Remove 02
article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

Gafgyt is a popular choice for launching large-scale DDoS attacks, it first appeared in the threat landscape in 2014. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”).

CMS 141
article thumbnail

Lampion malware v2 February 2020

Security Affairs

2020-02-13] #Lampion v2 #portugal #malware #ATA 0998f6473004e0ba54ead5784ba62db8 h}//vrau-x.s3.us-east-2.amazonaws.[com/0.zip Malicious zip file: DPD-Track&Trace-IDPT-NEgn-02-2020_23. Figure 2: Lampion v2 – first stage files (2020-02-23). Figure 3: Lampion v2 additional cmd file to rename the first stage (2020-02-13).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Google outages in Eastern US affected Gmail, G-Suite, YouTube, and more

Security Affairs

I discovered the problem because I was not able to access Analytics data for my blog. We will provide an update by Sunday, 2019-06-02 16:00 US/Pacific.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cloud 75
article thumbnail

Expert discovered how to brick all Samsung mobile phones

Security Affairs

Below some considerations made by the expert in a blog post published on Medium: By looking the onReceive method of the SwitcherBroadcastReceiver, we are able to deduce that This receiver: expect com.samsung.android.knox.containeragent.LocalCommandReceiver.ACTION_COMMAND as an action. Pierluigi Paganini.

article thumbnail

Hackers are again attacking Portuguese banking organizations via Android Trojan-Banker

Security Affairs

List of some baking campaigns this Brazilian threat group has performed in Portugal: 13/03 – Novo Banco Trojan-Banker 12/03 – Caixa Geral Depósitos 13/02 – Millennium BCP e Montepio 20/01 – Montepio e Millennium BCP 14/01 – Santander e Novo Banco 12-2019/01-2020: Lampion Trojan (…). Pierluigi Paganini. adrotate banner=”13″].

article thumbnail

[SI-LAB] FlawedAmmyy Leveraging Undetected XLM Macros as an Infection Vehicle

Security Affairs

File name: patent-2019-02-20T093A283A05-1.xls xls MD5: d490573977cc6b42ba0b4325df953a7f SHA1: dacf34580c09f7b1e4b8ba02f3ab8b6be08d03ab Creation date: 2018-12-19 10:42:12 First submission in VT: 2019-02-19 23:16:29. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Technical Analysis.

article thumbnail

Brazilian trojan banker is targeting Portuguese users using browser overlay

Security Affairs

At least since the year of 2014 that new variants have been observed, with minor changes, and with the objective of collecting bank details of the victims. During Sl-LAB analysis, and also according to @t14g0p – a Portuguese security researcher, this malware is similar to other threats from Brazil observed in Portugal since 2014.