Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store

Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store,

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices.
Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker’s choice, such as stealing text messages, contact lists, and device information.

,

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices.
Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker’s choice, such as stealing text messages, contact lists, and device information.

, ,
https://thehackernews.com/2022/05/another-set-of-joker-trojan-laced.html

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware,

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems.
The mass email campaign carries the subject line « chemical attack » and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer.
The attack, which

,

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems.
The mass email campaign carries the subject line « chemical attack » and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer.
The attack, which

, ,
https://thehackernews.com/2022/05/ukrainian-cert-warns-citizens-of-new.html

Des chercheurs en sécurité révèlent des failles vieilles de plusieurs années dans Avast et AVG

Des chercheurs en sécurité révèlent des failles vieilles de plusieurs années dans Avast et AVG,

Deux failles critiques viennent d’être dévoilées par les chercheurs en sécurité de SentinelOne. Elles ont été présentes dans les antivirus Avast et AVG entre 2016 et 2022.

,

Deux failles critiques viennent d’être dévoilées par les chercheurs en sécurité de SentinelOne. Elles ont été présentes dans les antivirus Avast et AVG entre 2016 et 2022.

, ,
https://www.01net.com/actualites/des-chercheurs-en-securite-revelent-des-failles-vieilles-de-plusieurs-annees-dans-avast-et-avg-2056146.html

U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers

U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers,

The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang.
Additionally, it’s offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.

,

The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang.
Additionally, it’s offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.

, ,
https://thehackernews.com/2022/05/us-offering-10-million-reward-for.html

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability,

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.
Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing

,

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.
Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing

, ,
https://thehackernews.com/2022/05/researchers-develop-rce-exploit-for.html

U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions,

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades.
The move signals continued efforts on the part of the government to prevent North Korea’s Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March.
The newly imposed sanctions,

,

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades.
The move signals continued efforts on the part of the government to prevent North Korea’s Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March.
The newly imposed sanctions,

, ,
https://thehackernews.com/2022/05/us-sanctions-cryptocurrency-mixer.html

This New Fileless Malware Hides Shellcode in Windows Event Logs

This New Fileless Malware Hides Shellcode in Windows Event Logs,

A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.
« It allows the ‘fileless’ last stage trojan to be hidden from plain sight in the file system, » Kaspersky researcher Denis Legezo said in a technical write-up published this week.
The stealthy infection process, not attributed to a known actor, is believed

,

A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.
« It allows the ‘fileless’ last stage trojan to be hidden from plain sight in the file system, » Kaspersky researcher Denis Legezo said in a technical write-up published this week.
The stealthy infection process, not attributed to a known actor, is believed

, ,
https://thehackernews.com/2022/05/this-new-fileless-malware-hides.html

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices,

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system.
« A vulnerability has been reported to affect QNAP VS Series NVR running QVR, » QNAP said in an advisory. « If exploited, this vulnerability allows remote attackers to run arbitrary

,

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system.
« A vulnerability has been reported to affect QNAP VS Series NVR running QVR, » QNAP said in an advisory. « If exploited, this vulnerability allows remote attackers to run arbitrary

, ,
https://thehackernews.com/2022/05/qnap-releases-firmware-patches-for-9.html

Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

,

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices.
Attributing the malware to a cluster named « Raspberry Robin, » Red Canary researchers noted that the worm « leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL. »
The earliest signs of the activity are said to

,

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices.
Attributing the malware to a cluster named « Raspberry Robin, » Red Canary researchers noted that the worm « leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL. »
The earliest signs of the activity are said to

, ,
https://thehackernews.com/2022/05/researchers-warn-of-raspberry-robin.html

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware,

A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a « fairly sophisticated » framework called NetDooka, granting attackers complete control over the infected devices.
« The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (

,

A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a « fairly sophisticated » framework called NetDooka, granting attackers complete control over the infected devices.
« The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (

, ,
https://thehackernews.com/2022/05/hackers-using-privateloader-ppi-service.html