Collaborate Disseminate
A variant of the STOP ransomware family is downloading the Azorult infostealer onto victim’s machines as part of its infection process. Security researcher Michael Gillespie was the first to detect this malicious activity. While testing some of t… Continue reading STOP Ransomware Variant Installing Azorult Infostealer
Two smart car alarm systems suffered from critical security vulnerabilities that affected upwards of three million vehicles globally. Researchers at Pen Test Partners independently assessed the security of products developed by Viper and Pandora, two o… Continue reading Vulnerabilities in Two Smart Car Alarm Systems Affected 3M Vehicles
The Jokeroo ransomware-as-a-service (RaaS) offers various membership plans through which would-be digital criminals can become affiliates. In his analysis of the ransomware-as-a-service, Bleeping Computer creator and owner Lawrence Abrams found that Jo… Continue reading Various Membership Plans Offered by Jokeroo Ransomware-as-a-Service
TikTok has agreed to pay a penalty of $5.7 million in order to settle allegations that it illegally collected children’s personal data. The penalty effectively settles a complaint submitted by the U.S. Federal Trade Commission against TikTok alle… Continue reading TikTok Fined $5.7M for Illegally Collecting Children’s Personal Data
Ring Doorbell has patched a flaw that allowed attackers to spy on and inject their own application footage, thereby undermining users’ home security. Researchers at Dojo, Bullguard’s Internet of Things (IoT) security team, discovered the vu… Continue reading Ring Doorbell Fixes Flaw that Allowed Attackers to Spy on, Inject Footage
Researchers have uncovered a new family of malware called “Farseer” that’s designed to conduct surveillance against Windows users. Discovered by Palo Alto Networks, Farseer works by using a technique known as “DLL sideloading… Continue reading New ‘Farseer’ Malware Designed to Spy on Windows Users
A couple of phishing schemes are currently targeting contractors who do business with two U.S. federal government agencies. Anomali Labs uncovered a malicious server hosting the two schemes in late February 2019. The first scheme begins when users visi… Continue reading Online Bidding Phishing Schemes Targeting U.S. Government Contractors
A new bill would strengthen California’s data breach notification law by expanding the types of information of whose exposure businesses are legally obligated to inform their customers. On 21 February, California Attorney General Xavier Becerra a… Continue reading Proposed Bill Would Strengthen California’s Data Breach Notification Law
The Separ infostealer is using what’s known as “Living off the Land” tactics to target businesses as part of an ongoing attack campaign. Digital security company Deep Instinct detected the campaign and observed that an infection begin… Continue reading Separ Infostealer Using “Living off the Land” Tactics to Target Businesses
Researchers have released an updated decryptor that allows victims of GandCrab ransomware version 5.1 to recover their affected files for free. On 19 February, Bitdefender announced that they had developed the decryptor in collaboration with the Romani… Continue reading Decryptor Now Available for Files Affected by GandCrab Ransomware v5.1