Researchers Demonstrate Ransomware for IoT Devices That Targets IT and OT Networks

Researchers Demonstrate Ransomware for IoT Devices That Targets IT and OT Networks,

As ransomware infections have evolved from purely encrypting data to schemes such as double and triple extortion, a new attack vector is likely to set the stage for future campaigns.
Called Ransomware for IoT or R4IoT by Forescout, it’s a « novel, proof-of-concept ransomware that exploits an IoT device to gain access and move laterally in an IT [information technology] network and impact the OT [

,

As ransomware infections have evolved from purely encrypting data to schemes such as double and triple extortion, a new attack vector is likely to set the stage for future campaigns.
Called Ransomware for IoT or R4IoT by Forescout, it’s a « novel, proof-of-concept ransomware that exploits an IoT device to gain access and move laterally in an IT [information technology] network and impact the OT [

, ,
https://thehackernews.com/2022/06/researchers-demonstrate-ransomware-for.html

ExpressVPN Removes Servers in India After Refusing to Comply with Government Order

ExpressVPN Removes Servers in India After Refusing to Comply with Government Order,

Virtual Private Network (VPN) provider ExpressVPN on Thursday announced that it’s removing Indian-based VPN servers in response to a new cybersecurity directive issued by the Indian Computer Emergency Response Team (CERT-In).
« Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located

,

Virtual Private Network (VPN) provider ExpressVPN on Thursday announced that it’s removing Indian-based VPN servers in response to a new cybersecurity directive issued by the Indian Computer Emergency Response Team (CERT-In).
« Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located

, ,
https://thehackernews.com/2022/06/expressvpn-removes-servers-in-india.html

Les Etats-Unis reconnaissent mener des cyberattaques contre la Russie en soutien à l’Ukraine

Les Etats-Unis reconnaissent mener des cyberattaques contre la Russie en soutien à l’Ukraine,

,

Cybersécurité NSA

Le directeur de la NSA a confirmé – grande première – que les Etats-Unis mènent des cyberattaques contre la Russie dans le cadre de leur soutien à l’Ukraine. Un effort qui illustre la stratégie de hunt forward mise en place depuis 2018.

The post Les Etats-Unis reconnaissent mener des cyberattaques contre la Russie en soutien à l’Ukraine appeared first on 01net.com.

, ,
https://www.01net.com/actualites/les-etats-unis-reconnaissent-mener-des-cyberattaques-contre-la-russie-en-soutien-a-lukraine.html

Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones

Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones,

A critical security flaw has been uncovered in UNISOC’s smartphone chipset that could be potentially weaponized to disrupt a smartphone’s radio communications through a malformed packet.
« Left unpatched, a hacker or a military unit can leverage such a vulnerability to neutralize communications in a specific location, » Israeli cybersecurity company Check Point said in a report shared with The

,

A critical security flaw has been uncovered in UNISOC’s smartphone chipset that could be potentially weaponized to disrupt a smartphone’s radio communications through a malformed packet.
« Left unpatched, a hacker or a military unit can leverage such a vulnerability to neutralize communications in a specific location, » Israeli cybersecurity company Check Point said in a report shared with The

, ,
https://thehackernews.com/2022/06/critical-unisoc-chip-vulnerability.html

SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities

SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities,

The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
« Phishing links in emails or posts that mimic legitimate notifications and services of government agencies and organizations in Pakistan are primary attack vectors of the gang, » Singapore-headquartered cybersecurity

,

The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
« Phishing links in emails or posts that mimic legitimate notifications and services of government agencies and organizations in Pakistan are primary attack vectors of the gang, » Singapore-headquartered cybersecurity

, ,
https://thehackernews.com/2022/06/sidewinder-hackers-use-fake-android-vpn.html

DOJ Seizes 3 Web Domains Used to Sell Stolen Data and DDoS Services

DOJ Seizes 3 Web Domains Used to Sell Stolen Data and DDoS Services,

The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of three domains used by cybercriminals to trade stolen personal information and facilitate distributed denial-of-service (DDoS) attacks for hire.
This includes weleakinfo[.]to, ipstress[.]in, and ovh-booter[.]com, the former of which allowed its users to traffic hacked personal data and offered a searchable database

,

The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of three domains used by cybercriminals to trade stolen personal information and facilitate distributed denial-of-service (DDoS) attacks for hire.
This includes weleakinfo[.]to, ipstress[.]in, and ovh-booter[.]com, the former of which allowed its users to traffic hacked personal data and offered a searchable database

, ,
https://thehackernews.com/2022/06/doj-seizes-3-web-domains-used-to-sell.html

Tout comprendre au Multi-device FIDO, cette norme conçue pour enfin tuer les mots de passe

Tout comprendre au Multi-device FIDO, cette norme conçue pour enfin tuer les mots de passe,

,

L’alliance FIDO repart à l’attaque avec une nouvelle architecture d’authentification nettement plus adaptée au grand public. Pour autant, l’adoption ne sera pas gagnée d’avance.

The post Tout comprendre au Multi-device FIDO, cette norme conçue pour enfin tuer les mots de passe appeared first on 01net.com.

, ,
https://www.01net.com/actualites/tout-comprendre-au-multi-device-fido-cette-norme-concue-pour-enfin-tuer-les-mots-de-passe-2056373.html

New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email

New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email,

A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
« Once the email is viewed, the attacker can silently take over the complete mail server without any further user interaction, » SonarSource said in a report shared

,

A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
« Once the email is viewed, the attacker can silently take over the complete mail server without any further user interaction, » SonarSource said in a report shared

, ,
https://thehackernews.com/2022/06/new-unpatched-horde-webmail-bug-lets.html

FluBot Android Spyware Taken Down in Global Law Enforcement Operation

FluBot Android Spyware Taken Down in Global Law Enforcement Operation,

An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot.
« This Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from infected smartphones across the world, » Europol said in a statement.
<!–adsense–>
The « complex

,

An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot.
« This Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from infected smartphones across the world, » Europol said in a statement.
<!–adsense–>
The « complex

, ,
https://thehackernews.com/2022/06/flubot-android-spyware-taken-down-by.html

YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites

YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites,

As many as 47,337 malicious plugins have been uncovered on 24,931 unique websites, out of which 3,685 plugins were sold on legitimate marketplaces, netting the attackers $41,500 in illegal revenues.
The findings come from a new tool called YODA that aims to detect rogue WordPress plugins and track down their origin, according to an 8-year-long study conducted by a group of researchers from the

,

As many as 47,337 malicious plugins have been uncovered on 24,931 unique websites, out of which 3,685 plugins were sold on legitimate marketplaces, netting the attackers $41,500 in illegal revenues.
The findings come from a new tool called YODA that aims to detect rogue WordPress plugins and track down their origin, according to an 8-year-long study conducted by a group of researchers from the

, ,
https://thehackernews.com/2022/06/yoda-tool-found-47000-malicious.html