Year: 2019

MageCart Attack on OXO International

Delaware, USA ā€“ January 10, 2019 ā€“ OXO International reported a data breach that affected the personal information of their customers. Presumably, the adversaries got access to the data entered on the site from June to November 2017 and from July to October 2018. A third-party security firm is conducting an investigation, and OXO International […]

Read More
Vidar Infostealer Delivers Latest Version of GandCrab Ransomware

Delaware, USA ā€“ January 9, 2019 ā€“ One of the threat actors behind the malvertising campaign distributes Vidar infostealer to collect credentials and install GandCrab ransomware as a secondary payload. Experts from Malwarebytes discovered this threat during the investigation of a massive malvertising campaign which redirects its victims to Fallout and GrandSoft exploit kit landing […]

Read More
Updated NRSMiner Strikes Asian Countries

Delaware, USA ā€“ January 8, 2019 ā€“ An updated version of the NRSMiner coinminer threatens organizations in Asia. Researchers from F-Secure spotted a new wave of malware attacks started in mid-November last year when adversaries released the newest version of the cryptocurrency miner. NRSMiner is a worm-like malware that uses the EthernalBlue exploit for spreading […]

Read More
Roma225 Campaign by Gorgon Group

Delaware, USA ā€“ January 4, 2019 ā€“ A recently published research by Cybaze-Yoroi ZLab experts informs about details of Roma225 campaign that targeted the Italian automotive sector. Cyberespionage malware intruded into infrastructure through phishing email making victims believe its a legitimate PowerPoint Presentation from the senior partner. Their bad luck was that the .ppa file […]

Read More
Ryuk Ransomware is Back Again

Delaware, USA ā€“ January 3, 2019 ā€“ The last days of the year 2018 were extremely troubled for one of the biggest USā€™ media group. Ryuk ransomware seriously disrupted crucial production and printing processes, so the Sunday morning was clouded for the readers of printed newspapers. A Tribune Publishing spokesperson said that websites and mobile […]

Read More
Dark Overlord Threaten to Release Files Related to 9/11 Attack

Delaware, USA ā€“ January 2, 2019 ā€“ On the eve of the New Year, the Dark Overlord group, infamous for their attacks on financial and media companies, posted on Pastebin an announcement of readiness to disclose stolen data related to the September 11 attacks. Cybercriminals shared via torrent file 10Gb of encrypted data and demanded […]

Read More