Malware Loader Abuses Google SEO to Expand Payload Delivery
Gootloader has expanded its payloads beyond the Gootkit malware family, using Google SEO poisoning to gain traction.
The Gootloader malware loader, previously used for distributing the Gootkit malware family, has...
Mobile Adware Booms, Online Banks Become Prime Target for Attacks
A snapshot of the 2020 mobile threat landscape reveals major shifts toward adware and threats to online banks.
Hackers painted a bullseye on the backs of online financial institutions in...
Technical Advisory: Administrative Passcode Recovery and Authenticated Remote Buffer Overflow Vulnerabilities in Gigaset DX600A...
Current Vendor: Gigaset
Vendor URL: https://www.gigaset.com/es_es/gigaset-dx600a-isdn/
Versions affected: V41.00-175.00.00-SATURN-175.00
Systems Affected: DX600A
Authors: Manuel Ginés - manuel.ginesnccgroupcom
Admin Service Weak Authentication
CVE Identifier: CVE-2021-25309
Risk: 8.8 (High) - AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AT Command Buffer Overflow
CVE Identifier: CVE-2021-25306
Risk: 4.5 (Medium)...
Cyberattacks Launch Against Vietnamese Human-Rights Activists
Vietnam joins the ranks of governments using spyware to crack down on human-rights defenders.
Human-rights activists are being targeted by cyberattacks as part of a wider effort by the Vietnamese...
Stalkerware Volumes Remain Concerningly High, Despite Bans
COVID-19 impacted volumes for the year, but the U.S. moved into third place on the list of countries most infected by stalkerware.
Tens of thousands of mobile users were infected...
Attackers Turn Struggling Software Projects Into Trojan Horses
While access to compromised systems has become an increasingly common service, some cybercriminals are going straight to the source: buying code bases and then updating the application with malicious...
Ransomware hackers turn to virtual machine software to boost extortion schemes
Written by Sean Lyngaas Feb 26, 2021 |...
One of the biggest Android VPNs hacked? Data of 21 million users from 3...
A user on a popular hacker forum is selling three databases that purportedly contain user credentials and device data stolen from three different Android VPN services – SuperVPN, GeckoVPN,...
So Unchill: Melting UNC2198 ICEDID to Ransomware Operations
Mandiant Advanced Practices (AP) closely tracks the shifting tactics, techniques, and procedures (TTPs) of financially motivated groups who severely disrupt organizations with ransomware. In May 2020, FireEye released a...
North Korea’s Lazarus Group Expands to Stealing Defense Secrets
Several gigabytes of sensitive data stolen from one restricted network, with organizations in more than 12 countries impacted, Kaspersky says.The Lazarus Group, North Korea's advanced persistent threat (APT) actor,...
