Attack Campaign Leverages B2B Site to Distribute New Spelevo Exploit Kit
A recent attack campaign leveraged a business-to-business (B2B) website to distribute a new exploit kit named Spelevo.
How to Patch BlueKeep and Get to Know Your Company’s Critical Assets
In theory, dealing with BlueKeep should be no different from dealing with other vulnerabilities. Unfortunately, many organizations are lagging in their patch management efforts.
Latest Mirai Malware Variant Contains 18 Exploits, Focuses on Embedded IoT Devices
Researchers discovered a Mirai malware variant with 18 exploits targeting embedded internet of things (IoT) devices.
Attack Campaign Exploits CVE-2019-2725, Abuses Certificate Files to Deliver Monero Miner
Researchers observed an attack campaign exploiting CVE-2019-2725 and abusing certificate files to deliver a Monero miner.
Fileless Attack Campaign Leverages PCASTLE to Distribute XMRig Monero-Mining Malware
According to researchers, the fileless attack uses PCASTLE to distribute samples of XMRig, a well-known Monero-mining malware family.
BlackSquid Malware Capable of Abusing 8 Exploits to Install XMRig Monero Miner
The new BlackSquid malware is capable of abusing eight notorious exploits in its attempts to install the XMRig Monero miner.
Sodinokibi Ransomware Fixes Scaling Issues, Targets Large Enterprises
Recent variants of Sodinokibi accounted for scaling issues as the ransomware family steadily moves to target large enterprises.
Hundreds of Thousands of Users Targeted Daily With Would-Be WannaCry Imitators
Two years since the WannaCry attacks wreaked havoc around the world, researchers say hundreds of thousands of people are being targeted with the EternalBlue exploit on which it was based.
ScarCruft Threat Group Using Malware to Steal Information From Bluetooth Devices
An advanced persistent threat (APT) group known as ScarCruft is now using malware to steal information off of Bluetooth devices.
Published Exploits for Accessing SAP Systems Put Security Teams on Alert
Researchers published two pieces of exploit code that can allow anyone to interact with an organization's SAP enterprise resource planning platform and perform unauthorized transactions.