New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

, ,
https://thehackernews.com/2022/11/new-kmsdbot-malware-hijacking-systems.html

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

, ,
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

, ,
https://www.01net.com/actualites/dark-web-decouvrez-folle-histoire-50000-bitcoins-voles-silk-road-2012.html

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

, ,
https://thehackernews.com/2022/11/experts-uncover-two-long-running.html

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

, ,
https://thehackernews.com/2022/11/these-two-google-play-store-apps.html

VPN vs. DNS Security

VPN vs. DNS Security,

When you are trying to get another layer of cyber protection that would not require a lot of resources, you are most likely choosing between a VPN service & a DNS Security solution. Let’s discuss both. 
VPN Explained
VPN stands for Virtual Private Networks and basically hides your IP and provides an encrypted server by redirecting your traffic via a server run by a VPN host. It establishes a

,

When you are trying to get another layer of cyber protection that would not require a lot of resources, you are most likely choosing between a VPN service & a DNS Security solution. Let’s discuss both. 
VPN Explained
VPN stands for Virtual Private Networks and basically hides your IP and provides an encrypted server by redirecting your traffic via a server run by a VPN host. It establishes a

, ,
https://thehackernews.com/2022/11/vpn-vs-dns-security.html

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software,

Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution.
« By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully privileged remote code execution, » Palo Alto Networks Unit 42 said in a Thursday report.

,

Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution.
« By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully privileged remote code execution, » Palo Alto Networks Unit 42 said in a Thursday report.

, ,
https://thehackernews.com/2022/11/multiple-high-severity-flaw-affect.html

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks,

The U.S. Department of Justice (DoJ) has announced charges against a dual Russian and Canadian national for his alleged participation in LockBit ransomware attacks across the world.
The 33-year-old Ontario resident, Mikhail Vasiliev, has been taken into custody and is awaiting extradition to the U.S., where is likely to be sentenced for a maximum of five years in prison.
Vasiliev has been

,

The U.S. Department of Justice (DoJ) has announced charges against a dual Russian and Canadian national for his alleged participation in LockBit ransomware attacks across the world.
The 33-year-old Ontario resident, Mikhail Vasiliev, has been taken into custody and is awaiting extradition to the U.S., where is likely to be sentenced for a maximum of five years in prison.
Vasiliev has been

, ,
https://thehackernews.com/2022/11/russian-canadian-national-charged-over.html

ESET Antivirus: Advanced Protection Solutions for Home Users and Businesses

ESET Antivirus: Advanced Protection Solutions for Home Users and Businesses,

It’s no secret that antivirus software is as essential to your computer as a power cord.
However, the threats don’t stop at your devices. For example, criminals trying to steal your data can attack your Wi-Fi router, and phishing attempts can target your email. 
ESET’s latest consumer product release takes a comprehensive approach to security to guard against a full range of threats. All are

,

It’s no secret that antivirus software is as essential to your computer as a power cord.
However, the threats don’t stop at your devices. For example, criminals trying to steal your data can attack your Wi-Fi router, and phishing attempts can target your email. 
ESET’s latest consumer product release takes a comprehensive approach to security to guard against a full range of threats. All are

, ,
https://thehackernews.com/2022/11/eset-antivirus-advanced-protection.html

Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland

Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland,

Microsoft on Thursday attributed the recent spate of ransomware incidents targeting transportation and logistics sectors in Ukraine and Poland to a threat cluster that shares overlaps with the Russian state-sponsored Sandworm group.
The attacks, which were disclosed by the tech giant last month, involved a strain of previously undocumented malware called Prestige and is said to have taken place

,

Microsoft on Thursday attributed the recent spate of ransomware incidents targeting transportation and logistics sectors in Ukraine and Poland to a threat cluster that shares overlaps with the Russian state-sponsored Sandworm group.
The attacks, which were disclosed by the tech giant last month, involved a strain of previously undocumented malware called Prestige and is said to have taken place

, ,
https://thehackernews.com/2022/11/microsoft-blames-russian-hackers-for.html