Symbiote: A Stealthy Linux Malware Targeting Latin American Financial Sector

Symbiote: A Stealthy Linux Malware Targeting Latin American Financial Sector,

Cybersecurity researchers have taken the wraps off what they call a « nearly-impossible-to-detect » Linux malware that could be weaponized to backdoor infected systems.
Dubbed Symbiote by threat intelligence firms BlackBerry and Intezer, the stealthy malware is so named for its ability to conceal itself within running processes and network traffic and drain a victim’s resources like a parasite.

,

Cybersecurity researchers have taken the wraps off what they call a « nearly-impossible-to-detect » Linux malware that could be weaponized to backdoor infected systems.
Dubbed Symbiote by threat intelligence firms BlackBerry and Intezer, the stealthy malware is so named for its ability to conceal itself within running processes and network traffic and drain a victim’s resources like a parasite.

, ,
https://thehackernews.com/2022/06/symbiote-stealthy-linux-malware.html

Even the Most Advanced Threats Rely on Unpatched Systems

Even the Most Advanced Threats Rely on Unpatched Systems,

Common cybercriminals are a menace, there’s no doubt about it – from bedroom hackers through to ransomware groups, cybercriminals are causing a lot of damage. But both the tools used and the threat posed by common cybercriminals pale in comparison to the tools used by more professional groups such as the famous hacking groups and state-sponsored groups.
In fact, these tools can prove almost

,

Common cybercriminals are a menace, there’s no doubt about it – from bedroom hackers through to ransomware groups, cybercriminals are causing a lot of damage. But both the tools used and the threat posed by common cybercriminals pale in comparison to the tools used by more professional groups such as the famous hacking groups and state-sponsored groups.
In fact, these tools can prove almost

, ,
https://thehackernews.com/2022/06/even-most-advanced-threats-rely-on.html

Comment les hackers chinois asservissent les réseaux des opérateurs télécoms

Comment les hackers chinois asservissent les réseaux des opérateurs télécoms,

,

Hacking pirate code

Les pirates de l’Empire du Milieu exploitent des failles non patchées sur les routeurs pour se frayer un chemin dans les réseaux et mettre ces infrastructures à leur merci. C’est méthodique… et effrayant.

The post Comment les hackers chinois asservissent les réseaux des opérateurs télécoms appeared first on 01net.com.

, ,
https://www.01net.com/actualites/comment-les-hackers-chinois-asservissent-les-reseaux-des-operateurs-telecoms.html

La menace cyber en France est de plus en plus importante, et s’installe dans le temps

La menace cyber en France est de plus en plus importante, et s’installe dans le temps,

,

Guillaume Poupard FIC 2022

La cybercriminalité et l’espionnage étatique continuent d’affecter lourdement l’économie française, même si des progrès ont été faits au niveau de la défense des systèmes d’information.

The post La menace cyber en France est de plus en plus importante, et s’installe dans le temps appeared first on 01net.com.

, ,
https://www.01net.com/actualites/en-france-la-menace-cyber-est-importante-et-sinstalle-dans-le-temps.html

A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia

A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia,

A previously undocumented Chinese-speaking advanced persistent threat (APT) actor dubbed Aoqin Dragon has been linked to a string of espionage-oriented attacks aimed at government, education, and telecom entities chiefly in Southeast Asia and Australia dating as far back as 2013.
« Aoqin Dragon seeks initial access primarily through document exploits and the use of fake removable devices, »

,

A previously undocumented Chinese-speaking advanced persistent threat (APT) actor dubbed Aoqin Dragon has been linked to a string of espionage-oriented attacks aimed at government, education, and telecom entities chiefly in Southeast Asia and Australia dating as far back as 2013.
« Aoqin Dragon seeks initial access primarily through document exploits and the use of fake removable devices, »

, ,
https://thehackernews.com/2022/06/a-decade-long-chinese-espionage.html

New Emotet Variant Stealing Users’ Credit Card Information from Google Chrome

New Emotet Variant Stealing Users’ Credit Card Information from Google Chrome

,

Image Source: Toptal
The notorious Emotet malware has turned to deploy a new module designed to siphon credit card information stored in the Chrome web browser.
The credit card stealer, which exclusively singles out Chrome, has the ability to exfiltrate the collected information to different remote command-and-control (C2) servers, according to enterprise security company Proofpoint, which

,

Image Source: Toptal
The notorious Emotet malware has turned to deploy a new module designed to siphon credit card information stored in the Chrome web browser.
The credit card stealer, which exclusively singles out Chrome, has the ability to exfiltrate the collected information to different remote command-and-control (C2) servers, according to enterprise security company Proofpoint, which

, ,
https://thehackernews.com/2022/06/new-emotet-variant-stealing-users.html

Researchers Warn of Unpatched « DogWalk » Microsoft Windows Vulnerability

Researchers Warn of Unpatched « DogWalk » Microsoft Windows Vulnerability

,

An unofficial security patch has been made available for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT), even as the Follina flaw continues to be exploited in the wild.
The issue — referenced as DogWalk — relates to a path traversal flaw that can be exploited to stash a malicious executable file to the Windows Startup folder when a potential target opens a

,

An unofficial security patch has been made available for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT), even as the Follina flaw continues to be exploited in the wild.
The issue — referenced as DogWalk — relates to a path traversal flaw that can be exploited to stash a malicious executable file to the Windows Startup folder when a potential target opens a

, ,
https://thehackernews.com/2022/06/researchers-warn-of-unpatched-dogwalk.html

Google corrige 41 failles de sécurité dans Android, dont 5 jugées critiques : mettez-vite votre smartphone à jour !

Google corrige 41 failles de sécurité dans Android, dont 5 jugées critiques : mettez-vite votre smartphone à jour !,

,

Les vulnérabilités découvertes par Google peuvent conduire à l’exécution d’un code à distance ou à une élévation des privilèges, sans que les pirates aient besoin de disposer initialement de privilèges importants.

The post Google corrige 41 failles de sécurité dans Android, dont 5 jugées critiques : mettez-vite votre smartphone à jour ! appeared first on 01net.com.

, ,
https://www.01net.com/actualites/google-corrige-41-failles-de-securite-dans-android-dont-5-jugees-critiques-mettez-vite-votre-smartphone-a-jour.html

La ville de Palerme à l’arrêt après une cyberattaque d’une ampleur inédite

La ville de Palerme à l’arrêt après une cyberattaque d’une ampleur inédite,

,

La ville sicilienne a été contrainte de déconnecter ses systèmes, provoquant un chaos administratif. L’origine de l’attaque n’est pas connue pour l’instant.

The post La ville de Palerme à l’arrêt après une cyberattaque d’une ampleur inédite appeared first on 01net.com.

, ,
https://www.01net.com/actualites/la-ville-de-palerme-a-larret-apres-une-cyberattaque-dune-ampleur-inedite.html

U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers

U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers,

U.S. cybersecurity and intelligence agencies have warned about China-based state-sponsored cyber actors leveraging network vulnerabilities to exploit public and private sector organizations since at least 2020.
The widespread intrusion campaigns aim to exploit publicly identified security flaws in network devices such as Small Office/Home Office (SOHO) routers and Network Attached Storage (NAS)

,

U.S. cybersecurity and intelligence agencies have warned about China-based state-sponsored cyber actors leveraging network vulnerabilities to exploit public and private sector organizations since at least 2020.
The widespread intrusion campaigns aim to exploit publicly identified security flaws in network devices such as Small Office/Home Office (SOHO) routers and Network Attached Storage (NAS)

, ,
https://thehackernews.com/2022/06/us-agencies-warn-about-chinese-hackers.html