Malware

New malware uses specially crafted UDP protocol for C&C Communications

• Malware

New malware uses specially crafted UDP protocol for C&C Communications

Do Son June 29, 2018

Recently, cybersecurity Paloalto Networks discovered a new type of cyber espionage. The primary purpose was to use...

Read More Read more about New malware uses specially crafted UDP protocol for C&C Communications

Necurs botnet uses web query file IQY to evade security detection

• Malware

Necurs botnet uses web query file IQY to evade security detection

Do Son June 28, 2018

Necurs is the world most massive spam botnet and consists of millions of infected computers. It was...

Read More Read more about Necurs botnet uses web query file IQY to evade security detection

Red Alert Android Trojan v2.0 aimed at multinational banks is being rented for $500 per month

• Malware

Red Alert Android Trojan v2.0 aimed at multinational banks is being rented for $500 per month

Do Son June 25, 2018

SpiderLabs, a security lab of cybersecurity company’s Trustwave, released a report last week that the Red Alert...

Read More Read more about Red Alert Android Trojan v2.0 aimed at multinational banks is being rented for $500 per month

China-Linked APT15 developed a new version of MirageFox malware

• Malware

China-Linked APT15 developed a new version of MirageFox malware

Do Son June 19, 2018

The newly discovered APT15 hacker group associated with China, also known as Ke3chang, Mirage, Vixen Panda, Royal...

Read More Read more about China-Linked APT15 developed a new version of MirageFox malware

Bitcoin Miner found in Andy Android emulator for Windows

• Malware

Bitcoin Miner found in Andy Android emulator for Windows

Do Son June 19, 2018

According to Softpedia, the Andy Android emulator installation package for Windows was found to contain an encrypted...

Read More Read more about Bitcoin Miner found in Andy Android emulator for Windows

U.S. Department of Homeland Security issues warnings about New North Korean malware

• Malware

U.S. Department of Homeland Security issues warnings about New North Korean malware

Do Son June 18, 2018

According to SlashGear report, the US Department of Homeland Security (DHS) has issued a warning to a...

Read More Read more about U.S. Department of Homeland Security issues warnings about New North Korean malware

Researcher: 5% of the Monero currency were dug out by Malicious Monero Miners

• Malware

Researcher: 5% of the Monero currency were dug out by Malicious Monero Miners

Do Son June 17, 2018

A researcher at Palo Alto Networks, Josh Grunzweig published “The Rise of the Cryptocurrency Miners” article. According to the data...

Read More Read more about Researcher: 5% of the Monero currency were dug out by Malicious Monero Miners

ClipboardWalletHijacker Trojan monitors Clipboard to Steal Bitcoin & Ethereum

• Malware

ClipboardWalletHijacker Trojan monitors Clipboard to Steal Bitcoin & Ethereum

Do Son June 17, 2018

Qihoo 360 reported a malicious program that hijacked the clipboard. Its purpose was to steal Bitcoin and Ethereum. The malicious...

Read More Read more about ClipboardWalletHijacker Trojan monitors Clipboard to Steal Bitcoin & Ethereum

DOCKER deletes 17 malicious container images

• Malware

DOCKER deletes 17 malicious container images

Do Son June 15, 2018

A recent report released by the German security company pointed out that the popular container platform DOKERER had...

Read More Read more about DOCKER deletes 17 malicious container images

PyRoMineIoT malware use NSA Exploit to mine Monero

• Malware

PyRoMineIoT malware use NSA Exploit to mine Monero

Do Son June 14, 2018

FortiGuard Labs released a report on June 12, 2018, revealing malware called “PyRoMineIoT.” The software not only uses...

Read More Read more about PyRoMineIoT malware use NSA Exploit to mine Monero

SocketPlayer malware could evade the sandbox mechanism

• Malware

SocketPlayer malware could evade the sandbox mechanism

Do Son June 12, 2018

A recent report from G Data stated that the recently discovered remote-access SocketPlayer malware is using a...

