CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware,

Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that’s designed to propagate a category of malware called CLR SqlShell that ultimately facilitates the deployment of cryptocurrency miners and ransomware.
« Similar to web shell, which can be installed on web servers, SqlShell is a malware strain that supports various features after being installed on an MS SQL server,

,

Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that’s designed to propagate a category of malware called CLR SqlShell that ultimately facilitates the deployment of cryptocurrency miners and ransomware.
« Similar to web shell, which can be installed on web servers, SqlShell is a malware strain that supports various features after being installed on an MS SQL server,

, ,
https://thehackernews.com/2023/05/clr-sqlshell-malware-targets-ms-sql.html

Former Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case

Former Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case,

A former employee of Ubiquiti has been sentenced to six years in jail after he pleaded guilty to posing as an anonymous hacker and a whistleblower in an attempt to extort almost $2 million worth of cryptocurrency while working at the company.
Nickolas Sharp, 37, was arrested in December 2021 for using his insider access as a senior developer to steal confidential data and sending an anonymous

,

A former employee of Ubiquiti has been sentenced to six years in jail after he pleaded guilty to posing as an anonymous hacker and a whistleblower in an attempt to extort almost $2 million worth of cryptocurrency while working at the company.
Nickolas Sharp, 37, was arrested in December 2021 for using his insider access as a senior developer to steal confidential data and sending an anonymous

, ,
https://thehackernews.com/2023/05/former-ubiquiti-employee-gets-6-years.html

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages,

A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks.
« Greatness, for now, is only focused on Microsoft 365 phishing pages, providing its affiliates with an attachment and link builder that creates

,

A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks.
« Greatness, for now, is only focused on Microsoft 365 phishing pages, providing its affiliates with an attachment and link builder that creates

, ,
https://thehackernews.com/2023/05/new-phishing-as-service-platform-lets.html

Guerre en Ukraine et fake news : comment la propagande russe opère…

Guerre en Ukraine et fake news : comment la propagande russe opère…,

fake news russie

La Russie a une arme secrète pour déstabiliser l’Ukraine : les fake news. Depuis les prémices du conflit, la propagande russe s’appuie sur des campagnes de désinformation pour tenter d’influer sur l’issue de la guerre…

,

fake news russie

La Russie a une arme secrète pour déstabiliser l’Ukraine : les fake news. Depuis les prémices du conflit, la propagande russe s’appuie sur des campagnes de désinformation pour tenter d’influer sur l’issue de la guerre…

, ,
https://www.01net.com/actualites/guerre-ukraine-fake-news-mode-operatoire-propagande-russe.html

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks,

Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems.
Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing firms and healthcare clinics located in Germany.
« The attack campaign has been leveraging rather

,

Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems.
Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing firms and healthcare clinics located in Germany.
« The attack campaign has been leveraging rather

, ,
https://thehackernews.com/2023/05/xworm-malware-exploits-follina.html

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance

,

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.
« Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect traffic to malicious websites or inject malware into network traffic, » Claroty security researcher Uri Katz said in a

,

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.
« Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect traffic to malicious websites or inject malware into network traffic, » Claroty security researcher Uri Katz said in a

, ,
https://thehackernews.com/2023/05/netgear-routers-flaws-expose-users-to.html

New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows

New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows,

A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week.
« BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this latest iteration, » security researchers Shaul Vilkomir-Preisman and Eliran Nissan said.
BPFDoor (

,

A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week.
« BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this latest iteration, » security researchers Shaul Vilkomir-Preisman and Eliran Nissan said.
BPFDoor (

, ,
https://thehackernews.com/2023/05/new-variant-of-linux-backdoor-bpfdoor.html

Solving Your Teams Secure Collaboration Challenges

Solving Your Teams Secure Collaboration Challenges,

In today’s interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect their data.
Since collaborating is essential for

,

In today’s interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect their data.
Since collaborating is essential for

, ,
https://thehackernews.com/2023/05/solving-your-teams-secure-collaboration.html

Ransomware : un nouveau gang de hackers fait des ravages

Ransomware : un nouveau gang de hackers fait des ravages,

hackers royal

De nouveaux hackers déploient des attaques par ransomware à l’encontre des entreprises. En l’espace de quelques mois, ils se sont imposés parmi les cybercriminels les plus actifs du milieu…

,

hackers royal

De nouveaux hackers déploient des attaques par ransomware à l’encontre des entreprises. En l’espace de quelques mois, ils se sont imposés parmi les cybercriminels les plus actifs du milieu…

, ,
https://www.01net.com/actualites/ransomware-nouveau-gang-hackers-ravages.html

Apple aurait réussi à piéger la taupe qui faisait fuiter ses innovations

Apple aurait réussi à piéger la taupe qui faisait fuiter ses innovations,

Le logo Apple et son effet miroir est la seule fioriture esthétique de ce design ultra-minimaliste.

Une source mystérieuse, un plan d’infiltration en plusieurs étapes, et une salariée licenciée : Apple aurait réussi à mettre fin à la fuite de données très confidentielles sur ses fonctionnalités en développement.

,

Le logo Apple et son effet miroir est la seule fioriture esthétique de ce design ultra-minimaliste.

Une source mystérieuse, un plan d’infiltration en plusieurs étapes, et une salariée licenciée : Apple aurait réussi à mettre fin à la fuite de données très confidentielles sur ses fonctionnalités en développement.

, ,
https://www.01net.com/actualites/apple-aurait-reussi-a-pieger-la-taupe-qui-faisait-fuiter-ses-innovations.html