Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2019-09-04 18:17:05 |
TrickBot Makes Heavy Use of Evasion in Recent Attacks (lien direct) |
The operators behind the TrickBot malware have made heavy use of evasion and anti-analysis techniques in recently observed attacks, security researchers warn.
|
Malware
|
|
★★★
|
 |
2019-09-02 15:14:03 |
TrickBot Tricks U.S. Users into Sharing their PIN Codes (lien direct) |
The threat actor behind the infamous TrickBot botnet has added new functionality to their malware to request PIN codes from mobile users, Secureworks reports.
|
Malware
Threat
|
|
★★★
|
 |
2019-08-28 20:36:02 |
(Déjà vu) Malware Found in Google Play App With 100 Million Downloads (lien direct) |
Security researchers have discovered malicious code in an Android application that has gathered over 100 million downloads on Google Play.
|
Malware
|
|
|
 |
2019-08-28 20:31:01 |
Malware Takes Down Lumber Liquidators\' Network (lien direct) |
North American hard-surface flooring retailer Lumber Liquidators this week revealed that it managed to restore most of its network after a malware attack disabled parts of it for nearly a week.
|
Malware
|
|
|
 |
2019-08-28 11:27:03 |
Avast, French Police Remove Retadup Malware From 850,000 PCs (lien direct) |
Cybersecurity firm Avast and French police have neutralized the Retadup malware on over 850,000 computers after taking control of its command and control (C&C) server.
|
Malware
|
|
|
 |
2019-08-27 17:30:02 |
Dridex Operator Updates Tactics and Targets (lien direct) |
The threat actor behind the infamous Dridex and Locky malware families has updated tactics and expanded its target list in recent campaigns, Trend Micro reports.
|
Malware
Threat
|
|
|
 |
2019-08-23 17:23:05 |
Asruex Malware Exploits Old vulnerabilities to Infect PDF, Word Docs (lien direct) |
A recently observed variant of the Asruex backdoor acts as an infector by targeting old vulnerabilities in Microsoft Office and Adobe Reader and Acrobat 9.x, Trend Micro reports.
|
Malware
|
|
|
 |
2019-08-19 11:55:00 |
Organizations Expose Sensitive Data via Malware Analysis Sandboxes (lien direct) |
Researchers at UK-based threat intelligence firm Cyjax have studied files submitted to three popular online malware analysis sandboxes and found that many of the publicly accessible files contain sensitive information.
|
Malware
Threat
|
|
|
 |
2019-08-15 12:46:04 |
DLL Hijacking Flaws Patched in Trend Micro Password Manager (lien direct) |
Trend Micro recently patched a couple of DLL hijacking vulnerabilities in Password Manager that could allow malicious actors to escalate privileges, make their malware persistent, and to load and execute their payloads via a signed service.
|
Malware
|
|
|
 |
2019-08-13 07:45:00 |
SQLite Vulnerabilities Demoed With Hacking of iPhone, Malware C&C (lien direct) |
Researchers have uncovered some potentially serious SQLite vulnerabilities and they have demonstrated their findings by hacking an iPhone and a command and control (C&C) server used by malware.
|
Malware
|
|
|
 |
2019-08-12 15:37:00 |
\'Cloud Atlas\' Cyberspies Use Polymorphic Malware in Government Attacks (lien direct) |
The Cloud Atlas threat group has continued conducting cyber espionage operations and its recent attacks have involved a new piece of polymorphic malware.
|
Malware
Threat
|
|
|
 |
2019-08-11 15:27:02 |
Vulnerabilities in Device Drivers From 20 Vendors Expose PCs to Persistent Malware (lien direct) |
|
Malware
|
|
|
 |
2019-08-09 15:01:01 |
Repurposing Mac Malware Not Difficult, Researcher Shows (lien direct) |
Repurposing Mac malware is not a difficult task for someone with reverse-engineering skills, and it's a far simpler approach compared to writing malware from scratch, a researcher has demonstrated.
