118

Security Affairs

FEBRUARY 5, 2021

In January 2021, the cybercrime gang launched a new campaign targeting Kubernetes environments with the Hildegard malware, Palo Alto Networks warns. It also hides malicious processes using library injection and encrypts the malicious payload. ” states the analysis published by Palo Alto Networks.

Mining 110

Mining Libraries Encryption Access 110

eSecurity Planet

MARCH 10, 2021

Also Read: Best Penetration Testing Software for 2021. . For SQLi purposes, this means keeping all web application software components, including database server software, frameworks, libraries, plug-ins, and web server software, up to date. . Encryption: Keep Your Secrets Secret. Utilizing an SQLi Detection Tool .

Passwords 117

Passwords Encryption Access Security 117

Security Affairs

APRIL 6, 2021

The recent campaign was observed between June 2020 and January 2021, threat actors used DLL side-loading to execute shellcode that decrypts a final payload tracked as “ FoundCore.” ” reads the technical analysis of the malware. the messages were dropping a variant of a malicious program named NewCore RAT.

Military 82

Military Government Phishing Libraries 82

eSecurity Planet

OCTOBER 11, 2022

Check Point’s NGFWs leverage an application library of thousands of web applications to identify, allow, block, or limit usage of applications and the features within them, enabling safe internet use while protecting against threats and malware. Both Check Point and Palo Alto are top performers, with AAA ratings in 2021 Cyber Ratings tests.

Cloud 52

Cloud Security IoT IT 52

Thales Cloud Protection & Licensing

FEBRUARY 28, 2024

Thales CipherTrust Data Discovery and Classification helps your organization get complete visibility into your sensitive data with efficient data discovery, classification, and risk analysis across heterogeneous data stores--the cloud, big data, and traditional environments--in your enterprise. This hack included US Government networks.

Cloud 77

Cloud Government Encryption Security 77