Darknet’s Largest Mobile Malware Marketplace Threatens Users Worldwide

Darknet’s Largest Mobile Malware Marketplace Threatens Users Worldwide

,

Cybersecurity researchers have shed light on a darknet marketplace called InTheBox that’s designed to specifically cater to mobile malware operators.
The actor behind the criminal storefront, believed to be available since at least January 2020, has been offering over 400 custom web injects grouped by geography that can be purchased by other adversaries looking to mount attacks of their own.
« 

,

Cybersecurity researchers have shed light on a darknet marketplace called InTheBox that’s designed to specifically cater to mobile malware operators.
The actor behind the criminal storefront, believed to be available since at least January 2020, has been offering over 400 custom web injects grouped by geography that can be purchased by other adversaries looking to mount attacks of their own.
« 

, ,
https://thehackernews.com/2022/12/darknets-largest-mobile-malware.html

Understanding NIST CSF to assess your organization’s Ransomware readiness

Understanding NIST CSF to assess your organization’s Ransomware readiness

,

Ransomware attacks keep increasing in volume and impact largely due to organizations’ weak security controls. Mid-market companies are targeted as they possess a significant amount of valuable data but lack the level of protective controls and staffing of larger organizations.
According to a recent RSM survey, 62% of mid-market companies believe they are at risk of ransomware in the next 12

,

Ransomware attacks keep increasing in volume and impact largely due to organizations’ weak security controls. Mid-market companies are targeted as they possess a significant amount of valuable data but lack the level of protective controls and staffing of larger organizations.
According to a recent RSM survey, 62% of mid-market companies believe they are at risk of ransomware in the next 12

, ,
https://thehackernews.com/2022/12/understanding-nist-csf-to-assess-your.html

Telcom and BPO Companies Under Attack by SIM Swapping Hackers

Telcom and BPO Companies Under Attack by SIM Swapping Hackers,

A persistent intrusion campaign has set its eyes on telecommunications and business process outsourcing (BPO) companies at lease since June 2022.
« The end objective of this campaign appears to be to gain access to mobile carrier networks and, as evidenced in two investigations, perform SIM swapping activity, » CrowdStrike researcher Tim Parisi said in an analysis published last week.
The

,

A persistent intrusion campaign has set its eyes on telecommunications and business process outsourcing (BPO) companies at lease since June 2022.
« The end objective of this campaign appears to be to gain access to mobile carrier networks and, as evidenced in two investigations, perform SIM swapping activity, » CrowdStrike researcher Tim Parisi said in an analysis published last week.
The

, ,
https://thehackernews.com/2022/12/telcom-and-bpo-companies-under-attack.html

Open Source Ransomware Toolkit Cryptonite Turns Into Accidental Wiper Malware

Open Source Ransomware Toolkit Cryptonite Turns Into Accidental Wiper Malware,

A version of an open source ransomware toolkit called Cryptonite has been observed in the wild with wiper capabilities due to its « weak architecture and programming. »
Cryptonite, unlike other ransomware strains, is not available for sale on the cybercriminal underground, and was instead offered for free by an actor named CYBERDEVILZ until recently through a GitHub repository. The source code and

,

A version of an open source ransomware toolkit called Cryptonite has been observed in the wild with wiper capabilities due to its « weak architecture and programming. »
Cryptonite, unlike other ransomware strains, is not available for sale on the cybercriminal underground, and was instead offered for free by an actor named CYBERDEVILZ until recently through a GitHub repository. The source code and

, ,
https://thehackernews.com/2022/12/open-source-ransomware-toolkit.html

New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers

New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers,

Three different security flaws have been disclosed in American Megatrends (AMI) MegaRAC Baseboard Management Controller (BMC) software that could lead to remote code execution on vulnerable servers.
« The impact of exploiting these vulnerabilities include remote control of compromised servers, remote deployment of malware, ransomware and firmware implants, and server physical damage (bricking), »

,

Three different security flaws have been disclosed in American Megatrends (AMI) MegaRAC Baseboard Management Controller (BMC) software that could lead to remote code execution on vulnerable servers.
« The impact of exploiting these vulnerabilities include remote control of compromised servers, remote deployment of malware, ransomware and firmware implants, and server physical damage (bricking), »

