No, Corona Antivirus can’t fight COVID-19

COVID-19-themed scams are exploding both online and offline. Hijacked Twitter accounts peddling fake cures, scammy sites offering emergency supplies, misinformation campaigns, phishing emails and – can you believe it? – even a computer anti… Continue reading No, Corona Antivirus can’t fight COVID-19

Hackers are messing with routers’ DNS settings as telework surges around the world

Personal Wi-Fi routers have long been a cybersecurity weak point, which is a growing concern as the COVID-19 pandemic forces people to work from home. According to new BitDefender research, criminals have moved quickly to manipulate these routers in a wide swath of countries in Europe, as well as in the United States. Attackers have begun changing Domain Name System (DNS) settings in Linksys routers, pointing users to what they believe is a legitimate website that also includes a pop-up message with information about the pandemic. However, once a user clicks through, a fake coronavirus-related app may be downloaded containing malware that can perform a host of nefarious activities, according to Liviu Arsene, a global cybersecurity researcher at BitDefender. ”It is a big problem, especially now that everybody’s working from home,” Arsene told CyberScoop. “Having your router’s DNS compromised can spell disaster because if attackers can redirect you to any page they want […]

The post Hackers are messing with routers’ DNS settings as telework surges around the world appeared first on CyberScoop.

Continue reading Hackers are messing with routers’ DNS settings as telework surges around the world

New TrickBot tool targets telecommunications in U.S., Hong Kong

The criminals behind the TrickBot banking trojan have retooled it for targeting telecommunications organizations in the U.S. and Hong Kong, according to new research from BitDefender. The new module, a malicious .dll file “rdpScanDll” allow attackers to run brute-forcing operations against Remote Desktop Protocols (RDPs). It’s just the latest update to TrickBot, which by design is built to be enhanced over time. The developers behind the banking trojan have not rested since it first sprouted up in 2016, and just earlier this year started using a new backdoor, according to SentinelOne research. BitDefender first saw a version of the module being developed in August of last year, Liviu Arsene, a global cybersecurity researcher at BitDefender, told CyberScoop. The multiple configurations TrickBot can take on will likely continue to be attractive for criminals’ and nation-states’ interests as they perpetually try to retool and maintain anonymity, according to Arsene. “That’s the beauty of everything you […]

The post New TrickBot tool targets telecommunications in U.S., Hong Kong appeared first on CyberScoop.

Continue reading New TrickBot tool targets telecommunications in U.S., Hong Kong

Santa Sports a White Hat This Modern Christmas

Santa is coming to town, and he’s packing a white hat this Christmas as he brings good tidings, gifts and advice for people to stay cybersafe over the holidays. In a modern world where Christmas gifts often consist of smartphones, tablets and ass… Continue reading Santa Sports a White Hat This Modern Christmas

49% of infosec pros are awake at night worrying about their organization’s cybersecurity

Six in every ten businesses have experienced a breach in either in the last three years. At least a third of infosec professionals (36%) whose employers had not recently been a victim of a cyber attack also believe that it is likely that they are curre… Continue reading 49% of infosec pros are awake at night worrying about their organization’s cybersecurity

SWAPGS Attack: A new Spectre haunts machines with Intel CPUs

Bitdefender researchers have uncovered yet another viable speculative execution side-channel attack that can be leveraged against Intel CPUs and the computers running on them. The SWAPGS Attack, as they call it, circumvents the protective measures that… Continue reading SWAPGS Attack: A new Spectre haunts machines with Intel CPUs

New infosec products of the week: July 26, 2019

Centrify unveils free cloud-based PAM offering for organizations that do not have a password vault Centrify’s Free Tier Vault is available immediately in the AWS Marketplace, enabling organizations of any size to start controlling privileged access to … Continue reading New infosec products of the week: July 26, 2019

Bitdefender Browser Isolation defeats attacks by monitoring memory for attack techniques

Bitdefender, a global cybersecurity leader protecting over 500 million systems across 150 countries, announced availability of Bitdefender Browser Isolation. Creating a virtual air-gap between end-user systems and the web, it ensures attackers cannot g… Continue reading Bitdefender Browser Isolation defeats attacks by monitoring memory for attack techniques