Malvertising Campaign Delivers Vidar Information Stealer and GandCrab Ransomware
Researchers have spotted a malvertising campaign that is delivering two payloads to victims: the Vidar information stealer and GandCrab ransomware.
NRSMiner Crypto-Mining Malware Infects Asian Devices With the Help of EternalBlue Exploit
Security researchers report that the newest version of NRSMiner crypto-mining malware is causing problems for companies that haven't patched the EternalBlue exploit.
New Variant of Mirai Malware Exploits Weak IoT Device Passwords to Conduct Brute-Force Attacks
Security researchers discovered a new variant of Mirai malware known as Miori that is targeting internet of things (IoT) devices to integrate into a larger botnet.
Hide ‘N Seek Botnet Continues to Grow by Infecting IoT Devices Using Default Credentials
Avast security analysts reported that the Hide 'N Seek botnet continues to grow by infecting vulnerable Internet of Things (IoT) devices still using their default passwords.
WordPress Exploit in GDPR Plugin Puts 100,000 Websites at Risk
Researchers discovered a WordPress Exploit in a plugin designed to help site owners comply with the GDPR that enables attackers to take control of admin accounts.
KeyBoy Attacker Group Uses Publicly Available Exploit Code to Deliver Malware
The KeyBoy attacker group recently used known exploit code for two Microsoft security flaws to infect machines with TSSL and Titan Android malware, according to AlienVault.
The Telltale Text File: Security Researcher Proposes Standardization for Reporting Vulnerabilities
Security researcher Ed Foudil proposed adding a security.txt to every website to standardize the process of reporting vulnerabilities.
Downward Trend in Publicly Available Exploit Code? Don’t Ease Up on Patch Management Just Yet
IBM X-Force reported a downward trend in publicly available exploit code, but security teams must still prioritize vulnerability and patch management.
ROPEMAKER Exploit Could Allow Fraudsters to Alter Emails Post-Delivery
A new vulnerability called ROPEMAKER could enable threat actors to replace a benign URL with a malicious one after an email has already been sent.
NotPetya Operators Installed Three Backdoors on M.E.Doc Software Server Before Activating Malware
New research revealed that the threat actors behind the recent NotPetya wiperware attacks had established three backdoors in the M.E.Doc servers.