#virus

Jul 20, 2020
1 min

New phishing campaign abuses a trio of enterprise cloud services

"A new phishing campaign uses a trio of enterprise cloud services, Microsoft Azure, Microsoft Dynamics, and IBM Cloud, as part of an attempt to steal your login credentials. BleepingComputer recently analyzed a new phishing campaign that pretends to from a help desk named “servicedesk.com” that mimics similar wording used by real IT helpdesk domains in corporate environments. The email imitates a “quarantined mail” notification frequently sent out in workplaces by email secu

Jun 17, 2020
1 min

'Woefully lax': report slams CIA cybersecurity after hacking tool leak

"Many of the Central Intelligence Agency’s most sensitive hacking tools were so poorly secured that it was only when WikiLeaks published them online in 2017 that the agency realized they had been compromised, according to a report released Tuesday. The secret-spilling site drew international attention when it dumped a vast trove of malicious CIA code on the internet in March 2017. The digital tools, sometimes described as “cyber weapons,” provided a granular look at how the C

Jun 10, 2020
1 min

Nintendo admits number of hacked accounts is almost double what it originally said

Up to 300,000 Nintendo Accounts were accessed. "Nintendo has revealed that an additional 140,000 user accounts were accessed by unauthorized means back in April. Previously, the company had said that only 160,000 accounts were affected and was slow to acknowledge the problem at the time. The news will come as a worry to those who are concerned about the security of their Nintendo Account and Nintendo Switch, although Nintendo stressed that less than one percent of all Nintend

Jun 5, 2020
1 min

Chinese and Iranian hackers targeted Biden and Trump campaigns, Google says

"WASHINGTON (Reuters) - State-backed hackers from China have targeted staffers working on the U.S. presidential campaign of Democrat Joe Biden, a senior Google security official said on Thursday. The same official said Iranian hackers had recently targeted email accounts belonging to Republican President Donald Trump’s campaign staff. The announcement, made on Twitter by the head of Google’s Threat Analysis Group, Shane Huntley, is the latest indication of the digital spying

Jun 4, 2020
1 min

Huge Cyberattacks Attempt To Silence Black Rights Movement With DDoS Attacks

"After the death of George Floyd and the subsequent protests across the U.S., cyberattacks on advocacy groups spiked by an astonishing 1,120 times. It’s unclear who is behind the attacks, but they included attempts to neuter anti-racist organizations’ freedom of speech. The data comes from Cloudflare, a Silicon Valley company that protects a vast number of websites from distributed denial of service (DDoS) attacks, where servers are flooded with traffic to make them inaccessi

May 4, 2020
1 min

Kaspersky: RDP brute-force attacks have gone up since start of COVID-19

"Cyber-security firm Kaspersky says the number of brute-force attacks targeting RDP endpoints rose sharply since the onset of the coronavirus (COVID-19) pandemic. According to a report published today, RDP brute-force attacks increased last month, when most countries around the globe imposed quarantines and stay-at-home orders, forcing companies to deploy more RDP systems online, increasing the attack surface for hackers. "Since the beginning of March, the number of Bruteforc

Apr 7, 2020
1 min

Health care cybersecurity: new front in coronavirus battle.

"Health care professionals battling the coronavirus now face a second front in the war -- cyberattacks -- that threaten to disrupt operations and broadcast disinformation. Cyberattacks against health care agencies have skyrocketed in the past decade, with almost 70% of the population affected by a data breach through the theft of personal information and health data. The attacks occur, on average, at a rate of 1.4 a day, according to the HIPAA Journal. But the arrival of the

Mar 17, 2020
1 min

U.S. health agency was under cyberattack during its response to coronavirus

"The U.S Health and Human Services Department was targeted in a cyberattack over the weekend as the agency grapples with the coronavirus crisis, which has killed 69 people in the country as of Monday. The HHS said it put early protections in place, in case a hacking attempt were to occur during its COVID-19 response efforts. Bloomberg reporter Jennifer Jacobs tweeted the news Monday saying, "The attack appears to have been intended to slow the agency’s systems down." The HHS

Mar 16, 2020
1 min

U.S. Health Agency Suffers Cyber-Attack During Covid-19 Response

"The U.S. Health and Human Services Department suffered a cyber-attack on its computer system Sunday night during the nation’s response to the coronavirus pandemic, according to three people familiar with the matter. The attack appears to have been intended to slow the agency’s systems down, but didn’t do so in any meaningful way, said the people, who asked for anonymity to discuss an incident that was not public. The National Security Council’s tweet on Sunday night was rela

Mar 13, 2020
1 min

Hackers use fake coronavirus maps to infect visitors with malware

"Hackers are once again taking advantage of concerns of COVID-19 by using fake coronavirus maps to infect visitors with malware. Detailed Monday by cybersecurity researcher Shai Alfasi from Reason Cybersecurity Ltd., the fake maps were founded to be attempting to infect unsuspecting visitors with the AZORult malware. The malware, first discovered in 2016, is an information stealer that makes off with browsing history, cookies, ID/passwords, cryptocurrency and more. An AZORult

