REvil threat actors may be behind a set of PowerShell scripts developed for encryption and weaponized to exploit vulnerabilities in corporate networks, the ransom note suggests. Exchange Servers Targeted by ‘Epsilon Red’ Malware
Ongoing spear-phishing attacks aim at stolen Windows credentials for ICS suppliers worldwide. Steganography Anchors Pinpoint Attacks on Industrial Targets
“Password-killing” authentication efforts may be on a road to nowhere. Passwords: Here to Stay, Despite Smart Alternatives?
Cryptocurrency angel investor Michael Terpin seeks damages for “gross negligence” by the carrier, alleging it turned a blind eye to store employees’ malicious activities. AT&T Faces 4M Legal Challenge Over SIM-Jacking Rings
New macOS malware targets crypto community via chat networks Slack and Discord. MacOS Malware Targets Cryptocurrency Community on Slack, Discord
Ransomware adopts Process Doppelgänging technique to avoid antivirus researchers and avoid detection in a newly identified malware double threat targeting users in the U.S., Kuwait and Germany. Variant of SynAck Malware Adopts Doppelgänging Technique
Hundreds of sites vulnerable to ‘Drupalgeddon 2.0’ have been impacted by a massive cryptomining campaign. Cryptojacking Campaign Exploits Drupal Bug, Over 400 Websites Attacked
The malware targets Windows servers with a cornucopia of well-known exploits, all within a single executable — including the EternalBlue NSA hacking tool. MassMiner Takes a Kitchen-Sink Approach to Cryptomining
Researchers have neutralized the latest strain of the Jaff ransomware, releasing a decryption tool for unlocking files. Decryption Utility Unlocks Files Encrypted by Jaff Ransomware
Phishing sites are deploying freely available TLS certificates in order to dupe victims into thinking they’re visiting a safe site. Rash Of Phishing Attacks Use HTTPS To Con Victims