|
Malware
|
|
|
 |
2019-08-08 18:50:04 |
New Windows Process Injection Can Be Useful for Stealthy Malware (lien direct) |
|
Malware
|
|
|
 |
2019-08-06 18:20:05 |
Baldr Malware: A Short-Lived Star or Info Stealer That Will Return? (lien direct) |
The Baldr malware is a bit of an enigma. Appearing first in late 2018, researchers at Sophos have tracked it through four rapid revisions until suddenly, on May 31, 2019, the distributor (overdot) declared that further development and support had ceased. Users had been expecting the developer -- thought to be LordOdin by Malwarebytes -- to deliver a major upgrade to version 4.0.
|
Malware
|
|
|
 |
2019-08-06 15:08:00 |
Pakistani Man Bribed AT&T Employees to Unlock Phones, Plant Malware (lien direct) |
A Pakistani national has been charged by U.S. authorities for his role in a scheme that involved bribing employees of telecommunications giant AT&T to help unlock phones and plant malware on the company's network.
|
Malware
|
|
|
 |
2019-08-02 16:34:01 |
New Mirai Variant Hides C&C Server on Tor Network (lien direct) |
A recently discovered variant of the Mirai Internet of Things (IoT) malware is using a command and control (C&C) server on the Tor network, Trend Micro's security researchers have discovered.
|
Malware
|
|
|
 |
2019-08-02 14:39:05 |
New "LookBack" Malware Used in Attacks Against U.S. Utilities Sector (lien direct) |
A series of phishing attacks have been targeting U.S. companies in the utilities sector in an effort to infect systems with a new remote access Trojan (RAT), Proofpoint reports.
|
Malware
|
|
|
 |
2019-07-31 14:31:03 |
Mobile Malware and Mobile Attackers are Getting More Sophisticated (lien direct) |
For many years, the primary threat to mobile devices was click-jacking and adware. But as the mobile device has become more deeply embedded in everybody's life, as mobile banking has increased and the amalgamation of personal data on devices has grown, so has the attraction of the mobile device increased for both cyber criminals and even nation states.
|
Malware
Threat
|
|
|
 |
2019-07-29 14:24:00 |
Encrypted Threats, IoT Malware Surge Past 2018 Levels: Report (lien direct) |
The first half of 2019 was dominated by an increase in malware using encryption, and in malware targeting Internet of Things (IoT) devices, a recent SonicWall report reveals.
|
Malware
|
|
★★★★★
|
 |
2019-07-26 15:25:01 |
British Cyber Expert to be Sentenced for Creating Malware (lien direct) |
Just as Marcus Hutchins was hailed as a hero for helping stop a worldwide computer virus in May 2017, his criminal past as a malware developer was about to catch up to him.
|
Malware
|
|
|
 |
2019-07-26 15:00:03 |
Researchers Discover Android Surveillance Malware Built by Sanctioned Russian Firm (lien direct) |
Mobile security firm Lookout has discovered a new set of sophisticated custom Android surveillanceware tools developed and distributed by a Russian-based company.
|
Malware
|
|
|
 |
2019-07-25 14:18:01 |
Guildma Malware Expands Targets Beyond Brazil (lien direct) |
Researchers at Avast have published a detailed analysis of a banking trojan they call Guildma. This is almost certainly the same malware as that described by Cybereason as Astaroth, but analyzed here in greater detail.
|
Malware
|
|
|
 |
2019-07-25 05:16:04 |
Louisiana School Systems Cyber Attacked; Emergency Declared (lien direct) |
Louisiana Gov. John Bel Edwards has issued an emergency declaration after malware attacks against three school systems in the state have been detected.
|
Malware
|
|
|
 |
2019-07-24 05:04:00 |
Indiana County Targeted in Malware Assault on Computers (lien direct) |
Officials of an Indiana county say they are trying to determine the extent of a malware attack on the county's computers.
