Collaborate Disseminate
UK government officials have publicly attributed the NotPetya malware attacks of June 2017 to actors in the Russian government. Foreign Office Minister Lord Ahmad made his thoughts known in a statement released on 15 February: The UK Government judges … Continue reading UK Government Publicly Attributes NotPetya Outbreak to Russia
The DoubleDoor Internet of Things (IoT) botnet circumvents firewall protection and other security measures by abusing two vulnerabilities. Detected by NewSky Security in its honeypot logs, DoubleDoor begins by deploying CVE-2015-7755. The vulnerability… Continue reading DoubleDoor IoT Botnet Abuses Two Vulnerabilities to Circumvent Firewalls, Modems
A new variant of the Android Remote Access Tool (AndroRAT) is exploiting a vulnerability to escalate privileges on unpatched Android devices. The malware disguises itself as a utility app called “TrashCleaner” and waits for users to downloa… Continue reading AndroRAT Exploiting Vulnerability to Escalate Privileges on Android Devices
Bad actors secretly infected more than 4,000 websites with the script for a crypto-miner after hacking a single technology provider. The trouble started on 11 February when Ian Thornton-Trump encountered something concerning while visiting the website … Continue reading 4K+ Websites Infected with Crypto-Miner after Tech Provider Hacked
The Belgian federal police has released free decryption keys for Cryakl ransomware following an international law enforcement operation. On 9 February, the European Union Agency for Law Enforcement Cooperation (Europol) announced the release of the key… Continue reading Cryakl Ransomware Decryption Keys Released by Belgian Federal Police
A Tennessee hospital discovered cryptomining software installed on a server that hosts its electronic medical records (EMR) system. In January 2018, Decatur County General Hospital began notifying patients of a incident involving its electronic medical… Continue reading Cryptomining Software Discovered on Tennessee Hospital’s EMR Server
NameCheap has said it intends to notify customers of a misconfiguration issue that allowed customers to create subdomains for any hosted account. Richard Kirkendall, CEO for the ICANN-accredited registrar, said on Twitter that the company is currently … Continue reading NameCheap to Notify Customers of Misconfiguration Issue that Allowed Subdomain Creation on Any Hosted Account
Grammarly has fixed a vulnerability that exposes users’ typos, documents, and other data for all websites with which they’ve used the platform. Tavis Ormandy, a Google computer security researcher who discovered a memory disclosure bug in C… Continue reading Grammarly Fixes Vulnerability that Exposes Users’ Data for All Websites
A UK court of appeals has ruled that Lauri Love will not be extradited to the United States to face trial for his alleged hacking crimes. The lord chief justice, Lord Burnett of Maldon, and Mr. Justice Ouseley handed down their judgment at the Royal Co… Continue reading Lauri Love Won’t Be Extradited to the United States for Alleged Hacking Crimes
The WannaCry and NotPetya outbreaks were by far among the most significant digital attack campaigns that took place in 2017. Together, the crypto-ransomware and wiper malware affected hundreds of thousands of computers all over the world. They achieved… Continue reading Three Leaked NSA Exploits Rewritten to Affect All Windows OSes Since Windows 2000