Delaware, USA – October 13, 2017 – Researchers from Cisco Talos reported a targeted attack on a number of organizations in the US, in which adversaries used fileless Remote Access Tool DNSMessenger. This campaign is notable for the leveraging of a compromised government server, and the method of distribution. Malicious emails were disguised as messages […]
Delaware, USA – October 12, 2017 – Researchers from ICEBRG actively monitor the activities of the FIN7 hacker group and recently discovered significant changes in their techniques. One of the primary tools of FIN7, the backdoor HALFBAKED, is continuously being changed and modified by attackers. The latest detected modification is able to extract the auto-complete […]
Delaware, USA – October 11, 2017 – Sonic Drive-In, a fast food restaurant chain in the United States, was attacked by cybercriminals that used POS terminals malware for stealing data on visitors’ payment cards. The restaurant chain has more than 3,500 locations in 45 states. Data breach affected approximately 5 million payment cards. On September […]
Delaware, USA – October 10, 2017 – In connection with the recent launch of a new platform that provides JavaScript cryptocurrency miners for integration into web pages, Web Mining Detector SIEM use case has been updated to version 1.1. Now it contains all the necessary indicators of compromise to detect any connections to this platform. […]
Delaware, USA – October 10, 2017 – In early October, experts from Google published information on the research about the popular DNS forwarder and DHCP server – Dnsmasq. This program is used in routers and some IoT devices and it is also included in various Linux distributions. Currently, Shodan detects about 1.2 million devices with […]
Delaware, USA – October 09, 2017 – We have recently written that credential theft attacks have become more frequent. Last Thursday, researchers from FireEye, Arbor Networks and ISC SANS reported several campaigns that were targeted at the aerospace and defense industry mainly in the US, India and South Korea. The primary distribution vector is spear […]
Delaware, USA – October 09, 2017 – For more than two weeks, Locky has been distributed by the Necrus botnet through emails with the subject “Status of invoice” and attached 7z archive containing a malicious VBS script. Encrypted files are assigned the .ykcol extension; this may be a reference to the same named virus that […]
Delaware, USA – October 04, 2017 – The second half of September was marked by a significant increase in the number of incidents with JavaScript cryptocurrency miners. The idea of cryptocurrency mining instead of displaying advertising banners was realized in 2013, but until recently it was not very popular. On September 14, the Coinhive platform […]
Delaware, USA – October 04, 2017 – SOC Prime, Inc. announces a new partnership with Forward Defense, a UAE-based leading information security advisor and integrator, to assist in their goal of providing world-class, innovative, value-added services and guidance to customers and establishing a position of leadership.
Delaware, USA – October 3, 2017 – Researchers from Malwarebytes Lab reported a malicious campaign against Governmental entities in Saudi Arabia. Over the past year, Saudi Arabia has become the target of several large-scale cyber attacks: according to researchers from Kaspersky Lab, about 60 percent of organizations in this country were attacked by various malware. […]