article thumbnail

Russia-linked Cyclops Blink botnet targeting ASUS routers

Security Affairs

. “Our data also shows that although Cyclops Blink is a state-sponsored botnet, its C&C servers and bots affect WatchGuard Firebox and Asus devices that do not belong to critical organizations, or those that have an evident value on economic, political, or military espionage.” India, Italy, Canada, and Russia.

IoT 95
article thumbnail

SWEED targets precision engineering companies in Italy

Security Affairs

Precision engineering is a very important business market in Europe, it includes developing mechanical equipment for: automotive, railways, heavy industries and military grade technology. According to VT history detection the same hash has been seen with at least three different names: educrety.exe , prestezza.exe and cardsharper.exe.

article thumbnail

WinRAR CVE-2018-20250 flaw exploited in multiple campaigns

Security Affairs

The malicious code allows the attackers to download and execute files on the infected machine. “Interestingly, the backdoor communicates with the command and control (C2) server using the value of the Authorization HTTP header ” continues the analysis. The payload is executed the next time Windows starts up.”