Royal Ransomware adds support for encrypting Linux, VMware ESXi systems

GlobalDefenseBot 6 February

3 minutes

Royal Ransomware operators added support for encrypting Linux devices and target VMware ESXi virtual machines. The Royal Ransomware gang is the latest extortion group in order of time to add support for encrypting Linux devices and target VMware ESXi virtual machines. Other ransomware operators already support Linux encrypting, including AvosLocker, Black Basta, BlackMatter, HelloKitty, Hive, […]

The post Royal Ransomware adds support for encrypting Linux, VMware ESXi systems appeared first on Security Affairs.

breaking news

Italian National Cybersecurity Agency (ACN) warns of massive ransomware campaign targeting VMware ESXi servers

GlobalDefenseBot 6 February

4 minutes

The Italian National Cybersecurity Agency (ACN) warns of an ongoing massive ransomware campaign targeting VMware ESXi servers. The Italian National Cybersecurity Agency (ACN) warns of an ongoing massive ransomware campaign targeting VMware ESXi servers worldwide, including Italian systems. The attackers are attempting to exploit the CVE-2021–21974 vulnerability. According to the ACN, most of the attacks […]

The post Italian National Cybersecurity Agency (ACN) warns of massive ransomware campaign targeting VMware ESXi servers appeared first on Security Affairs.

Russian WhisperGate hackers use data-stealing malware to target Ukraine

CySecBot 5 February

1 minute

Pro-Russian threat actor groups have been ramping up their activities in recent months. Security researchers recently published a report that they had detected a Russian hacking group behind malware attacks being launched by WhisperGate hackers. These …

breaking news

Security Affairs newsletter Round 405 by Pierluigi Paganini

GlobalDefenseBot 5 February

2 minutes

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. CISA adds Oracle, SugarCRM bugs to its Known Exploited Vulnerabilities Catalog GoAnywhere MFT zero-day flaw actively […]

The post Security Affairs newsletter Round 405 by Pierluigi Paganini appeared first on Security Affairs.

Beware: Malicious Apps On Apple & Google Play Push Users into Fake Investments

CySecBot 4 February

1 minute

Threat actors have managed to get their hands on two shady applications that were uploaded to the app stores managed by both Google and Apple. These apps then induced users into making fake investments in cryptocurrencies. The cybersecurity experts at …

breaking news

CERT-FR warns of a new wave of ransomware attacks targeting VMware ESXi servers

GlobalDefenseBot 4 February

3 minutes

A new wave of ransomware attacks is targeting VMware ESXi servers to deliver ransomware, CERT of France warns. The French Computer Emergency Response Team (CERT-FR) warns that threat actors are targeting VMware ESXi servers to deploy ransomware. CERT-FR reported that threat actors behind these ransomware attackers are actively exploiting the vulnerability CVE-2021-21974. “OpenSLP as used […]

The post CERT-FR warns of a new wave of ransomware attacks targeting VMware ESXi servers appeared first on Security Affairs.

Onenote Malware: Classification and Personal Notes

CySecBot 4 February

11 minutes

During the past 4 months Microsoft Onenote file format has been (ab)used as Malware carrier by different criminal groups. While the main infection vector is still on eMail side – so nothing really relevant to write on – the used techniques, the templates and the implemented code to inoculate Malware changed a lot. So it […]

breaking news

Russia-linked Gamaredon APT targets Ukrainian authorities with new malware

GlobalDefenseBot 3 February

2 minutes

Russia-linked threat actor Gamaredon employed new spyware in cyber attacks aimed at public authorities and critical information infrastructure in Ukraine. The State Cyber Protection Centre (SCPC) of Ukraine warns of a new wave of targeted attacks conducted by the Russia-linked APT group Gamaredon (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa). The attacks aimed at public authorities and critical information […]

The post Russia-linked Gamaredon APT targets Ukrainian authorities with new malware appeared first on Security Affairs.

Prilex POS malware evolves to block contactless transactions

CySecBot 2 February

1 minute

A new version of the Prilex POS malware has found a novel way to steal your credit card information.
The post Prilex POS malware evolves to block contactless transactions appeared first on TechRepublic.

TrickGate: Malicious Software Outwitting Antivirus for 6 Years

CySecBot 2 February

1 minute

By Habiba Rashid
According to researchers, there are a few key points that allow a packer such as TrickGate to remain efficient and undetectable for so many years.
This is a post from HackRead.com Read the original post: TrickGate: Malicious Software …