Collaborate Disseminate
A malware campaign designed to steal financial information and log-in credentials for a variety of popular online services has been secretly endangering Mexican users since at least 2013, researchers from Kaspersky Lab’s Global Research & Analysis Team… Continue reading Threat of info-stealing malware Dark Tequila hangs over Mexicans since 2013
Microsoft petitioned a judge in the Eastern District of Virginia to take control of six websites, some of which used misleading domains such as “senate.group,” and “adfs-senate.email.” Continue reading Microsoft rebuffed Fancy Bear attempts to target candidates, conservative think tanks
A severe PHP exploit proof-of-concept attack could allow remote code execution attacks on several content management platforms including Typo3 and WordPress. Continue reading PHP exploit flaw puts WordPress and other CMS sites at risk of remote code execution
A URL shortener, a fake plug-in and a malicious popuplink.js file are the three key ingredients found in a WordPress website infection campaign that since July has been redirecting victimized site visitors to various scam and ad sites. Continue reading WordPress redirection campaign uses .js file, fake plug-ins to send victims to scam sites
Scammers are taking phishing attack low tech in a scheme targeting Barclays’ customers claiming that a recall has been issued for customer’s cards dude to exploding EMV chips. Continue reading Phishing scam claims recall on exploding Barclays credit cards
Multiple versions of cardiovascular imaging and information management software from Philips have been found to contain vulnerabilities that could lead to escalated privileges and arbitrary code execution. Continue reading Philips cardiovascular software found to contain privilege escalation, code execution bugs
The university discovered the intrusion by an unauthorized third party on the day after it first occurred, but only realized data had been breached through a report from outside security investigators on July 31. Continue reading Phishing attack on Augusta University Health leads to breach exposing info on 400K persons
Researchers at Top10 VPN have uncovered a thriving marketplace for selling U.K. gamer logins and passwords on the popular Battle Royal-esque game “Fortnite” on the dark web. Continue reading Fortnite login credentials sold on the dark web for cheap
Researchers have linked a newly discovered downloader malware to the Necurs botnet, after it was observed in a large email spam campaign targeting mostly financial organizations. Continue reading Phishing campaign reveals new Marap downloader malware, possibly distributed by Necurs botnet