U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions,

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades.
The move signals continued efforts on the part of the government to prevent North Korea’s Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March.
The newly imposed sanctions,

,

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades.
The move signals continued efforts on the part of the government to prevent North Korea’s Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March.
The newly imposed sanctions,

, ,
https://thehackernews.com/2022/05/us-sanctions-cryptocurrency-mixer.html

This New Fileless Malware Hides Shellcode in Windows Event Logs

This New Fileless Malware Hides Shellcode in Windows Event Logs,

A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.
« It allows the ‘fileless’ last stage trojan to be hidden from plain sight in the file system, » Kaspersky researcher Denis Legezo said in a technical write-up published this week.
The stealthy infection process, not attributed to a known actor, is believed

,

A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.
« It allows the ‘fileless’ last stage trojan to be hidden from plain sight in the file system, » Kaspersky researcher Denis Legezo said in a technical write-up published this week.
The stealthy infection process, not attributed to a known actor, is believed

, ,
https://thehackernews.com/2022/05/this-new-fileless-malware-hides.html

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices,

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system.
« A vulnerability has been reported to affect QNAP VS Series NVR running QVR, » QNAP said in an advisory. « If exploited, this vulnerability allows remote attackers to run arbitrary

,

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system.
« A vulnerability has been reported to affect QNAP VS Series NVR running QVR, » QNAP said in an advisory. « If exploited, this vulnerability allows remote attackers to run arbitrary

, ,
https://thehackernews.com/2022/05/qnap-releases-firmware-patches-for-9.html

Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

,

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices.
Attributing the malware to a cluster named « Raspberry Robin, » Red Canary researchers noted that the worm « leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL. »
The earliest signs of the activity are said to

,

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices.
Attributing the malware to a cluster named « Raspberry Robin, » Red Canary researchers noted that the worm « leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL. »
The earliest signs of the activity are said to

, ,
https://thehackernews.com/2022/05/researchers-warn-of-raspberry-robin.html

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware,

A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a « fairly sophisticated » framework called NetDooka, granting attackers complete control over the infected devices.
« The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (

,

A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a « fairly sophisticated » framework called NetDooka, granting attackers complete control over the infected devices.
« The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (

, ,
https://thehackernews.com/2022/05/hackers-using-privateloader-ppi-service.html

Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers

Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers

,

The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the European Union, Russia, and the U.S.
« Mustang Panda is a highly motivated APT group relying primarily on the use of topical lures and social engineering to trick victims into infecting themselves, » Cisco Talos said in a new report detailing

,

The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the European Union, Russia, and the U.S.
« Mustang Panda is a highly motivated APT group relying primarily on the use of topical lures and social engineering to trick victims into infecting themselves, » Cisco Talos said in a new report detailing

, ,
https://thehackernews.com/2022/05/experts-uncover-new-espionage-attacks.html

Google Releases Android Update to Patch Actively Exploited Vulnerability

Google Releases Android Update to Patch Actively Exploited Vulnerability,

Google has released monthly security patches for Android with fixes for 37 flaws across different components, one of which is a fix for an actively exploited Linux kernel vulnerability that came to light earlier this year.
Tracked as CVE-2021-22600 (CVSS score: 7.8), the vulnerability is ranked « High » for severity and could be exploited by a local user to escalate privileges or deny service.
The

,

Google has released monthly security patches for Android with fixes for 37 flaws across different components, one of which is a fix for an actively exploited Linux kernel vulnerability that came to light earlier this year.
Tracked as CVE-2021-22600 (CVSS score: 7.8), the vulnerability is ranked « High » for severity and could be exploited by a local user to escalate privileges or deny service.
The

, ,
https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html

Apple, Google et Microsoft s’unissent pour précipiter la fin des mots de passe

Apple, Google et Microsoft s’unissent pour précipiter la fin des mots de passe

,

Les trois acteurs veulent faciliter l’adoption d’une méthode universelle de connexion sans mot de passe basée sur la norme Fido.

,

Les trois acteurs veulent faciliter l’adoption d’une méthode universelle de connexion sans mot de passe basée sur la norme Fido.

, ,
https://www.01net.com/actualites/apple-google-et-microsoft-s-unissent-pour-precipiter-la-fin-des-mots-de-passe-2056145.html

NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks

NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks,

The National Institute of Standards and Technology (NIST) on Thursday released an updated cybersecurity guidance for managing risks in the supply chain, as it increasingly emerges as a lucrative attack vector.
« It encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere

,

The National Institute of Standards and Technology (NIST) on Thursday released an updated cybersecurity guidance for managing risks in the supply chain, as it increasingly emerges as a lucrative attack vector.
« It encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere

, ,
https://thehackernews.com/2022/05/nist-releases-updated-guidance-for.html

Google to Add Passwordless Authentication Support to Android and Chrome

Google to Add Passwordless Authentication Support to Android and Chrome,

Google today announced plans to implement support for passwordless logins in Android and the Chrome web browser to allow users to seamlessly and securely sign in across different devices and websites irrespective of the platform.
« This will simplify sign-ins across devices, websites, and applications no matter the platform — without the need for a single password, » Google said.
<!–adsense–>

,

Google today announced plans to implement support for passwordless logins in Android and the Chrome web browser to allow users to seamlessly and securely sign in across different devices and websites irrespective of the platform.
« This will simplify sign-ins across devices, websites, and applications no matter the platform — without the need for a single password, » Google said.
<!–adsense–>

, ,
https://thehackernews.com/2022/05/google-to-add-passwordless.html