Read More Read more about SocketPlayer malware could evade the sandbox mechanism

Hackers use IQY file to bypass AV and download malware through Microsoft Excel

• Malware

Hackers use IQY file to bypass AV and download malware through Microsoft Excel

Do Son June 12, 2018

According to an article posted by the technology blog Barkly last week, security researcher Derek Knight (@dvk01uk)...

Read More Read more about Hackers use IQY file to bypass AV and download malware through Microsoft Excel

Prowli malware infected 40,000 Web servers, modems, & IoT devices

• Malware

Prowli malware infected 40,000 Web servers, modems, & IoT devices

Do Son June 8, 2018

The security team of GuardiCore, an Israeli cybersecurity company, discovered that cybercriminals have managed to create a...

Read More Read more about Prowli malware infected 40,000 Web servers, modems, & IoT devices

VPNFilter malware performs an active man-in-the-middle attack with capable downgrade HTTPS

• Malware

VPNFilter malware performs an active man-in-the-middle attack with capable downgrade HTTPS

Do Son June 7, 2018

After further analysis, the Cisco security researchers found that the malicious program VPNFilter was more powerful and destructive than earlier thought....

Read More Read more about VPNFilter malware performs an active man-in-the-middle attack with capable downgrade HTTPS

MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server

• Malware

MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server

Do Son May 31, 2018

The IBM X-Force research team discovered a new banking Trojan based on Delphi, a well-known rapid application...

Read More Read more about MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server

Iron Cybercrime Group use HackingTeam tools to spread ransomware

• Cyber Security
• Malware

Iron Cybercrime Group use HackingTeam tools to spread ransomware

Do Son May 31, 2018

Intezer, an Israeli cybersecurity company, published a blog post on May 29, 2018, stating that it had...

Read More Read more about Iron Cybercrime Group use HackingTeam tools to spread ransomware

BackSwap Bank Trojan uses three new technologies to empty bank accounts

• Malware

BackSwap Bank Trojan uses three new technologies to empty bank accounts

Do Son May 30, 2018

ESET’s security experts recently discovered a new type of banking Trojan, BackSwap Bank Trojan, which uses three...

Read More Read more about BackSwap Bank Trojan uses three new technologies to empty bank accounts

FBI Remind User to Restart Router to Remove VPNFILTER malware

• Malware

FBI Remind User to Restart Router to Remove VPNFILTER malware

Do Son May 29, 2018

Previously, Cisco’s security labs discovered that malware named VPNFILTER has infected more than 500,000 routers worldwide. The malware...

Read More Read more about FBI Remind User to Restart Router to Remove VPNFILTER malware

Dragos’s reseacher: Trisis malware has expanded its target

• Malware

Dragos’s reseacher: Trisis malware has expanded its target

Do Son May 28, 2018

Industrial Cyber Security company Dragos disclosed on May 24th, 2018 that the hacking organization Xenotime’s initial trajectory...

Read More Read more about Dragos’s reseacher: Trisis malware has expanded its target

New Monero mining software target Mac users

• Malware

New Monero mining software target Mac users

Do Son May 28, 2018

A large number of Mac users have discovered that a process called “mshelper” takes up their CPUs...

Read More Read more about New Monero mining software target Mac users

Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone

• Malware

Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone

Do Son May 25, 2018

Avast, a well-known security agency, issued a report that its security threats lab found that a number...

Read More Read more about Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone

Cisco’s Talos issued security alert: new VPNFilter malware affected 500,000 networking devices worldwide

• Malware

Cisco’s Talos issued security alert: new VPNFilter malware affected 500,000 networking devices worldwide

Do Son May 24, 2018

Cisco issued a security alert on Wednesday that hackers have used malware to infect at least 500,000...

Read More Read more about Cisco’s Talos issued security alert: new VPNFilter malware affected 500,000 networking devices worldwide