DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities,

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers.
The improvements also include a new infection chain that incorporates previously undocumented components to the modular framework, Morphisec researchers Hido Cohen and Arnold

,

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers.
The improvements also include a new infection chain that incorporates previously undocumented components to the modular framework, Morphisec researchers Hido Cohen and Arnold

, ,
https://thehackernews.com/2022/08/donot-team-hackers-updated-its-malware.html

Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations

Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations,

A financially motivated cybercrime group has been linked to an ongoing wave of attacks aimed at hospitality, hotel, and travel organizations in Latin America with the goal of installing malware on compromised systems.
Enterprise security firm Proofpoint, which is tracking the group under the name TA558 dating all the way back to April 2018, called it a « small crime threat actor. »
« Since 2018,

,

A financially motivated cybercrime group has been linked to an ongoing wave of attacks aimed at hospitality, hotel, and travel organizations in Latin America with the goal of installing malware on compromised systems.
Enterprise security firm Proofpoint, which is tracking the group under the name TA558 dating all the way back to April 2018, called it a « small crime threat actor. »
« Since 2018,

, ,
https://thehackernews.com/2022/08/cybercrime-group-ta558-targeting.html

Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second

Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second,

Google’s cloud division on Thursday disclosed it mitigated a series of HTTPS distributed denial-of-service (DDoS) attacks which peaked at 46 million requests per second (RPS), making it the largest such recorded to date.
The attack, which occurred on June 1, targeting an unnamed Google Cloud Armor customer, is 76% larger than the 26 million RPS DDoS attack repealed by Cloudflare earlier this

,

Google’s cloud division on Thursday disclosed it mitigated a series of HTTPS distributed denial-of-service (DDoS) attacks which peaked at 46 million requests per second (RPS), making it the largest such recorded to date.
The attack, which occurred on June 1, targeting an unnamed Google Cloud Armor customer, is 76% larger than the 26 million RPS DDoS attack repealed by Cloudflare earlier this

, ,
https://thehackernews.com/2022/08/google-cloud-blocks-record-ddos-attack.html

New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings

New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings,

Retail giant Amazon patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on a user’s device to access sensitive information and camera recordings.
The Ring app for Android has over 10 million downloads and enables users to monitor video feeds from smart home devices such as video doorbells, security cameras, and alarm

,

Retail giant Amazon patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on a user’s device to access sensitive information and camera recordings.
The Ring app for Android has over 10 million downloads and enables users to monitor video feeds from smart home devices such as video doorbells, security cameras, and alarm

, ,
https://thehackernews.com/2022/08/new-amazon-ring-vulnerability-could.html

Google a bloqué la plus grande attaque DDoS de tous les temps

Google a bloqué la plus grande attaque DDoS de tous les temps,

,

L’un des clients du géant informatique a été confronté à une avalanche de 46 millions de requêtes HTTPS par seconde. Du jamais vu dans l’histoire du web.

L’article Google a bloqué la plus grande attaque DDoS de tous les temps est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/google-a-bloque-la-plus-grande-attaque-ddos-de-tous-les-temps.html

Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware

Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware,

A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads like Cobalt Strike and Metasploit, likely since 2015.
« It can also deliver ‘add-on packages’ such as additional malicious payloads, benign decoy documents, and executables, » cybersecurity firm Secureworks said in a Wednesday report. « It

,

A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads like Cobalt Strike and Metasploit, likely since 2015.
« It can also deliver ‘add-on packages’ such as additional malicious payloads, benign decoy documents, and executables, » cybersecurity firm Secureworks said in a Wednesday report. « It

, ,
https://thehackernews.com/2022/08/researchers-detail-evasive-darktortilla.html

China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year

China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year,

The Chinese advanced persistent threat (APT) actor tracked as Winnti (aka APT41) has targeted at least 13 organizations geographically spanning across the U.S, Taiwan, India, Vietnam, and China against the backdrop of four different campaigns in 2021.
« The targeted industries included the public sector, manufacturing, healthcare, logistics, hospitality, education, as well as the media and

,

The Chinese advanced persistent threat (APT) actor tracked as Winnti (aka APT41) has targeted at least 13 organizations geographically spanning across the U.S, Taiwan, India, Vietnam, and China against the backdrop of four different campaigns in 2021.
« The targeted industries included the public sector, manufacturing, healthcare, logistics, hospitality, education, as well as the media and

, ,
https://thehackernews.com/2022/08/china-backed-apt41-hackers-targeted-13.html

Une chanson de Janet Jackson reconnue officiellement comme un malware

Une chanson de Janet Jackson reconnue officiellement comme un malware,

,

Janet Jackson Rythm Nation

Certaines fréquences du titre « Rythm Nation » ont le pouvoir de faire entrer en résonance certains disques durs d’ordinateur et donc de le faire planter.

L’article Une chanson de Janet Jackson reconnue officiellement comme un malware est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/une-chanson-de-janet-jackson-reconnue-officiellement-comme-un-malware.html

Ces 35 applications Android du Play Store cachent un malware, désinstallez-les d’urgence

Ces 35 applications Android du Play Store cachent un malware, désinstallez-les d’urgence,

,

play store

Une trentaine d’applications Android du Play Store cachent un malware. Elles sont programmées pour inonder l’utilisateur de publicités. Les applications sont aussi capables de se cacher de la vue de leurs victimes. Découvrez la liste des apps à désinstaller sans tarder.

L’article Ces 35 applications Android du Play Store cachent un malware, désinstallez-les d’urgence est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/35-applications-android-play-store-cachent-malware-desintallez-urgence.html

Les VPN sous iOS ne fonctionnent pas, et Apple ne fait rien

Les VPN sous iOS ne fonctionnent pas, et Apple ne fait rien,

,

Depuis des années, un mystérieux bug dans iOS laisse échapper du trafic quand on active un VPN. Contactée à plusieurs reprises par différents experts, la firme de Cupertino ne semble pas s’en inquiéter.

L’article Les VPN sous iOS ne fonctionnent pas, et Apple ne fait rien est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/les-vpn-sous-ios-ne-fonctionnent-pas-et-apple-ne-fait-rien.html