Cybersecurity News
Average Ransom Payments Declined Last Quarter
More victims appear to be realizing that paying a ransom doesn't guarantee stolen data will be purged.02 February 2021
Crypto Crook Hired Steven Seagal to Promote Scam, Now Faces Charges
Feds charged California-based private detective for stealing $11M from investors, with help from actor Steven Seagal.
02 February 2021
‘ValidCC,’ a Major Payment Card Bazaar and Looter of E-Commerce Sites, Shuttered
ValidCC, a dark web bazaar run by a cybercrime group that for more than six years hacked online merchants and sold stolen payment card data, abruptly closed up shop last week. The proprietors of the popular store said their servers were seized as part of a coordinated law enforcement operation designed to disconnect and confiscate its infrastructure.02 February 2021
RF Enables Takeover of Hostile Drones
Tempting as it may be to blast drones out of the sky, a less aggressive approach may yield better data about attackers - and keep bystanders safe.02 February 2021
Tiny Kobalos Malware Bedevils Supercomputers to Steal Logins
The sophisticated backdoor steals SSH credentials for servers in academic and scientific high-performance computing clusters.
02 February 2021
Magento Web Skimmers Piggyback in Ongoing Costway Website Compromise
An e-commerce credit-card skimmer is being used by a second skimmer to steal payment data - and both are on Costway's website.
02 February 2021
Attackers Continue to Nibble at Apple's iOS Security
For the second time in less than three months, Apple has patched vulnerabilities in the software for iPhone and iPad, warning that the issues are already being targeted by attackers.02 February 2021
SonicWall Confirms Zero-Day Vulnerability
The confirmation arrives as researchers with NCC Group detect a SonicWall zero-day flaw under active attack.02 February 2021
Google funds project to secure Apache web server project with new Rust component
Funded by Google and led by the Internet Security Research Group, Apache's web server is set to receive a new Rust-based mod_ssl module.02 February 2021
Ransomware gangs made at least $350 million in 2020
The figure represents a 311% increase over ransomware payments recorded the previous your, in 2019.02 February 2021
Fighting Fileless Malware, Part 1: What Is It?
Despite multiple layers of protection, fileless malware cyberattacks remain rampant and difficult to defeat. In this, the first of The Edge's three-part series about the cyberthreat and how to fight back, you'll learn what fileless malware is and why it's so dangerous.
02 February 2021
Agent Tesla Trojan ‘Kneecaps’ Microsoft’s Anti-Malware Interface
A new version of the Agent Tesla RAT can 'kneecap' endpoint protection software supported by Microsoft ASMI.
02 February 2021
How Recruiting Women Can Help Solve Security's Biggest Problems
We can solve cybersecurity's longstanding talent gap by bringing more women into the field.02 February 2021
Identity Theft Spikes Due to COVID-19 Relief
Cases reported to the FTC doubled last year as cybercriminals took advantage of increased filing for government relief benefits due to the pandemic.
02 February 2021
Agent Tesla ramps up its game in bypassing security walls, attacks endpoint protection
The malware now attempts to disable Microsoft antivirus protection.02 February 2021
Interview With a Russian Cybercriminal
A LockBit ransomware operator shares why he became involved in cybercrime, how he chooses victims, and what's in his toolbox.02 February 2021
This Linux malware is hijacking supercomputers across the globe
Kobalos’ codebase is tiny, but its impact is not.02 February 2021
Kobalos – A complex Linux threat to high performance computing infrastructure
ESET researchers publish a white paper about unique multiplatform malware they’ve named Kobalos
The post Kobalos – A complex Linux threat to high performance computing infrastructure appeared first on WeLiveSecurity
02 February 2021
Ransomware gangs are abusing VMWare ESXi exploits to encrypt virtual hard disks
Two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992, reported as abused in the wild.02 February 2021