Feb 7, 2020
1 min

IoT Malware Campaign Infects Global Manufacturing Sites

The infection uses Lemon_Duck PowerShell malware variant to exploit vulnerabilities in embedded devices at manufacturing sites. "A new malware campaign built to exploit flaws in connected devices is targeting manufacturers around the world and affecting products from smart printers to heavy operational equipment. Researchers at TrapX Labs first saw this attack targeting Latin American manufacturers in October 2019. Since then, it has continued to expand, with a peak in Decemb

Feb 4, 2020
1 min

witter says an attacker used its API to match usernames to phone numbers

Twitter discloses security incident involving the abuse of one of its official API features. "In a statement published today, Twitter disclosed a security incident during which third-parties exploited the company's official API (Application Programming Interface) to match phone numbers with Twitter usernames. In an email seeking clarifications about the incident, Twitter told ZDNet that they became aware of exploitation attempts against this API feature on December 24, 2019,

Jan 2, 2020
1 min

Windows users, beware: This fake update could lock up your PC, or worse

Updating to Windows 10? Don't fall victim to this spam email attack. With the end of for Windows 7 coming in January, many users are looking to update to Windows 10 to continue getting security updates and support from Microsoft. According to a Tuesday report from security firm Trustwave, attackers are well aware of this and are targeting Microsoft users with fake Windows update emails that will infect computers with ransomware -- an especially sinister type of malware that l

Dec 20, 2019
1 min

Ransomware at Colorado IT Provider Affects 100+ Dental Offices

A Colorado company that specializes in providing IT services to dental offices suffered a ransomware attack that is disrupting operations for more than 100 dentistry practices, KrebsOnSecurity has learned. Multiple sources affected say their IT provider, Englewood, Colo. based Complete Technology Solutions (CTS), was hacked, allowing a potent strain of ransomware known as "Sodinokibi" or "rEvil" to be installed on computers at more than 100 dentistry businesses that rely on t

Dec 16, 2019
1 min

New Orleans declares state of emergency following ransomware attack

"New Orleans declared a state of emergency and shut down its computers after a cyber security event, the latest in a string of city and state governments to be attacked by hackers. Suspicious activity was spotted around 5 a.m. Friday morning. By 8 a.m., there was an uptick in that activity, which included evidence of phishing attempts and ransomware, Kim LaGrue, the city’s head of IT said in a press conference. Once the city confirmed it was under attack, servers and computer

Dec 13, 2019
1 min

New Ransomware “Zeppelin” Targets High Profiles in Canada and Europe

"Security researchers stated that cybercriminals have created a new ransomware variant titled “Zeppelin” to target healthcare and IT companies in the U.S., Canada, and Europe. It’s said that Zeppelin ransomware is reportedly a new variant of the VegaLocker/Buran ransomware. Background of the Ransomware According to the BlackBerry Cylance Threat Research team, Zeppelin is the newest member of the Delphi-based Ransomware-as-a-Service (RaaS) family based on the same code and fea

Dec 10, 2019
1 min

Google Confirms Critical Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat

"The December 2019 Android Security Bulletin has been published by Google and contains details of several vulnerabilities within the Android operating system. In total, three vulnerabilities have been given a critical rating. However, Google has highlighted one of these as being "the most severe," and for very good reason: a single maliciously crafted message could "cause a permanent denial of service." If you tend to hang fire when the "a software update is available" notifi

Dec 9, 2019
1 min

FBI Issues ‘Drive-By’ Hacking Warning: This Is How To Secure Your Devices

"There is a gaping hole in our online security—the surge of connected devices we now surround ourselves with. Now the FBI has warned that “hackers can use those innocent devices to do a virtual drive-by of your digital life.” The issue is the smart digital technologies encroaching into all aspects of our lives: “Unsecured devices can allow hackers a path into your router, giving the bad guy access to everything else on your home network that you thought was secure. Are privat

Dec 5, 2019
1 min

The 10 most important cyberattacks of the decade.

“Since 2010, billions of sensitive files, personal information and account details have been leaked thanks to devastating hacks and damaging breaches. As more sensitive personal data has made its way online, the size and impact of breaches has steadily increased throughout the decade. Attacks have hit almost every sector and show no signs of slowing down as more people are forced to entrust the safety of personal information to various websites.” https://www.techrepublic.com/

Dec 4, 2019
1 min

This new Android malware comes disguised as a chat app

CallerSpy can monitor calls, messages, take screenshots and records its surroundings, say researchers - who warn that it could be the early stages of a targeted cyber-espionage campaign. A new form of mobile malware designed to snoop on calls, texts and other communications is targeting Android users by duping them into downloading a fake chat application. The trojan malware, dubbed CallerSpy, has been discovered and detailed by cybersecurity researchers at Trend Micro, who b