A week in security (March 16 – 22)
Last week on Malwarebytes Labs, we concluded our series on child identity theft. We also looked into threat actors and...
News
Rostelecom detected more than a hundred thousand cyberattacks in the North-Western Federal district of Russia
In 2019, the Rostelecom Solar JSOC Monitoring and Response Center for Cyberthreats detected and repelled over 1.1 million external attacks...
DDoS Attacks on the Gaming Giant Blizzard Causing Worldwide Service Disruption
In order to ruin the users' stay at home during their work from home period brought about by COVID-19, the...
Canada Cybersecurity: Health Care Industry Battles Cyberattacks as Experts Call-in Federal Support
Canada's hospitals and clinics are suffering massive cyber threats as the cyberattacks targeting the Canadian healthcare industry saw a sudden...
Starkiller – A Frontend For PowerShell Empire
Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. If you'd like to contribute...
FinalRecon v1.0.2 – OSINT Tool For All-In-One Web Reconnaissance
FinalRecon is a fast and simple python script for web reconnaissance. It follows a modular structure so in future new...
Three Botnets Abuse Zero-Day Vulnerabilities in LILIN’s DVRs!
Not of late, LILIN recorders were found to be vulnerable. Reportedly, botnet operators were behind the zero-day vulnerabilities that were...
ScoringEngine – Scoring Engine For Red/White/Blue Team Competitions
Scoring Engine for Red/White/Blue Team CompetitionsGetting startedDownload Docker. If you are on Mac or Windows, Docker Compose will be automatically...
Astra – Automated Security Testing For REST API’s
REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be...
A Brand New Virus That Incorporates Mining, Hacking and Backdoor Modules
Dubbed as CrazyCoin, a brand new virus has been recently discovered by researchers, which spreads through the NSA leaked EternalBlue...
HTTPS Everywhere – A Browser Extension That Encrypts Your Communications With Many Websites That Offer HTTPS But Still Allow Unencrypted Connections
A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.Getting StartedGet the...
uDork – Google Hacking Tool
uDork is a script written in Python that uses advanced Google search techniques to obtain sensitive information in files or...
Coronavirus news being used to sneak malware past AV programs
In an effort to make malware appear legitimate and help it sneak past security software, groups using two well-known trojans...
Coronavirus scams, found and explained
Coronavirus has changed the face of the world, restricting countless individuals from dining at restaurants, working from cafes, and visiting...
The Federal Security Service (FSB) of the Russian Federation purchased equipment for hacking smart devices – Hacker group Digital Revolution
Hacker group Digital Revolution published documents according to which the FSB ordered the creation of the Fronton program for organizing...
Russian payment systems will switch to using domestic cryptographic information security tools by 2031
Russian payment systems will switch to using domestic cryptographic information security tools by 2031Existing payment systems in Russia will have...
HACKED- Windows 10, macOS, Adobe, VMware, Apple and Oracle at The Pwn2Own 2020!
Pwn2Own is a well-known computer hacking contest which is held once every year at the CanSecWest security conference. In this...
XXExploiter – Tool To Help Exploit XXE Vulnerabilities
I wrote this tool to help me testing XXE vulnerabilities.It generates the XML payloads, and automatically starts a server to...
Maryam v1.4.0 – Open-source Intelligence(OSINT) Framework
OWASP Maryam is an Open-source intelligence(OSINT) and Web-based Footprinting modular/tool framework based on the Recon-ng and written in Python. If...
TrickBot banking trojan introduces RDP brute forcing module
Malicious actors have created a new module for the TrickBot banking trojan that allows the malware to perform brute force...
Security tips for working from home (WFH)
Over the last decade, remote work and working from home has grown in popularity for many professionals. In fact, a...
The issue and circulation of cryptocurrencies will be banned in Russia
On March 16, a Representative of the Bank of Russia, Alexey Guznov, announced a possible ban on the issue and...
Europol Arrests 2 Dozen Suspects of SIM-Swap Fraud Following Cross-Border Investigations
Following an increase in SIM-jacking over the recent months, Europol announces the arrest of at least more than two dozen...
Is WhatsApp the new Coronavirus of Facebook?
The health officials and government authorities are trying their best to inform the public about the safety precautions amid the...
