InfoSec Week 31, 2017
A new version of the Svpeng Android banking trojan is able to record everything users type on their devices. Crazy stuff.
Posted
#Weekly-News
A new version of the Svpeng Android banking trojan is able to record everything users type on their devices. Crazy stuff.
Posted
#Weekly-News
NSA's XKeyscore spying tool is used to fish Microsoft Windows crash reports out of the Internet traffic. They have used it against the Mexico's Secretariat of Public Security.
Posted
#Weekly-News
Microsoft has analyzed EnglishmansDentist exploit used against the Exchange 2003 mail servers on the out-dated Windows Server 2003 OS. Exploit was released by ShadowBrokers back in April 2017.
Posted
#Weekly-News
Porn spam botnet consisting of more than 80,000 automated female Twitter accounts has been prompting millions of clicks from Twitter users to the various affiliate dating schemes (known as 'partnerka').
Posted
#Weekly-News
WikiLeaks has published documents detailing two alleged CIA implants, BothanSpy and Gyrfalcon, designed to steal SSH credentials from Windows and Linux.
Posted
#Weekly-News
The ExPetr/Petya ransomware which hits the Ukraine last week is actually a disk wiper. Victims are not able to decrypt their data, as the encryption key is not stored anywhere.
Posted
#Weekly-News
Ukrainian critical infrastructure, including banks, Kyiv’s metro system, the airport and the Chernobyl's radiation monitoring system, was hit by the worldwide malware campaign. The attack is believed to be a new campaign by the group behind Petya ransomware. It takes advantage of the known SMB exploit (EternalBlue), and is spreading fast to the other countries.
Posted
#Weekly-News
Erebus ransomware distributed by the malicious advertisement campaign is using Rig exploit kit to infect Linux servers across the world. Some companies had to pay already.
Posted
#Weekly-News
Turla malware is communicating with the C&C infrastructure by leaving comments in Britney Spears's Instagram account.
Posted
#Weekly-News
Notoriously known Gh0st RAT spyware is spreading through the same SMB vulnerability as a WannaCry ransomware.
Posted
#Weekly-News