Notorious Emotet Malware Returns With High-Volume Malspam Campaign

Notorious Emotet Malware Returns With High-Volume Malspam Campaign,

The notorious Emotet malware has returned with renewed vigor as part of a high-volume malspam campaign designed to drop payloads like IcedID and Bumblebee.
« Hundreds of thousands of emails per day » have been sent since early November 2022, enterprise security company Proofpoint said last week, adding, « the new activity suggests Emotet is returning to its full functionality acting as a delivery

,

The notorious Emotet malware has returned with renewed vigor as part of a high-volume malspam campaign designed to drop payloads like IcedID and Bumblebee.
« Hundreds of thousands of emails per day » have been sent since early November 2022, enterprise security company Proofpoint said last week, adding, « the new activity suggests Emotet is returning to its full functionality acting as a delivery

, ,
https://thehackernews.com/2022/11/notorious-emotet-malware-returns-with.html

Been Doing It The Same Way For Years? Think Again.

Been Doing It The Same Way For Years? Think Again.,

As IT professionals, we all reach a certain point in our IT career where we realize that some of our everyday tasks are done the same way year after year without anyone questioning why it’s done that way.
Despite the constant change and improvement in technology, some things just get done the same ineffective way without any real thought behind it because « that’s the way it’s always been done. »

,

As IT professionals, we all reach a certain point in our IT career where we realize that some of our everyday tasks are done the same way year after year without anyone questioning why it’s done that way.
Despite the constant change and improvement in technology, some things just get done the same ineffective way without any real thought behind it because « that’s the way it’s always been done. »

, ,
https://thehackernews.com/2022/11/been-doing-it-same-way-for-years-think.html

Facebook, Instagram : des employés corrompus vendaient l’accès aux comptes d’utilisateurs

Facebook, Instagram : des employés corrompus vendaient l’accès aux comptes d’utilisateurs,

facebook instagram

Des employés de Meta ont aidé des pirates à prendre le contrôle de comptes Facebook ou Instagram, révèle une enquête interne. Pour y parvenir, ils ont détourné un outil réservé à l’entreprise.

,

facebook instagram

Des employés de Meta ont aidé des pirates à prendre le contrôle de comptes Facebook ou Instagram, révèle une enquête interne. Pour y parvenir, ils ont détourné un outil réservé à l’entreprise.

, ,
https://www.01net.com/actualites/facebook-instagram-enquete-interne-abus-employes.html

Google Wins Lawsuit Against Russians Linked to Blockchain-based Glupteba Botnet

Google Wins Lawsuit Against Russians Linked to Blockchain-based Glupteba Botnet,

Google has won a lawsuit filed against two Russian nationals in connection with the operation of a botnet called Glupteba, the company said last week.
The U.S. District Court for the Southern District of New York imposed monetary sanctions against the defendants and their U.S.-based legal counsel. The defendants have also been asked to pay Google’s attorney fees. The defendants’ move to press

,

Google has won a lawsuit filed against two Russian nationals in connection with the operation of a botnet called Glupteba, the company said last week.
The U.S. District Court for the Southern District of New York imposed monetary sanctions against the defendants and their U.S.-based legal counsel. The defendants have also been asked to pay Google’s attorney fees. The defendants’ move to press

, ,
https://thehackernews.com/2022/11/google-wins-lawsuit-against-russians.html

Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild

Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild,

Google Cloud last week disclosed that it identified 34 different hacked release versions of the Cobalt Strike tool in the wild, the earliest of which shipped in November 2012.
The versions, spanning 1.44 to 4.7, add up to a total of 275 unique JAR files, according to findings from the Google Cloud Threat Intelligence (GCTI) team. The latest version of Cobalt Strike is version 4.7.2.
Cobalt

,

Google Cloud last week disclosed that it identified 34 different hacked release versions of the Cobalt Strike tool in the wild, the earliest of which shipped in November 2012.
The versions, spanning 1.44 to 4.7, add up to a total of 275 unique JAR files, according to findings from the Google Cloud Threat Intelligence (GCTI) team. The latest version of Cobalt Strike is version 4.7.2.
Cobalt

