TrickBot Malware Gang Upgrades its AnchorDNS Backdoor to AnchorMail

TrickBot Malware Gang Upgrades its AnchorDNS Backdoor to AnchorMail,

Even as the TrickBot infrastructure closed shop, the operators of the malware are continuing to refine and retool their arsenal to carry out attacks that culminated in the deployment of Conti ransomware.
IBM Security X-Force, which discovered the revamped version of the criminal gang’s AnchorDNS backdoor, dubbed the new, upgraded variant AnchorMail.
AnchorMail « uses an email-based [

,

Even as the TrickBot infrastructure closed shop, the operators of the malware are continuing to refine and retool their arsenal to carry out attacks that culminated in the deployment of Conti ransomware.
IBM Security X-Force, which discovered the revamped version of the criminal gang’s AnchorDNS backdoor, dubbed the new, upgraded variant AnchorMail.
AnchorMail « uses an email-based [

, ,
https://thehackernews.com/2022/03/trickbot-malware-gang-upgrades-its.html

L’Ukraine recrute une cyberarmée sur Telegram pour riposter aux attaques russes

L’Ukraine recrute une cyberarmée sur Telegram pour riposter aux attaques russes,

Le ministre en charge de la transformation digitale en Ukraine a lancé un appel sur Telegram pour demander l’aide de cyberspécialistes pour mener une riposte numérique contre la Russie.

,

Le ministre en charge de la transformation digitale en Ukraine a lancé un appel sur Telegram pour demander l’aide de cyberspécialistes pour mener une riposte numérique contre la Russie.

, ,
https://www.01net.com/actualites/l-ukraine-recrute-une-cyberarmee-sur-telegram-pour-riposter-aux-attaques-russes-2055160.html

Microsoft Finds FoxBlade Malware Hit Ukraine Hours Before Russian Invasion

Microsoft Finds FoxBlade Malware Hit Ukraine Hours Before Russian Invasion,

Microsoft on Monday disclosed that it detected a new round of offensive and destructive cyberattacks directed against Ukraine’s digital infrastructure hours before Russia launched its first missile strikes last week.
The intrusions involved the use of a never-before-seen malware package dubbed FoxBlade, according to the tech giant’s Threat Intelligence Center (MSTIC), noting that it added new

,

Microsoft on Monday disclosed that it detected a new round of offensive and destructive cyberattacks directed against Ukraine’s digital infrastructure hours before Russia launched its first missile strikes last week.
The intrusions involved the use of a never-before-seen malware package dubbed FoxBlade, according to the tech giant’s Threat Intelligence Center (MSTIC), noting that it added new

, ,
https://thehackernews.com/2022/03/microsoft-finds-foxblade-malware-hit.html

China-linked Daxin Malware Targeted Multiple Governments in Espionage Attacks

China-linked Daxin Malware Targeted Multiple Governments in Espionage Attacks,

A previously undocumented espionage tool has been deployed against selected governments and other critical infrastructure targets as part of a long-running espionage campaign orchestrated by China-linked threat actors since at least 2013.
Broadcom’s Symantec Threat Hunter team characterized the backdoor, named Daxin, as a technologically advanced malware, allowing the attackers to carry out a

,

A previously undocumented espionage tool has been deployed against selected governments and other critical infrastructure targets as part of a long-running espionage campaign orchestrated by China-linked threat actors since at least 2013.
Broadcom’s Symantec Threat Hunter team characterized the backdoor, named Daxin, as a technologically advanced malware, allowing the attackers to carry out a

, ,
https://thehackernews.com/2022/03/china-linked-daxin-malware-targeted.html

Arnaques, hacks et problèmes techniques : 5 bonnes raisons d’éviter d’acheter des NFT

Arnaques, hacks et problèmes techniques : 5 bonnes raisons d’éviter d’acheter des NFT

,

Les spéculations vont bon train sur les places de marché NFT. Pourtant, les risques de se faire avoir sont nombreux, et même de plus en plus. Voici quelques vérités qui font mal.

