Ransomware is one of the biggest cyber security threats organisations and individuals have to deal with and it is so easy for the hacker to get the malware to you – just send you and email. In your rush to deal with your email you mistakeningly open an attachment or …
New botnet in the wild targeting routers and IoT devices
The cyber criminal group Keksec is using Enemybot to attack routers and IoT devices, exploiting a remote code execution (RCE) vulnerability CVE-2022-27226. Enemybot: a new Mirai, Gafgyt hybrid botnet joins the scene | ZDNet New Enemybot botnet blends Linux backdoor bot Gafgyt, Mirai • The Register This botnet is part …
Continue reading “New botnet in the wild targeting routers and IoT devices”
Sophos report even government agencies can miss hackers in their network
Hacker spent nearly five months inside a US regional government network, downloading files, using software and deleting logs, before deploying Lockbit ransomware. Sophos recreated the attack from what was left of the logs and believe the attackers got in through a public facing remote desktop protocol (RDP) port – something …
Continue reading “Sophos report even government agencies can miss hackers in their network”
Ukrainian power grid hack thwarted
This story is doing the rounds everywhere. A joint effort between ESET and Ukraine Computer Emergency Response Team (Cert-UA) defeated the attack, discovering a new variant of the Industroyer malware – which was used in a previous attack on the Ukrainian power grid in December 2016. This malware is associated …
Spring4Shell in the wild executing the Mirai botnet
Hackers have been actively working to exploit the Spring4Shell vulnerability – now it has been detected in the wild deploying the Mirai botnet. Spring4Shell under active exploit by Mirai botnet herders • The Register CVE-2022-22965 Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware (trendmicro.com) …
Continue reading “Spring4Shell in the wild executing the Mirai botnet”