Malware as-a-Service

►

Article

Extended Enterprise: Threats, Gaps and How to Fight Them

Tom Field • August 4, 2020

It's a new and permanent extended enterprise, as cybersecurity leaders budget for 2021. What are the top threats and vulnerabilities? How have enterprises hardened their endpoint defenses? Stacia Tympanick of VMWare Carbon Black previews a new virtual roundtable.

Article

Alleged GandCrab Distributor Arrested in Belarus

Chinmay Rautmare • August 4, 2020

A 31-year-old man who allegedly distributed versions of the GandCrab ransomware to target users has been arrested in Belarus for possession and distribution of malware, according to the country's Ministry of Internal Affairs.

►

Article

Threat Outlook: Impact on Visibility, Response

Tom Field • August 3, 2020

Phishing, pandemic-themed malware and ransomware - the threat landscape is familiar. But what is the deeper impact on cybersecurity visibility and response? Keith McCammon of Red Canary shares insight in advance of a virtual roundtable.

Article

EU Issues First Sanctions for Cyberattacks

Akshaya Asokan • August 1, 2020

The European Union has imposed its first sanctions against individuals and entities from Russia, China and North Korea for their alleged roles in hacking activities and cyberattacks that targeted EU citizens and organizations.

Article

FastPOS Malware Creator Pleads Guilty

Akshaya Asokan • August 1, 2020

A member of the infamous Infraud Organization who was the creator of a malware strain called FastPOS has pleaded guilty to a federal conspiracy charge. Valerian Chiochiu assisted other cybercriminals through the Infraud site before authorities shuttered it in 2018, prosecutors say.

►

Article

Rapid Digitization and Risk: A Roundtable Preview

Tom Field • July 29, 2020

Suddenly, onboarding, servicing and securing digital accounts with advanced authentication techniques isn't just a priority for global enterprises; it is the priority. Dean Stevenson of HID Global previews an upcoming virtual roundtable discussion.

Article

FBI Warns US Firms About Malware in Chinese Tax Software

Akshaya Asokan • July 25, 2020

In a private industry alert, the FBI warns U.S. firms of possible malware hidden in tax software the Chinese government requires companies doing business in the nation to use. The warning follows reports by Trustwave about backdoors that can give hackers access to entire networks.

Article

Lazarus Group Deploying Fresh Malware Framework

Akshaya Asokan • July 25, 2020

Lazarus Group, a sophisticated hacking group associated with the North Korean government, is using a new malware framework to spread ransomware and steal databases from victims, according to security firm Kaspersky.

Article

Emotet Botnet Returns After Months-Long Hiatus

Akshaya Asokan • July 18, 2020

After a nearly six-month hiatus, the Emotet botnet has sprung back to life with a spam campaign targeting the U.S. and U.K., according to security research reports. Victims are hit with phishing emails that contain either a malicious URL or Word document attachment that downloads malware.

Article

Card Skimmer Found Hitting Vulnerable E-Commerce Sites

Doug Olenick • July 8, 2020

A credit card skimmer that has been operating since April is specifically targeting sites hosted on Microsoft IIS servers that are currently running an out-of-date version of ASP.NET, according to security firm Malwarebytes. About 27 million websites still use this now unsupported software.

Article

Feds Indict 'Fxmsp' for Hacking Multiple Firms

Ishita Chigilli Palli • July 8, 2020

The U.S. Justice Department has charged Kazakhstan national Andrey Turchin with being the hacker known as "Fxmsp," as well as running a hacking collective known by the same name that's been tied to 300 attacks worldwide, including against anti-virus vendors.

Article

North Korean Hacking Infrastructure Tied to Magecart Hits

Mathew J. Schwartz • July 6, 2020

Hackers with apparent ties to North Korea have extended their bag of online attack tricks beyond cryptocurrency mining, online bank heists and ransomware. Now, they're also hitting e-commerce merchants in the U.S. and Europe with Magecart attacks to steal payment card data, security firm Sansec reports.

Article

How Ekans Ransomware Targets Industrial Control Systems

Akshaya Asokan • July 4, 2020

Researchers with FortiGuard Labs have uncovered two samples of the Ekans ransomware strain that offer some additional insight into how the crypto-locking malware targets industrial control systems, according to a new report. Ekans, also known as Snake, was first spotted earlier this year.

Article

Operators Behind Valak Malware Expand Malicious Campaign

Ishita Chigilli Palli • July 3, 2020

The operators behind the Valak malware strain have expanded their malicious campaigns to other parts of the world, targeting financial, manufacturing, healthcare and insurance firms, according to Cisco Talos. Attackers are now using existing email threads and ZIP files to spread the information stealer.

Webinar

Live Webinar | The Post-Pandemic New Normal: Rethink and Rebuild Cyber Security (11 am AEST I 1 pm NZST)

Jinan Budge, Principal Analyst Serving Security & Risk Professionals, Forrester , Ashwin Pal, Director of Cybersecurity Services, Asia Pacific, Unisys , Gergana Winzer, Industry Director of Cybersecurity, Australia and New Zealand, Unisys • June 25, 2020

The COVID-19 pandemic has put new security pressures on organizations, which are adapting to having large numbers of employees working from home. The threat landscape has changed, and attackers are looking to exploit weaknesses in how organizations have changed access to applications and data assets, which has forced...

Extended Enterprise: Threats, Gaps and How to Fight Them

Alleged GandCrab Distributor Arrested in Belarus

Threat Outlook: Impact on Visibility, Response

EU Issues First Sanctions for Cyberattacks

FastPOS Malware Creator Pleads Guilty

Rapid Digitization and Risk: A Roundtable Preview

FBI Warns US Firms About Malware in Chinese Tax Software

Lazarus Group Deploying Fresh Malware Framework

Emotet Botnet Returns After Months-Long Hiatus

Card Skimmer Found Hitting Vulnerable E-Commerce Sites

Feds Indict 'Fxmsp' for Hacking Multiple Firms

North Korean Hacking Infrastructure Tied to Magecart Hits

How Ekans Ransomware Targets Industrial Control Systems

Operators Behind Valak Malware Expand Malicious Campaign

Live Webinar | The Post-Pandemic New Normal: Rethink and Rebuild Cyber Security (11 am AEST I 1 pm NZST)

Around the Network

Security Analysis: US Outmaneuvers UK on 'Huawei Question'

Analysis: Hijacking of Twitter Hacker's Virtual Hearing

The Celebrity Twitter Hack: What Happened?

Mitigating Brand Impersonation Fraud

Analysis: The Hacking of Mobile Banking App Dave

Behavioral Biometrics: Avoiding Mistakes

Secret Service Agent Offers Cybercrime-Fighting Insights

Medical Devices: Mitigating Cyber Risks

Detecting Payroll Fraud With Data Analytics

COVID-19 Contact-Tracing Apps: The Privacy Issues