,

Les spéculations vont bon train sur les places de marché NFT. Pourtant, les risques de se faire avoir sont nombreux, et même de plus en plus. Voici quelques vérités qui font mal.

, ,
https://www.01net.com/actualites/arnaques-hacks-et-problemes-techniques-5-bonnes-raisons-d-eviter-d-acheter-des-nft-2054847.html

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild.
Tracked as CVE-2022-24682 (CVSS score: 6.1), the issue concerns a cross-site scripting (XSS) vulnerability in the Calendar feature in Zimbra

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild.
Tracked as CVE-2022-24682 (CVSS score: 6.1), the issue concerns a cross-site scripting (XSS) vulnerability in the Calendar feature in Zimbra

, ,
https://thehackernews.com/2022/02/cisa-adds-recently-disclosed-zimbra-bug.html

100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature

100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature,

A group of academics from Tel Aviv University have disclosed details of now-patched « severe » design flaws affecting about 100 million Android-based Samsung smartphones that could have resulted in the extraction of secret cryptographic keys.
The shortcomings are the result of an analysis of the cryptographic design and implementation of Android’s hardware-backed Keystore in Samsung’s Galaxy S8,

,

A group of academics from Tel Aviv University have disclosed details of now-patched « severe » design flaws affecting about 100 million Android-based Samsung smartphones that could have resulted in the extraction of secret cryptographic keys.
The shortcomings are the result of an analysis of the cryptographic design and implementation of Android’s hardware-backed Keystore in Samsung’s Galaxy S8,

, ,
https://thehackernews.com/2022/02/100-million-samsung-galaxy-phones.html

<div>CISA Warns of High-Severity Flaws in Schneider and GE Digital’s SCADA Software</div>

CISA Warns of High-Severity Flaws in Schneider and GE Digital’s SCADA Software

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric’s Easergy medium voltage protection relays.
« Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric’s Easergy medium voltage protection relays.
« Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to

, ,
https://thehackernews.com/2022/02/cisa-warns-of-high-severity-flaws-in.html

Reborn of Emotet: New Features of the Botnet and How to Detect it

Reborn of Emotet: New Features of the Botnet and How to Detect it,

One of the most dangerous and infamous threats is back again. In January 2021, global officials took down the botnet. Law enforcement sent a destructive update to the Emotet’s executables. And it looked like the end of the trojan’s story. 
But the malware never ceased to surprise. 
November 2021, it was reported that TrickBot no longer works alone and delivers Emotet. And ANY.RUN with colleagues

,

One of the most dangerous and infamous threats is back again. In January 2021, global officials took down the botnet. Law enforcement sent a destructive update to the Emotet’s executables. And it looked like the end of the trojan’s story. 
But the malware never ceased to surprise. 
November 2021, it was reported that TrickBot no longer works alone and delivers Emotet. And ANY.RUN with colleagues

, ,
https://thehackernews.com/2022/02/reborn-of-emotet-new-features-of-botnet.html

Experts Create Apple AirTag Clone That Can Bypass Anti-Tracking Measures

Experts Create Apple AirTag Clone That Can Bypass Anti-Tracking Measures,

Cybersecurity researchers have managed to build a clone of Apple Airtag that circumvents the anti-stalking protection technology built into its Find My Bluetooth-based tracking protocol.
The result is a stealth AirTag that can successfully track an iPhone user for over five days without triggering a tracking notification, Positive Security’s co-founder Fabian Bräunlein said in a deep-dive

,

Cybersecurity researchers have managed to build a clone of Apple Airtag that circumvents the anti-stalking protection technology built into its Find My Bluetooth-based tracking protocol.
The result is a stealth AirTag that can successfully track an iPhone user for over five days without triggering a tracking notification, Positive Security’s co-founder Fabian Bräunlein said in a deep-dive

, ,
https://thehackernews.com/2022/02/experts-create-apple-airtag-clone-that.html