Cloud Security Alliance News Clipping Site

Tag: malware

  • Slashdot: Malware Infiltrates Pidgin Messenger’s Official Plugin Repository

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/08/30/2047211/malware-infiltrates-pidgin-messengers-official-plugin-repository?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Malware Infiltrates Pidgin Messenger’s Official Plugin Repository Feedly Summary: AI Summary and Description: Yes Summary: The Pidgin messaging app has taken significant action by removing a malicious third-party plugin after it was discovered to be associated with keyloggers and malware. This incident highlights the critical nature of secure plugin…

  • Cloud Blog: A Measure of Motive: How Attackers Weaponize Digital Analytics Tools

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/how-attackers-weaponize-digital-analytics-tools/ Source: Cloud Blog Title: A Measure of Motive: How Attackers Weaponize Digital Analytics Tools Feedly Summary: Adrian McCabe, Ryan Tomcik, Stephen Clement Introduction Digital analytics tools are vital components of the vast domain that is modern cyberspace. From system administrators managing traffic load balancers to marketers and advertisers working to deliver relevant…

  • Hacker News: Hackers infect ISPs with malware that steals customers’ credentials

    —

    by

    system automation
    in

    Source URL: https://arstechnica.com/security/2024/08/hackers-infect-isps-with-malware-that-steals-customers-credentials/ Source: Hacker News Title: Hackers infect ISPs with malware that steals customers’ credentials Feedly Summary: Comments AI Summary and Description: Yes Summary: This text discusses a significant zero-day vulnerability (CVE-2024-39717) affecting the Versa Director virtualization platform, exploited by malicious actors reportedly linked to the Chinese government. The exploitation allows attackers to gain…

  • Slashdot: Hackers Have Found an Entirely New Way To Backdoor Into Microsoft Windows

    —

    by

    system automation
    in

    Source URL: https://developers.slashdot.org/story/24/08/25/2132259/hackers-have-found-an-entirely-new-way-to-backdoor-into-microsoft-windows?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Hackers Have Found an Entirely New Way To Backdoor Into Microsoft Windows Feedly Summary: AI Summary and Description: Yes Summary: The reported breach of a Taiwanese university involved a sophisticated backdoor exploit utilizing DNS tunneling, a technique not commonly encountered. The attack leveraged a recently identified vulnerability in PHP…

  • Slashdot: ARRL Pays $1 Million Ransom To Decrypt Their Systems After Attack

    —

    by

    system automation
    in

    Source URL: https://yro.slashdot.org/story/24/08/25/0232200/arrl-pays-1-million-ransom-to-decrypt-their-systems-after-attack?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: ARRL Pays $1 Million Ransom To Decrypt Their Systems After Attack Feedly Summary: AI Summary and Description: Yes Summary: The American Radio Relay League (ARRL) experienced a significant ransomware attack that exploited vulnerabilities across their systems, leading to a $1 million ransom payment. This incident underscores the emerging sophistication…

  • Cloud Blog: PEAKLIGHT: Decoding the Stealthy Memory-Only Malware

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/peaklight-decoding-stealthy-memory-only-malware/ Source: Cloud Blog Title: PEAKLIGHT: Decoding the Stealthy Memory-Only Malware Feedly Summary: Written by: Aaron Lee, Praveeth DSouza TL;DR Mandiant identified a new memory-only dropper using a complex, multi-stage infection process. This memory-only dropper decrypts and executes a PowerShell-based downloader. This PowerShell-based downloader is being tracked as PEAKLIGHT. Overview Mandiant Managed Defense…

  • Hacker News: New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Creds

    —

    by

    system automation
    in

    Source URL: https://www.securityweek.com/new-phishing-technique-bypasses-security-on-ios-and-android-to-steal-bank-credentials/ Source: Hacker News Title: New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Creds Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text discusses a new phishing tactic identified by ESET that targets mobile banking users on iOS and Android. It highlights how attackers create deceptive Progressive…