Rocke Group’s Malware Now Has Worm Capabilities
The Pro-Ocean cryptojacking malware now comes with the ability to spread like a worm, as well as harboring new detection-evasion tactics.
Researchers have identified an updated malware variant used by...
Cleaning up after Emotet: the law enforcement file
Following global law enforcement action to take over the Emotet botnet, a special update is being sent to clean up infected machines.
This blog post was authored by Hasherezade...
Ransomware Payoffs Surge by 311% to Nearly $350 Million
Payments to ransomware gangs using cryptocurrency more than quadrupled in 2020, with less than 200 cryptocurrency wallets receiving 80% of funds.Ransomware payments using cryptocurrency surged 311% in 2020, nearing...
Emotet, NetWalker and TrickBot have taken big blows, but will it be enough?
Written by Tim Starks Jan 29, 2021 |...
Well-Known Fake ID Vendor Arrested in Germany
German Federal Police arrested a trio suspected of running the “FakeIDDobby” vendor account on several darkweb marketplaces.A press release by the Federal Police Inspection for Combating Crime in Halle...
Industrial Gear at Risk from Fuji Code-Execution Bugs
Fuji Electric’s Tellus Lite V-Simulator and V-Server Lite can allow attackers to take advantage of operational technology (OT)-IT convergence on factory floors, at utility plants and more.
Industrial control software...
WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites
The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites.
Developers of a plugin, used by WordPress websites for building pop-up ads...
Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide
By: Ravie Lakshmanan
A "persistent attacker group" with alleged ties to Hezbollah has retooled its malware arsenal with a new version of a remote access Trojan (RAT) to break into...
Technical Advisory – Linksys WRT160NL – Authenticated Command Injection (CVE-2021-25310)
Current Vendor: Belkin (Linksys)
Vendor URL: https://www.linksys.com/sg/p/P-WRT160NL/
Versions affected: 1.0.04 build 2 (FW_WRT160NL_1.0.04.002_US_20130619_code.bin)
Systems Affected: Linksys WRT160NL
Authors: Manuel Ginés - Manuel.Ginesnccgroupcom && Diego Gómez Marañón – Diego.GomezMaranonnccgroupcom
CVE Identifier: CVE-2021-25310
Risk: 8.8 (High)...
Breach Data Highlights a Pivot to Orgs Over Individuals
In 2020, breaches were down by 19%, while the impact of those compromises -- measured in people affected -- fell by nearly two-thirds.Both the number of data breaches and...
