Security Affairs

MAY 10, 2020

Crooks exploit CVE-2019-18935 deserialization vulnerability to achieve remote code execution in Blue Mockingbird Monero-Mining campaign. This issue could be exploited only when the encryption keys are obtained via a separate attack, meaning that the attackers have to chain more exploits in their campaigns. Pierluigi Paganini.

Mining 86

Mining Libraries Access Encryption 86

Security Affairs

NOVEMBER 18, 2020

bin, researchers also observed the use of a cryptocurrency mining module. . Experts observed several variants over the recent months, it authors have improved encryption and implemented new functionality of the final Node.js The malware also installs three other files, hhc.exe, hha.dll and chaes1.bin, ” concludes the report.

Phishing 115

Phishing Mining Libraries Encryption 115

Security Affairs

AUGUST 25, 2019

A backdoor mechanism found in tens of Ruby libraries. million to allow towns to access encrypted data. Employees abused systems at Ukrainian nuclear power plant to mine cryptocurrency. Hackers are scanning the web for vulnerable Fortinet, Pulse Secure Products installs. Texas attackers demand $2.5

Security 50

Security Mining Data breaches Libraries 50

IT Governance

DECEMBER 13, 2018

This week, in our last podcast of the year, we revisit some of the biggest information security stories from the past 12 months. As is now traditional, I’ve installed myself in the porter’s chair next to the fire in the library, ready to recap some of the year’s more newsworthy information security events.

Data breaches 71

Data breaches Personal data Access GDPR 71

Security Affairs

FEBRUARY 5, 2021

The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs. The activity of the TeamTNT group has been detailed by security firm Trend Micro, but in August experts from Cado Security discovered that that botnet is also able to target misconfigured Kubernetes installations.

Mining 110

Mining Libraries Encryption Access 110

ForAllSecure

JUNE 21, 2022

Sometimes it can be really complex DLLs and they call that hijacking or DLL hijacking and what they'll do is they'll use a legitimate program that depends on a library, bring their malicious library with them and it gets sometimes side loaded. Sometimes it can be really complex DLLs and they call that hijacking or DLL hijacking.

Ransomware 52

Ransomware Marketing IT Libraries 52