, ,
https://thehackernews.com/2022/11/google-identifies-34-cracked-versions.html

Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022

Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022,

The Indian government on Friday released a draft version of the much-awaited data protection regulation, making it the fourth such effort since it was first proposed in July 2018.
The Digital Personal Data Protection Bill, 2022, as it’s called, aims to secure personal data, while also seeking users’ consent in what the draft claims is « clear and plain language » describing the exact kinds of

,

The Indian government on Friday released a draft version of the much-awaited data protection regulation, making it the fourth such effort since it was first proposed in July 2018.
The Digital Personal Data Protection Bill, 2022, as it’s called, aims to secure personal data, while also seeking users’ consent in what the draft claims is « clear and plain language » describing the exact kinds of

, ,
https://thehackernews.com/2022/11/indian-government-publishes-draft-of.html

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware,

A developing threat activity cluster has been found using Google Ads in one of its campaigns to distribute various post-compromise payloads, including the recently discovered Royal ransomware.
Microsoft, which spotted the updated malware delivery method in late October 2022, is tracking the group under the name DEV-0569.
« Observed DEV-0569 attacks show a pattern of continuous innovation, with

,

A developing threat activity cluster has been found using Google Ads in one of its campaigns to distribute various post-compromise payloads, including the recently discovered Royal ransomware.
Microsoft, which spotted the updated malware delivery method in late October 2022, is tracking the group under the name DEV-0569.
« Observed DEV-0569 attacks show a pattern of continuous innovation, with

, ,
https://thehackernews.com/2022/11/microsoft-warns-of-hackers-using-google.html

Chinese ‘Mustang Panda’ Hackers Actively Targeting Governments Worldwide

Chinese ‘Mustang Panda’ Hackers Actively Targeting Governments Worldwide

,

A notorious advanced persistent threat actor known as Mustang Panda has been linked to a spate of spear-phishing attacks targeting government, education, and research sectors across the world.
The primary targets of the intrusions from May to October 2022 included counties in the Asia Pacific region such as Myanmar, Australia, the Philippines, Japan, and Taiwan, cybersecurity firm Trend Micro 

,

A notorious advanced persistent threat actor known as Mustang Panda has been linked to a spate of spear-phishing attacks targeting government, education, and research sectors across the world.
The primary targets of the intrusions from May to October 2022 included counties in the Asia Pacific region such as Myanmar, Australia, the Philippines, Japan, and Taiwan, cybersecurity firm Trend Micro 

, ,
https://thehackernews.com/2022/11/chinese-mustang-panda-hackers-actively.html

Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products

Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products,

Australian software company Atlassian has rolled out security updates to address two critical flaws affecting Bitbucket Server, Data Center, and Crowd products.
The issues, tracked as CVE-2022-43781 and CVE-2022-43782, are both rated 9 out of 10 on the CVSS vulnerability scoring system.
CVE-2022-43781, which Atlassian said was introduced in version 7.0.0 of Bitbucket Server and Data Center,

,

Australian software company Atlassian has rolled out security updates to address two critical flaws affecting Bitbucket Server, Data Center, and Crowd products.
The issues, tracked as CVE-2022-43781 and CVE-2022-43782, are both rated 9 out of 10 on the CVSS vulnerability scoring system.
CVE-2022-43781, which Atlassian said was introduced in version 7.0.0 of Bitbucket Server and Data Center,

, ,
https://thehackernews.com/2022/11/atlassian-releases-patches-for-critical.html

Meta Reportedly Fires Dozens of Employees for Hijacking Users’ Facebook and Instagram Accounts

Meta Reportedly Fires Dozens of Employees for Hijacking Users’ Facebook and Instagram Accounts

,

Meta Platforms is said to have fired or disciplined over two dozen employees and contractors over the past year for allegedly compromising and taking over user accounts, The Wall Street Journal reported Thursday.
Some of these cases involved bribery, the publication said, citing sources and documents.
Included among those fired were contractors who worked as security guards at the social media

,

Meta Platforms is said to have fired or disciplined over two dozen employees and contractors over the past year for allegedly compromising and taking over user accounts, The Wall Street Journal reported Thursday.
Some of these cases involved bribery, the publication said, citing sources and documents.
Included among those fired were contractors who worked as security guards at the social media

, ,
https://thehackernews.com/2022/11/meta-reportedly-fires-dozens-of.html