Category Archives: Trustwave Spiderlabs

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

Posted on by

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is one of several ransomware groups using paid ads on Google.com to trick people into installing malware disguised as popular free software, such as Microsoft Teams, Adobe Reader, Mozilla Thunderbird, and Discord. Continue reading ‘Snatch’ Ransom Group Exposes Visitor IP Addresses→

GO SMS Pro Android App Exposes Private Photos, Videos and Messages

Posted on by

The vulnerable version of the app, which has 100 million users, uses easily predictable URLs to link to private content. Continue reading GO SMS Pro Android App Exposes Private Photos, Videos and Messages→

‘Windows Update’ Installs Cyborg Ransomware

Posted on by

A malicious spam campaign that informs victims it contains a “critical Windows update” instead leads to the installation of Cyborg ransomware, researchers have found. Further, they were able to access its builder, which can be used to creat… Continue reading ‘Windows Update’ Installs Cyborg Ransomware→

Brother Printers Susceptible to Remote Denial of Service Attacks

Posted on by

Trustwave discloses an unpatched vulnerability in Brother printers with the Debut embedded webserver after numerous attempts to contact the vendor failed. Continue reading Brother Printers Susceptible to Remote Denial of Service Attacks→

Hundreds of Thousands of Netgear Routers Vulnerable to Password Bypass

Posted on by

Hundreds of thousands–potentially more than one million–Netgear routers are susceptible to a pair of vulnerabilities that can lead to password disclosure. Continue reading Hundreds of Thousands of Netgear Routers Vulnerable to Password Bypass→

Slicing Into a Point-of-Sale Botnet

Posted on by

Last week, KrebsOnSecurity broke the news of an ongoing credit card breach involving CiCi’s Pizza, a restaurant chain in the United States with more than 500 locations. What follows is an exclusive look at a point-of-sale botnet that appears to have enslaved dozens of hacked payment terminals inside of CiCi’s locations that are being relieved of customer credit card data in real time. Continue reading Slicing Into a Point-of-Sale Botnet→