, ,
https://thehackernews.com/2022/12/new-bmc-supply-chain-vulnerabilities.html

Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware

Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware,

A new data wiper malware called CryWiper has been found targeting Russian government agencies, including mayor’s offices and courts.
« Although it disguises itself as a ransomware and extorts money from the victim for ‘decrypting’ data, [it] does not actually encrypt, but purposefully destroys data in the affected system, » Kaspersky researchers Fedor Sinitsyn and Janis Zinchenko said in a

,

A new data wiper malware called CryWiper has been found targeting Russian government agencies, including mayor’s offices and courts.
« Although it disguises itself as a ransomware and extorts money from the victim for ‘decrypting’ data, [it] does not actually encrypt, but purposefully destroys data in the affected system, » Kaspersky researchers Fedor Sinitsyn and Janis Zinchenko said in a

, ,
https://thehackernews.com/2022/12/russian-courts-targeted-by-new-crywiper.html

When Being Attractive Gets Risky – How Does Your Attack Surface Look to an Attacker?

When Being Attractive Gets Risky – How Does Your Attack Surface Look to an Attacker?,

In the era of digitization and ever-changing business needs, the production environment has become a living organism. Multiple functions and teams within an organization can ultimately impact the way an attacker sees the organization’s assets, or in other words, the external attack surface. This dramatically increases the need to define an exposure management strategy.
To keep up with business

,

In the era of digitization and ever-changing business needs, the production environment has become a living organism. Multiple functions and teams within an organization can ultimately impact the way an attacker sees the organization’s assets, or in other words, the external attack surface. This dramatically increases the need to define an exposure management strategy.
To keep up with business

, ,
https://thehackernews.com/2022/12/when-being-attractive-gets-risky-how.html

SiriusXM Vulnerability Lets Hackers Remotely Unlock and Start Connected Cars

SiriusXM Vulnerability Lets Hackers Remotely Unlock and Start Connected Cars,

Cybersecurity researchers have discovered a security vulnerability that exposes cars from Honda, Nissan, Infiniti, and Acura to remote attacks through a connected vehicle service provided by SiriusXM.
The issue could be exploited to unlock, start, locate, and honk any car in an unauthorized manner just by knowing the vehicle’s vehicle identification number (VIN), researcher Sam Curry said in a 

,

Cybersecurity researchers have discovered a security vulnerability that exposes cars from Honda, Nissan, Infiniti, and Acura to remote attacks through a connected vehicle service provided by SiriusXM.
The issue could be exploited to unlock, start, locate, and honk any car in an unauthorized manner just by knowing the vehicle’s vehicle identification number (VIN), researcher Sam Curry said in a 

, ,
https://thehackernews.com/2022/12/siriusxm-vulnerability-lets-hackers.html

North Korean Hackers Spread AppleJeus Malware Disguised as Cryptocurrency Apps

North Korean Hackers Spread AppleJeus Malware Disguised as Cryptocurrency Apps,

The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus malware, according to new findings from Volexity.
« This activity notably involves a campaign likely targeting cryptocurrency users and organizations with a variant of the AppleJeus malware by way of malicious Microsoft Office documents, »

,

The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus malware, according to new findings from Volexity.
« This activity notably involves a campaign likely targeting cryptocurrency users and organizations with a variant of the AppleJeus malware by way of malicious Microsoft Office documents, »

, ,
https://thehackernews.com/2022/12/north-korean-hackers-spread-applejeus.html

Android : téléchargées 2 millions de fois sur le Play Store ces applications cachaient des malwares

Android : téléchargées 2 millions de fois sur le Play Store ces applications cachaient des malwares,

Android malware virus

Une dizaine d’applications disponibles au téléchargement sur le Google Play Store embarquaient en réalité des malwares. Elles ont été installées plus de 2 millions de fois.

,

Android malware virus

Une dizaine d’applications disponibles au téléchargement sur le Google Play Store embarquaient en réalité des malwares. Elles ont été installées plus de 2 millions de fois.

, ,
https://www.01net.com/actualites/android-telechargees-2-millions-de-fois-sur-le-play-store-ces-applications-cachaient-des-malwares.html