Security Affairs

APRIL 2, 2019

Hacked websites were used for several malicious purposes, experts observed compromised WordPress and Joomla websites serving Shade /Troldesh ransomware, coin miners, backdoors, and some times were involved in phishing campaigns. The attackers use these locations to hide malware and phishing pages from the administrators.

CMS 107

CMS Phishing Ransomware File names 107

IT Governance

NOVEMBER 20, 2023

Records breached: Unknown ALPHV/BlackCat attacks MeridianLink then reports it to the SEC Date of breach: 7 November Breached organisation: MeridianLink Incident details: The ALPHV/BlackCat ransomware group has added the software company MeridianLink to its leak site, having exfiltrated data without encrypting company systems.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

eSecurity Planet

FEBRUARY 26, 2024

February 21, 2024 5 Vulnerabilities Impact Joomla CMS Type of vulnerability: Mail address escaping, XSS, and remote code execution. Bitdefender’s investigation shows that data can be exfiltrated using encrypted image files, highlighting the severity of potential misuse and the need for mitigation. and iPadOS 17.3.

Risk 110

Risk Authentication Systems administration Ransomware 110

Security Affairs

FEBRUARY 19, 2019

The phishing email contains a.zip file named “slavneft.zakaz.zip”, which means something like “slavneft order” in English, showing a direct reference to “Slavneft”. Shade encrypts all the user files using an AES encryption scheme. Background of the infected machine, after encryption phase. Technical analysis.

Ransomware 75

Ransomware Mining File names Encryption 75

Thales Cloud Protection & Licensing

MARCH 31, 2022

Since phishing remains one of the most common threats to organizations, it continues to be a critical threat to defend against. Cloud-native CBA demonstrates Microsoft’s commitment to the federal Zero Trust strategy and helps government organizations implement the most prominent phishing-resistant MFA to meet EO/NIST requirements.

Authentication 77

Authentication Cloud CMS Phishing 77