Vigo County Commissioner Judith Anderson says commissioners were informed of a “ransomware” attack early Tuesday.
|
Malware
|
|
|
 |
2019-07-19 17:46:01 |
Iranian Hackers Use New Malware in Recent Attacks (lien direct) |
The Iran-linked cyber-espionage group OilRig has started using three new malware families in campaigns observed over the past month, FireEye reports.
|
Malware
|
APT 34
|
★★★
|
 |
2019-07-18 12:36:03 |
Malware Framework Gathers 1 Billion Ad Impressions in 3 Months (lien direct) |
Flashpoint security researchers have discovered a new malware framework that managed to gather over one billion fraudulent ad impressions in the past three months.
|
Malware
|
|
★★
|
 |
2019-07-17 15:12:03 |
EvilGnome Malware Helps Hackers Spy on Linux Users (lien direct) |
Intezer security researchers have discovered a new backdoor targeting Linux systems with the purpose of spying on users.
|
Malware
|
|
|
 |
2019-07-10 10:42:00 |
Researchers Find 17,490 Anubis Android Malware Samples (lien direct) |
Two related servers were recently found hosting 17,490 samples of the same Android malware, Trend Micro's security researchers say.
|
Malware
|
|
|
 |
2019-07-09 15:39:01 |
Malware Isolation Firm Menlo Security Raises $75 Million (lien direct) |
Menlo Security, a provider of zero-trust internet isolation services, has raised $75 million in a Series D funding round led by clients advised by JP Morgan Asset Management. Existing investors, including Sutter Hill Ventures, American Express Ventures, HSBC and JP Morgan Chase also participated in the funding.
|
Malware
|
|
|
 |
2019-07-09 11:51:01 |
Indiana County Disabled by Malware Attack (lien direct) |
LaPorte County, Indiana, reported Sunday that it had been affected by a malware attack. County Commission President Dr. Vidya Kora announced that county employees and the public needing to access any county government email or website would be unable to do so because of a "malicious malware attack that occurred on Saturday morning, July 6, 2019, that has disabled our computer and email systems."
|
Malware
|
|
|
 |
2019-07-08 20:54:02 |
Iran-Linked Malware Shared by USCYBERCOM First Seen in December 2016: Kaspersky (lien direct) |
Iran-linked malware uploaded to VirusTotal last week by United States Cyber Command (USCYBERCOM) was first observed in Dec 2016 and Jan 2017, according to security firm Kaspersky.
|
Malware
|
|
|
 |
2019-07-05 13:42:05 |
Cryptomining Campaign Targets Linux Servers with Go Malware (lien direct) |
A recently uncovered cryptomining campaign is delivering a new Golang malware to target Linux-based servers, F5 Networks security researchers report.
|
Malware
|
|
|
 |
2019-07-02 16:54:00 |
Threat Actor Targets Libyans with Malware via Facebook (lien direct) |
A threat group has been targeting mobile and desktop users in Libya with malware through Facebook pages, Check Point has discovered.
|
Malware
Threat
|
|
|
 |
2019-07-02 14:24:02 |
(Déjà vu) Cyberattack Forces Georgia Agency to Shut Down Websites (lien direct) |
A Georgia state agency says a cyberattack has forced it to shut down some court websites.
News outlets report hackers demanding a ransom infected computers with malware at the Georgia Administrative Office of the Courts. Agency spokesman Bruce Shaw said Monday that officials have “quarantined our servers and shut off our network to the outside.”
|
Malware
|
|
|
 |
2019-06-28 14:58:01 |
"Silexbot" Malware Bricks IoT Devices (lien direct) |
A new piece of malware is targeting improperly secured Internet of Things (IoT) devices with the purpose of bricking them, Akamai's security researchers have discovered.
|
Malware
|
|
|
 |
2019-06-21 14:46:02 |
macOS Crypto-Miner Emulates Linux (lien direct) |
New crypto-currency mining malware is targeting systems running macOS, and works by emulating Linux, Malwarebytes security researchers have discovered.
|
Malware
|
|
|
 |
2019-06-21 07:56:03 |
Mozilla Patches Second Firefox Zero-Day Used in Cryptocurrency Attacks (lien direct) |
Mozilla on Thursday patched a second zero-day vulnerability in Firefox that has been exploited by malicious actors to deliver Mac malware to cryptocurrency exchanges.
