Join the Telegram channel WastedLocker is a new ransomware operated by a malware exploitation gang commonly known as the Evil Corp gang. The same gang that is associated with Dridex and BitPaymer. The attribution is not based on the malware variants as WastedLocker is very different from BitPaymer. What was […]
Security
1441 posts
Join the Telegram channel Google-owned ‘blogspot.in’, a blogging website also known as “Blogger” has become inaccessible to Indian users as Google appears to have lost its ownership over the domain. Blogger.com is a free platform used by millions of users for blogging. As it used to fall under Google’s ownership, […]
Join the Telegram channel Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integration with other development lifecycle tools. […]
Join the Telegram channel The beginnings of a C2 framework. Currently without all the C2 stuff so far. Generates a dual stage VBS infection vector, and a dual stage HTA infection vector. The variables take into account C2 addresses, Koadic/Empire payloads, and a few delivery mechanisms. The payload files are […]
Join the Telegram channel Russian Prime Minister Mikhail Mishustin said that this spring there was an increase in cybercrime activity. The Prime Minister said this on July 8 in a video message to participants of the international online training on cybersecurity Cyber Polygon-2020 “This spring, we observed an increase in […]
Join the Telegram channel Citrix Software Inc., a multinational American software company whose products are used by 99% of Fortune 100 companies recently released a patch for 11 vulnerabilities that affect Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP (appliance models 4000-WO, 4100-WO, 5000-WO, and 5100-WO). Citrix says these 11 […]
Join the Telegram channel Experts have conducted research and found out an algorithm that can be used to calculate the password to log in to another user’s system on the Internet, if the combination they came up with is too simple, and therefore unreliable. According to the head of the […]
Join the Telegram channel Mail transfer is a common search query. Most commonly, users may migrate due to personal preferences, corporate policies, or support issues. Systems based on the MBOX format are tricky: you may easily export the files, but direct import to Outlook is impossible. That is unless you […]
Join the Telegram channel Federal prosecutors have indicted Andrey Turchin, a 37-year-old citizen of Kazakhstan, on five criminal counts related to his alleged involvement in a financially motivated cybercriminal hacking collective known as Fxmsp that the Department of Justice says cost victims tens of millions of dollars. Turchin — who […]
Join the Telegram channel Super Simple Python Word List Generator for Password Cracking (Hashcat)!I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script […]
Join the Telegram channel A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. IntroductionDorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various search engines for information hidden […]
Join the Telegram channel While the COVID-19 pandemic has made online stores increasingly valuable, some small businesses may not have had the experience around securing data and protecting resources from outside attackers. Here are a few tips to decrease the chance of becoming a victim of a cyber-attack. Make a […]
Join the Telegram channel Researchers have developed a decryption tool for the recently discovered EvilQuest ransomware program designed to target Mac machines. But several analysts now concur that EvilQuest’s malicious encryption may be more of a decoy, while the program’s true purpose appears to be data exfiltration. In a new […]
Join the Telegram channel We have discovered, yet again, another phone model with pre-installed malware provided from the Lifeline Assistance program via Assurance Wireless by Virgin Mobile. This time, an ANS (American Network Solutions) UL40 running Android OS 7.1.1. After our writing back in January—”United States government-funded phones come […]
Join the Telegram channel According to the recent findings, there has been an incident of web skimming attacks on the European and American online store websites. The hackers responsible for the attacks are likely to be state-sponsored from North Korea. Research conducted by cybersecurity experts at Sansec reveals that the […]
Join the Telegram channel We’ve already looked at links under old YouTube videos or in Wikipedia articles which at some point turned bad and began pointing to partner program pages, phishing sites, or even malware. It was as if the attackers were purposely buying up domains, but such a scenario […]
Join the Telegram channel Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10 and CentOS 8, and other versions are not fully tested. There are no implementations of desktop and SELinux related items in this release. The code framework is based on […]
Join the Telegram channel Shhgit finds secrets and sensitive files across GitHub code and Gists committed in near real time by listening to the GitHub Events API. NEW: LIVE VERSION. Find GitHub secrets straight from your browser! Finding secrets in GitHub is nothing new. There are many great tools available […]
Join the Telegram channel In our modern threat landscape, many organizations face challenges that remain difficult to decipher, let alone resolve. In a fast-paced environment where a lot is still unknown, companies need security solutions that boost visibility and empower IT professionals to act confidently and decisively. That’s where modern […]
Join the Telegram channel Editor’s note: The original name for the malware, EvilQuest, has been changed due to a legitimate game of the same name from 2012. The new name, ThiefQuest, is also more fitting for our updated understanding of the malware. The ThiefQuest malware, which was discovered last week, […]
Join the Telegram channel This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to JP Taggart, senior security researcher at Malwarebytes, about the Internet of Things. For years, Internet capabilities have crept into modern consumer […]