Year: 2018

Monero-Mining Linux Malware Steals Credentials for Lateral Movement

Delaware, USA ā€“ November 27, 2018 ā€” Adversaries are perfecting Monero-mining Linux malware, giving it new features to steal credentials and further spread via SSH. Dr.Web researchers have discovered a new complex trojan, which has many malicious features. Malware is a shell script of 1,000+ lines of code which finds a folder on disk to […]

Read More
Lateset Tricks of Emotet Malware

Delaware, USA ā€“ November 23, 2018 ā€“ Appeared four years ago, Emotet banking trojan continues to evolve and to use new tricks to infect its victims. Late last month, attackers added email harvesting module, and malware started to exfiltrate email subjects and bodies targeting any message sent or received in the past 180 days. The […]

Read More
OceanLotus Group Attacks Targets in Southeast Asia

Delaware, USA ā€“ November 22, 2018 ā€“ The OceanLotus group (aka APT32 or APT-C-00) conducts new large-scale cyber espionage campaign. The APT group is active since at least 2012 and mainly interested in government entities. Ongoing cyber espionage campaign started this September, the adversaries conduct watering hole attack compromising websites in Southeast Asia. Researchers from […]

Read More
APT28 Uses Cannon Malware in New Cyberespionage Campaign

Delaware, USA ā€“ November 21, 2018 ā€“ Researchers from Palo Alto Networks uncovered a new cyberespionage campaign conducted by APT28 and aimed at government organizations in North America and Europe. APT28 group, also known as Sofacy or Fancy Bear, is infamous for its large-scale campaigns and the use of sophisticated malware. In the uncovered campaign, […]

Read More
Attackers Hijack Websites with Drupal CMS

Delaware, USA ā€“ November 20, 2018 ā€“ Researchers from Imperva warn of a new wave of attacks on websites with the Drupal content management system. Adversaries use the Drupalgeddon2 (CVE-2018-7600) and DirtyCOW (CVE-2016-5195) exploits to gain access to a site and install the SSH client to perform further actions. Researchers spotted mass-scanning the Internet for […]

Read More
Cozy Bear is Back in Business After Their Year-Long Vacation

Delaware, USA ā€“ November 19, 2018 ā€“ Cozy Bear cyberespionage group conducts massive phishing campaign targeting the United States. The notorious hacking group is responsible for attacks on members of the Norwegian and Danish government last year and is also one of two groups that hacked the Democratic National Committee before the 2016 US Presidential […]

Read More
MageCart Reinfects 20% of Compromised Websites

Delaware, USA ā€“ November 16, 2018 ā€“ Security researcher Willem de Groot published statistics on MageCart attacks over the previous three months, which shows that threat actor reinfects every fifth online shop. Since August, adversaries have compromised 5,400 websites and injected skimmers on them, including successful attacks on British Airways, the web push notifications service […]

Read More
TEMP.Periscope Borrows Fancy Bear’s and Dragonfly’s Techniques

Delaware, USA ā€“ November 15, 2018 ā€“ The Chinese APT group TEMP.Periscope, also known as Leviathan hacker group, attacked a British engineering company using techniques of infamous threat actors allegedly associated with the Russian government. Researchers from Recorded Future published the results of a recent attack investigation. TEMP.Periscope attempted to steal technology and confidential information […]

Read More
White Company APT Group Attacks the Pakistan Air Force

Delaware, USA ā€“ November 14, 2018 ā€“ For the second time in a month, Pakistan has attracted public attention due to cyber attacks. Earlier this month, Pakistani CERT reported that almost all banks in the country were affected by a data breach. This time, researchers uncovered Operation Shaheen, a complex cyber-espionage campaign targeted at the […]

Read More
VAE, Inc. Becomes SOC Prime’s Partner

Delaware, USA ā€“ November 13, 2018 ā€” SOC Prime, Inc. announces a new partnership with VAE, Inc., a Value-Added Reseller that offers products from the best hardware and software vendors in the industry. Founded in 1998, VAE, Inc. has shaped the company to attract, inspire, and retain quality individuals, and has carefully assembled a team […]

Read More