Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts,

Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing sensitive information.
The agency cautioned that the emails arrive with the subject line « Увага » (meaning « Attention ») and claim to be from a

,

Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing sensitive information.
The agency cautioned that the emails arrive with the subject line « Увага » (meaning « Attention ») and claim to be from a

, ,
https://thehackernews.com/2022/03/ukrainian-cert-warns-citizens-of.html

Un cheval de Troie a été découvert sur le Play Store… dans une application antivirus

Un cheval de Troie a été découvert sur le Play Store… dans une application antivirus,

Le malware SharkBot de l’application Antivirus Super Cleaner peut voler vos identifiants bancaires et effectuer des transferts d’argent à votre place.

,

Le malware SharkBot de l’application Antivirus Super Cleaner peut voler vos identifiants bancaires et effectuer des transferts d’argent à votre place.

, ,
https://www.01net.com/actualites/un-cheval-de-troie-a-ete-decouvert-sur-le-play-store-dans-une-application-antivirus-2055374.html

Mozilla corrige deux failles zero-day dans Firefox, il est urgent de mettre à jour le navigateur

Mozilla corrige deux failles zero-day dans Firefox, il est urgent de mettre à jour le navigateur,

Ces failles critiques permettent d’exécuter du code arbitraire et sont d’ores et déjà utilisées de manière active par des pirates.

,

Ces failles critiques permettent d’exécuter du code arbitraire et sont d’ores et déjà utilisées de manière active par des pirates.

, ,
https://www.01net.com/actualites/mozilla-corrige-deux-failles-zero-day-dans-firefox-il-est-urgent-de-mettre-a-jour-le-navigateur-2055364.html

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store,

The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to a category of financial trojans capable of siphoning credentials to initiate money transfers from compromised devices by circumventing

,

The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to a category of financial trojans capable of siphoning credentials to initiate money transfers from compromised devices by circumventing

, ,
https://thehackernews.com/2022/03/sharkbot-banking-malware-spreading-via.html

Des hackers ont piraté des organismes de recherche spatiale russes

Des hackers ont piraté des organismes de recherche spatiale russes,

Des pirates ont défacé un site Web de l’Institut de recherche spatiale, et publié des documents de l’agence spatiale Roscosmos.

,

Des pirates ont défacé un site Web de l’Institut de recherche spatiale, et publié des documents de l’agence spatiale Roscosmos.

, ,
https://www.01net.com/actualites/des-hackers-ont-pirate-des-organismes-de-recherche-spatiale-russes-2055332.html

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!,

Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the

,

Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the

, ,
https://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html

New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container

New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container,

Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel feature called control groups, also referred to as cgroups version 1 (v1), which allows processes to be organized into hierarchical groups,

,

Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel feature called control groups, also referred to as cgroups version 1 (v1), which allows processes to be organized into hierarchical groups,

, ,
https://thehackernews.com/2022/03/new-linux-kernel-cgroups-vulnerability.html

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks,

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
« While ransom DDoS attacks are not new, they appear to be evolving and becoming more interesting with time and with each new phase, » Nelli Klepfish, security analyst at Imperva, said. « For

,

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
« While ransom DDoS attacks are not new, they appear to be evolving and becoming more interesting with time and with each new phase, » Nelli Klepfish, security analyst at Imperva, said. « For

, ,
https://thehackernews.com/2022/03/imperva-thwarts-25-million-rps-ransom.html

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478.
« These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise, » the agency said in an advisory

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478.
« These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise, » the agency said in an advisory

, ,
https://thehackernews.com/2022/03/cisa-adds-another-95-flaws-to-its.html

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism,

Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day.
A new analysis by Israeli cybersecurity company Check Point Research has found that « user volume grew a hundred folds daily on Telegram related groups, peaking at 200,000 per group. »
Prominent among the groups are anti-Russian cyber

,

Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day.
A new analysis by Israeli cybersecurity company Check Point Research has found that « user volume grew a hundred folds daily on Telegram related groups, peaking at 200,000 per group. »
Prominent among the groups are anti-Russian cyber

, ,
https://thehackernews.com/2022/03/both-sides-in-russia-ukraine-war.html