Month: August 2023

CISA: CISA Releases One Industrial Control Systems Advisory

August 1, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on August 1, 2023. This...

7b2eade0667be49d03a1e2d79148de8df5cbcb1b73d62a169a163a02bc40c671

Uncovering RedStinger – Undetected APT cyber operations in Eastern Europe since 2020

August 1, 2023

This blog post was authored by Malwarebytes' Roberto Santos and Fortinet's Hossein Jazi While the official conflict between Russia and...

2e6034211b68def84104c754fcf16e1f8413e2aef081a9f06271bd3dc9724689

Malvertising via brand impersonation is back again

August 1, 2023

Web search is about to embark on a new journey thanks to artificial intelligence technology that online giants such as Microsoft and...

e95c035104ace34aeefad667e270b8ec76462645fa5f9ad8ffc72b0f8b952fe4

The 2023 State of Ransomware in Education: 84% increase in attacks over 6-month period

August 1, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on...

35b5c61d555b4d7b70a836679bb8b9c35eeeb9a36b06c2352dca0fb141c99681

Facebook clickbait leads to money scam for users

August 1, 2023

Online criminals are notorious for lurking on social media sites and tricking users into visiting malicious links. We recently observed a scheme where Facebook users are...

7ac25ea32680517e598f88ac8de4d827a2da6baa8629c97e7c63acb90eafeb4f

Malicious ad for USPS fishes for banking credentials

August 1, 2023

We often think of malvertising as being malicious ads that push malware or scams, and quite rightly so these are...

d457f5ede99703b6aca9a554f699820a4e3e5f9ce0846923aaa020fcb143145d

Ransomware review: June 2023

August 1, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on...

a374614fda30998e18e51b5a408f9cb2f2e585930254362ac2fdc0f437bf2f5f

Criminals target businesses with malicious extension for Meta’s Ads Manager and accidentally leak stolen accounts

August 1, 2023

Like all social media platforms, Facebook constantly has to deal with fake accounts, scams and malware. We have written about scams...

036f0819fa185b365b45f5ae1e6cd55e0be6458b8b87fbf3cbdc3f8586b914a8

Ransomware review: July 2023

August 1, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on...

348b26ad7f6b9a8c68ca9106e4eb718764d2dd0c1f0b63ded32a40b72b5308a7

FakeSG enters the ‘FakeUpdates’ arena to deliver NetSupport RAT

August 1, 2023

Over 5 years ago, we began tracking a new campaign that we called FakeUpdates (also known as SocGholish) that used...

HackerOne Bug Bounty Disclosure: b-bypass-two-factor-authentication-b-spaceboy

August 1, 2023

Company Name: b'LinkedIn' Company HackerOne URL: https://hackerone.com/linkedin Submitted By:b'spaceboy20'Link to Submitters Profile:https://hackerone.com/b'spaceboy20' Report Title:b'bypass two-factor authentication.'Report Link:https://hackerone.com/reports/1842183Date Submitted:01 August 2023...

HackerOne Bug Bounty Disclosure: b-apache-mod-negotiation-filename-bruteforcing-https-api-ratelimited-me-b-codeslayer

August 1, 2023

Company Name: b'RATELIMITED' Company HackerOne URL: https://hackerone.com/ratelimited Submitted By:b'codeslayer137'Link to Submitters Profile:https://hackerone.com/b'codeslayer137' Report Title:b'Apache mod_negotiation filename bruteforcing https://api.ratelimited.me'Report Link:https://hackerone.com/reports/475167Date Submitted:01...

HackerOne Bug Bounty Disclosure: b-smuggling-content-in-pr-with-refs-replace-in-github-b-inspector-ambitious

August 1, 2023

Company Name: b'GitHub' Company HackerOne URL: https://hackerone.com/github Submitted By:b'inspector-ambitious'Link to Submitters Profile:https://hackerone.com/b'inspector-ambitious' Report Title:b'Smuggling content in PR with refs/replace in...

HackerOne Bug Bounty Disclosure: b-operation-createorupdateso-lineupmutation-does-not-restrict-multiple-captains-b-fixenet

August 1, 2023

Company Name: b'Sorare' Company HackerOne URL: https://hackerone.com/sorare Submitted By:b'fixenet'Link to Submitters Profile:https://hackerone.com/b'fixenet' Report Title:b'Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains'Report...