|
Malware
Vulnerability
|
|
|
 |
2019-06-20 15:36:04 |
Firefox Zero-Day Exploited to Deliver Malware to Cryptocurrency Exchanges (lien direct) |
The recently patched Firefox vulnerability tracked as CVE-2019-11707 has been exploited to deliver Mac (and possibly Windows) malware to the employees of cryptocurrency exchanges.
|
Malware
|
|
|
 |
2019-06-18 15:19:01 |
Modular Backdoor Can Spread Over Local Network (lien direct) |
A recently discovered backdoor can spread itself over a local network, in addition to allowing attackers to install additional malware onto compromised machines.
|
Malware
|
|
|
 |
2019-06-17 20:14:00 |
Mirai Offspring "Echobot" Uses 26 Different Exploits (lien direct) |
A recently discovered variant of the Mirai Internet of Things (IoT) malware uses a total of 26 different exploits for the infection phase, Akamai reports.
|
Malware
|
|
|
 |
2019-06-17 08:54:04 |
U.S. Planted Powerful Malware in Russia\'s Power Grid: Report (lien direct) |
The New York Times reported over the weekend that the United States planted potentially destructive malware in Russia's electric power grid, but President Donald Trump has denied the claims.
|
Malware
|
|
|
 |
2019-06-14 11:43:02 |
Hackers Behind \'Triton\' Malware Target Electric Utilities in US, APAC (lien direct) |
Xenotime, the threat actor behind the 2017 Trisis/Triton malware attack, is now targeting - in addition to oil and gas organizations - electric utilities in the United States and the Asia-Pacific (APAC) region.
|
Malware
Threat
|
|
|
 |
2019-06-13 19:36:05 |
New Malware Lays P2P Network on Top of IPFS\' (lien direct) |
A newly discovered piece of malware uses a peer-to-peer (p2p) network on top of InterPlanetary File System's (IPFS) p2p network, Anomali's security researchers report.
|
Malware
|
|
|
 |
2019-06-12 13:13:03 |
Malware Can Be Hidden in DICOM Medical Imaging Files, DHS Warns (lien direct) |
Files using the Digital Imaging and Communications in Medicine (DICOM) standard can be abused to hide malware, the U.S. Department of Homeland Security (DHS) warned on Tuesday.
|
Malware
|
|
|
 |
2019-06-10 15:09:05 |
GoldBrute Botnet Brute-Force Attacking RDP Servers (lien direct) |
A new piece of malware is targeting Windows severs with the remote desktop protocol (RDP) exposed to the Internet with the intent to ensnare them into a massive botnet, SANS ISC warns.
|
Malware
|
|
|
 |
2019-05-30 17:16:03 |
Sophisticated HiddenWasp Malware Targets Linux (lien direct) |
A recently uncovered piece of sophisticated malware targeting Linux provides attackers with remote control of the infected systems, Intezer's security researchers have discovered.
|
Malware
|
|
|
 |
2019-05-30 16:09:05 |
Malware Found on PoS Systems at Checkers and Rally\'s Restaurants (lien direct) |
Checkers Drive-In Restaurants, Inc. on Wednesday informed customers that malware had been found on point-of-sale (PoS) systems at some of its Checkers and Rally's restaurants.
|
Malware
|
|
|
 |
2019-05-28 19:02:02 |
Business Users Targeted by HawkEye Keylogger Malware (lien direct) |
HawkEye keylogger campaigns observed in April and May 2019 focused on targeting business users, IBM X-Force security researchers say.
|
Malware
|
|
|
 |
2019-05-28 15:33:00 |
HP Adds New Malware Protection Solution to Latest Laptops (lien direct) |
HP on Tuesday announced that it teamed up with cybersecurity firm Deep Instinct to provide a new malware protection solution for its latest EliteBook and ZBook laptops.
|
Malware
|
|
|