Durham, N.C. bull rushed by ransomware; recovery underway
The city of Durham, North Carolina and the government of Durham County have experienced disruptions since a ransomware attack last...
Month: March 2020
Don’t get fooled again: Fake coronavirus emails impersonate the WHO to deliver FormBook trojan
Fears over the novel coronavirus have triggered mass quarantines, Purell and Clorox shortages and financial market turmoil. As global concerns...
A week in security (March 2 – 8)
Last week on Malwarebytes Labs, we fired up part 1 of our series on child identity theft, asked how well...
International Women’s Day: awareness of stalkerware, monitoring, and spyware apps on the rise
Nine months ago, Malwarbytes recommitted itself to detecting invasive monitoring apps that can lead to the excessive harm of women—most...
Government based hacking groups are attacking Microsoft Exchange Servers
Various government-backed hacking groups and APTs are targeting and exploiting a vulnerability in Microsoft Exchange email servers. The vulnerability was...
Evil SSDP – Spoof SSDP Replies And Create Fake UPnP Devices To Phish For Credentials And NetNTLM Challenge/Response
This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear...
Proton Framework – A Windows Post Exploitation Framework Similar To Other Penetration Testing Tools Such As Meterpreter And Powershell Invader Framework
About Proton FrameworkProton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and...
How to Secure Containers, Applications, and Serverless Environments
This is the final post in our four-part series on security in the cloud. In part one, we discussed the...
Users can now Use 2 Step Verification on their Chrome and Safari Browser
Google has launched a new feature for ensuring users' security. You will now be able to enroll for 2 Factor...
250,000+ Login/Passwords Leaked in The Trident Crypto Fund Data Breach
More than 260,000 customers’ data was compromised online in a gigantic data breach that went down pretty recently.Trident Crypto Fund,...
NTLMRecon – A Tool To Enumerate Information From NTLM Authentication Enabled Web Endpoints
Note that the tool is still under development. Things may break anytime - hence, beta!A fast and flexible NTLM reconnaissance...
HoneyBot – Capture, Upload And Analyze Network Traffic
HoneyBot is a set of scripts and libraries for capturing and analyzing packet captures with PacketTotal.com. Currently this library provides...
Encryption Flaws Allow Hackers to Steal Vehicles without Leaving a Trace
New vulnerabilities were revealed earlier this week in the encryption frameworks utilized by immobilizers, the radio-enabled gadgets within cars that...
Lithuania leads a European Union Cyber Rapid Response Team (CRRT) at the European Union
Lithuania, the Netherlands, Poland, Romania, Croatia, and Estonia signed a Memorandum on the establishment of a European Union Cyber Rapid...
HTTP Asynchronous Reverse Shell – Asynchronous Reverse Shell Using The HTTP Protocol
Today there are many ways to create a reverse shell in order to be able to remotely control a machine...
Entropy Toolkit – A Set Of Tools To Exploit Netwave And GoAhead IP Webcams
Entropy Toolkit is a set of tools to exploit Netwave and GoAhead IP Webcams. Entropy is a powerful toolkit for...
Don’t install that security certificate; it’s a malware scam
Cybercriminals have been compromising websites to display a fake security certificate error message in hopes of tricking visitors into downloading...
Bring your own privacy: VPNs for consumers and orgs
VPNs (virtual private networks) have been popular for quite some time now, and they’re worth a huge amount of money...
Attention! Malvertising Campaigns Using Exploit Kits On The Rise
Of all the things that online advertising could be used for, spreading malware is the one that throws you off...
Group-IB informed about the distribution of fake news about 20 thousand coronaviruses infected in Moscow
A fake audio recording appeared on the Internet, where the girl reports about 20 thousand cases of coronavirus COVID-19 in...
SharpRDP – Remote Desktop Protocol .NET Console Application For Authenticated Command Execution
To compile open the project in Visual Studio and build for release. Two DLLs will be output to the Release...
Ghost Framework – An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device
Ghost Framework is an Android post exploitation framework that uses anAndroid Debug Bridge to remotely access an Android device. Ghost...
Technology and the power of moral panic
Moral panic is a fascinating topic, and often finds itself tied up in the cutting edge-technology of the times once it...
Group-IB spottted new fake messages about the coronavirus during the day
Group-IB, a company that specializes in preventing cyberattacks has revealed new fake messages about the spread of coronavirus over the...
