Security Affairs

AUGUST 25, 2019

5 Common Phishing Attacks and How to Avoid Them? Malware Analysis Sandboxes could expose sensitive data of your organization. Malware Analysis Sandboxes could expose sensitive data of your organization. A backdoor mechanism found in tens of Ruby libraries. million to allow towns to access encrypted data.

Security 50

Security Mining Data breaches Libraries 50

Security Affairs

SEPTEMBER 20, 2019

Technical Analysis. The document uses a common phishing schema, it invites the user to enable the macro execution due to compatibility reasons with older Microsoft Office versions. The dropped file payload is a.NET executable embedding some anti-analysis tricks. Static information about the doc macro. Load()” method.

Libraries 81

Libraries Passwords IT Phishing 81

IT Governance

JANUARY 10, 2022

The tech giant disclosed four zero-day bugs, which were being used to steal sensitive information, encrypt data for ransom and execute destructive attacks. Analysis from its real-time anti-phishing protection system found that cyber criminals increasingly targeted people who were searching for holidays and weekend breaks.

Security 115

Security Data breaches Ransomware Phishing 115

Security Affairs

FEBRUARY 21, 2020

At that time, the researchers tracked the sources IP in Pakistan, the attacks were part of a wider operation that relies on multi vector such as watering hole websites and phishing email campaigns delivering custom RATs dubbed Crimson and Peppy. So, Cybaze-Yoroi ZLab team decided to dive deep into technical analysis. Conclusion.

Military 115

Military Communications Encryption IT 115

Security Affairs

DECEMBER 20, 2018

The Cybaze -Yoroi ZLab dissected one of these recent Danabot variants spread across the Italian cyberspace leveraging “ Fattura ” themed phishing emails (e.g. Technical Analysis. These registry keys are responsible of the loading of dynamically linked libraries in the “read only ” and “ hidden ” “ C:ProgramDataD93C2DAC ”.

Libraries 74

Libraries Phishing Encryption Authentication 74

Security Affairs

MARCH 2, 2019

In February 2019, SI-LAB captured multiple samples of phishing campaigns using an Office Excel document carrying a malicious Excel 4.0 For more details on this finding see the Technical Analysis below. Technical Analysis. Phishing is, in fact, the major attack vector to distribute threats this nature in-the-wild.

File names 85

File names Phishing Libraries IT 85

Security Affairs

FEBRUARY 16, 2021

Latin American trojans share the same modus operandi and even modules and blocks of code observed during the analysis of several malware samples. The malicious activity starts with a phishing email sent to the target victims in Latin American – Brazil, Mexico, Chile, and Peru – and Europe – Spain and Portugal.

Libraries 119

Libraries Communications Phishing Encryption 119

Security Affairs

MAY 6, 2021

This piece of malware is focused on stealing banking credentials and victim’s secrets using different techniques tactics and procedures (TTP) which have evolved over the years, including its delivery mechanisms, C2 techniques, and anti-analysis and reversing features. In the next workflow, we can learn how the QakBot infection chain works.

Encryption 102

Encryption Libraries Ransomware IT 102

Security Affairs

APRIL 6, 2021

China-linked APT group LuckyMouse (aka Cycldek, Goblin Panda , Hellsing, APT 27, and Conimes) is targeting government and military organizations in Vietnam with spear-phishing. The threat actors are sending out spear-phishing messages to compromise diplomatic targets in Southeast Asia, India, and the U.S. at least since 2013.

Military 84

Military Government Phishing Libraries 84

Security Affairs

AUGUST 21, 2019

Experts observed APT41 using spear-phishing email with attachments such as compiled HTML (. “HIGHNOON is a backdoor that consists of multiple components, including a loader, dynamic-link library (DLL), and a rootkit. ” reads the analysis published by FireEye. chm ) files. into memory.

Libraries 85

Libraries Education Phishing Encryption 85

Security Affairs

JULY 7, 2020

Lampion was first documented in December 2019 , and it was distributed in Portugal via phishing emails using templates based on the Portuguese Government Finance & Tax. VBS file leverages the Windows rundll32 library to inject the first DLL into memory (P-14-7.dll), More recently, in May 2020, a new variant of Lampion was observed.

Communications 96

Communications Cloud Phishing Encryption 96

Security Affairs

MARCH 19, 2020

Today, many reports are describing how infamous attackers are abusing such an emergency time to lure people by sending thematic email campaigns or by using thematic IM within Malware or Phishing links. The following VBScript is run through cscript.exe, It’s an obfuscated and xor-encrypted payload. OCX VT coverage. neighboring[.]site/01/index.php.

Computer and Electronics 99

Computer and Electronics IT Encryption Security 99

ForAllSecure

JANUARY 19, 2022

So by that, I mean, if your developer libraries are available, it's easy to do. Vamosi: In the 1970s, while working for Bell Labs, Robert Morris Sr came up with the idea of a one way algorithm, a means of encryption that can’t easily be decrypted. Well, actually, well, if you encrypt the password, it can be decrypted.

Passwords 52

Passwords Authentication Access Data breaches 52

eSecurity Planet

MAY 2, 2024

This picture comes from an analysis of specific statistics and by reading between the lines in reports from 1Password, Cisco, CrowdStrike, Flashpoint, Google Threat Analysis Group/Mandiant, NetScout, Pentera, and Sophos. and software libraries to attack the supply chain.

Cybersecurity 70

Cybersecurity Ransomware Passwords Cloud 70

eSecurity Planet

MAY 19, 2022

Designed for zero trust and SASE security frameworks Identity-based intrusion detection and prevention ( IDPS ) and access control Automated integrations with leading cloud-hosted security vendors Integrated threat defense for DDoS , phishing , and ransomware attacks Insights into client devices with AI-based discovery and profiling techniques.

Security 120

Security Cloud Encryption Access 120