April 6, 2020 By David Bisson 2 min read

Last week in security news, researchers uncovered an attack campaign that spent the past two years targeting Windows machines running MS-SQL servers. The security community also learned of a vulnerability that enabled attackers to steal the credentials of people using the Zoom Windows client.

Top Story of the Week: Inside Vollgar’s Campaign Against MS-SQL Servers

Guardicore Labs found that the campaign had been targeting Windows machines running MS-SQL servers since May 2018. The campaign used brute-force attacks in an attempt to access targeted Windows machines. Upon successful authentication, the campaign loaded backdoors and executed malicious modules containing crypto-miners and remote-access Trojans (RATs).

Researchers at Guardicore dubbed the campaign “Vollgar, blending together the Vollar cryptocurrency mined in this campaign with the attacks’ vulgar behavior.

Source: iStock

Also in Security News

  • VelvetSweatshop Technique Used by Attack Campaign to Deliver LimeRAT: Researchers at Mimecast discovered an attack campaign that used “VelvetSweatshop” to password-protect a malicious Excel spreadsheet. As VelvetSweatshop is the default password employed by Excel to decrypt protected documents, this decision streamlined the attack chain by allowing the worksheet to bypass security tools and by not requiring users to manually enter a password.
  • Zoom Vulnerability Allowed Attackers to Steal Windows Credentials: As reported by Bleeping Computer, security researchers found that the Zoom Windows client was vulnerable to a UNC path injection in the client’s chat feature. A digital attacker could have exploited the security flaw to steal the user’s Windows credentials.
  • Indian Financial Institutions Targeted by Crimson RAT: Zscaler observed an attack campaign that used spear phishing emails to target Indian financial institutions. Those emails used either malicious PE executables or Office documents to deliver samples of Crimson RAT, malware that is capable of exfiltrating files and sending them to its command-and-control (C&C) server.

Security Tip of the Week: Improve Your Organization’s Password Security

Security professionals can help protect their organizations against brute-force attacks by improving their password security. They can do this by using multifactor authentication (MFA) wherever possible. Additionally, they should also consider working with a penetration testing service for the purpose of evaluating the overall password security of the organization.

More from

Change Healthcare discloses $22M ransomware payment

3 min read - UnitedHealth Group CEO Andrew Witty found himself answering questions in front of Congress on May 1 regarding the Change Healthcare ransomware attack that occurred in February. During the hearing, he admitted that his organization paid the attacker's ransomware request. It has been reported that the hacker organization BlackCat, also known as ALPHV, received a payment of $22 million via Bitcoin.Even though they made the ransomware payment, Witty shared that Change Healthcare did not get its data back. This is a…

Phishing kit trends and the top 10 spoofed brands of 2023

4 min read -  The 2024 IBM X-Force Threat Intelligence Index reported that phishing was one of the top initial access vectors observed last year, accounting for 30% of incidents. To carry out their phishing campaigns, attackers often use phishing kits: a collection of tools, resources and scripts that are designed and assembled to ease deployment. Each phishing kit deployment corresponds to a single phishing attack, and a kit could be redeployed many times during a phishing campaign. IBM X-Force has analyzed thousands of…

How I got started: AI security researcher

4 min read - For the enterprise, there’s no escape from deploying AI in some form. Careers focused on AI are proliferating, but one you may not be familiar with is AI security researcher. These AI specialists are cybersecurity professionals who focus on the unique vulnerabilities and threats that arise from the use of AI and machine learning (ML) systems. Their responsibilities vary, but key roles include identifying and analyzing potential security flaws in AI models and developing and testing methods malicious actors could…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today