To Customer Support To Customer Support

Events
Leaderboard
Customer Support

Nastiest Malware 2022

5 months ago

Home
Community overview
Welcome

Welcome

News, Announcements, Tech Discussions

40662 Topics

Recently active

Most replies Most views Newest first

Jasper_The_RasperModerator

posted in Security Industry News

TylerMSr. Security Analyst & Community Manager

published in Cybersecurity Standpoint

Artificial intelligence and machine learning in cybersecurityBlog

Artificial intelligence (AI) and machine learning (ML) are going to revolutionize the field of cybersecurity. These technologies can be used to improve the detection and prevention of cyber threats, making it easier for organizations to protect their networks and data. However, as with any new technology, there are also potential risks and challenges that must be considered.One of the biggest benefits of AI and ML in cybersecurity is their ability to automatically detect and respond to cyber threats. These technologies can be used to analyze large amounts of data, such as network traffic logs and characteristics of files to identify patterns and anomalies that may indicate a cyber attack or malicious nature. They can also be used to automatically respond to threats, such as by shutting down a compromised system or blocking a malicious IP address. Additionally, the benefits of AI and ML in cybersecurity is their ability to improve the efficiency and effectiveness of incident response. T

44418

3 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Ferrari confirms data breach after receiving a ransom demand from an unnamed extortion group

March 21, 2023 By Pierluigi Paganini Ferrari disclosed a data breach after receiving a ransom demand from an unnamed extortion group that gained access to some of its IT systems.Ferrari disclosed a data breach after it received a ransom demand from an unnamed extortion group that breached its IT systems. The threat actor claims to have stolen certain client details. The company immediately launched an investigation into the incident with the support of a third-party cybersecurity firm and informed relevant authorities. “Ferrari N.V. (NYSE/EXM: RACE) (“Ferrari”) announces that Ferrari S.p.A., its wholly-owned Italian subsidiary, was recently contacted by a threat actor with a ransom demand related to certain client contact details.” reads the noticed published by the luxury car maker. “Upon receipt of the ransom demand, we immediately started an investigation in collaboration with a leading global third-party cybersecurity firm. In addition, we informed the relevant authorities and ar

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

PayPal Phishing Scam Uses Invoices Sent Via PayPal

August 18, 2022 By Brian Krebs Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives — which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction — state that the user’s account is about to be charged hundreds of dollars. Recipients who call the supplied toll-free number to contest the transaction are soon asked to download software that lets the scammers assume remote control over their computer.KrebsOnSecurity recently heard from a reader who received an email from paypal.com that he immediately suspected was phony. The message’s subject read, “Billing Department of PayPal updated your invoice.” A copy of the phishing message included in the PayPal.com invoice. >> Full Article <<

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Acropalypse flaw in Google Pixel’s Markup tool allowed the recovery of edited images

March 20, 2023 By Pierluigi Paganini The Acropalypse flaw in the Markup tool of Google Pixel allowed the partial recovery of edited or redacted screenshots and images.Security researchers Simon Aarons and David Buchanan have discovered a vulnerability, named ‘Acropalypse,’ in the Markup tool of Google Pixel. The Markup tool is a built-in Markup utility, released with Android 9 Pie that allows Google Pixel users to edit (crop, add text, draw, and highlight) screenshots.The vulnerability allowed the partial recovery of the original, unedited image data of a cropped and/or redacted screenshot. >> Full Article <<

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Breached hacking forum shuts down, fears it's not 'safe' from FBI

March 21, 2023 By Bill Toulas The notorious Breached hacking forum has shut down after the remaining administrator, Baphomet, disclosed that they believe law enforcement has access to the site's servers.Breached was a popular hacking and data leak forum notorious for hosting, leaking, and selling data obtained from breached companies, governments, and various organizations. It was a community that attracted people from all realms of cybercrime, including ransomware gangs, data extortionists, security researchers, and those simply interested in the darker side of cybersecurity.The site, and its members, have been responsible for a wide range of breaches, extortion attempts, and ransomware attacks, leaking the data for many high-profile attacks. These breaches include DC Health Link, Twitter, RobinHood, Acer, Activision, and many more. >> Full Article <<

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Custom 'Naplistener' Malware a Nightmare for Network-Based Detection

Threat actors are using legitimate network assets and open source code to fly under the radar in data-stealing attacks using a set of custom malware bent on evasion. March 21, 2023 By Elizabeth Montalbano A group monitored as REF2924 by Elastic Security Labs is wielding novel data-stealing malware — an HTTP listener written in C# dubbed Naplistener by the researchers — in attacks against victims operating in southern and southeast Asia.According to a blog post by Elastic senior security research engineer Remco Sprooten, in that region of the world, network-based detection and prevention technologies are the de facto method for securing many environments. But Naplistener — along with other new types of malware used by the group —appear "designed to evade network-based forms of detection," says Jake King, Elastic Security's director of engineering.So, don't sleep on that defense-in-depth strategy. >> Full Article <<

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

NEW THREAT ACTOR HITS UKRAINIAN AGENCIES

March 21, 2023 By Dennis Fisher The number of APT groups targeting organizations in Ukraine as part of the war with Russia continues to grow, as researchers have identified a new threat actor that has compromised agricultural, government, and transportation organizations in the country with a previously unseen attack framework and backdoor known as PowerMagic.The group, which researchers at Kaspersky discovered and is as-yet unnamed, likely uses spear phishing as its initial access vector, luring victims to an attacker-controlled URL that directs them to a ZIP archive. That archive contains an LNK file and a PDF decoy document that in some cases is named in a similar way to the LNK file to add legitimacy. If the victim opens the LNK file, it will download and execute an MSI file hosted on a remote server. That eventually leads to the installation of the PowerMagic backdoor, which is written in PowerShell and uses OneDrive and Dropbox folders to transport files. >> Full Article &l

4 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Android phones can be hacked just by someone knowing your phone number

March 17, 2023 By Graham Cluley Well, this isn’t good.Google has issued a warning that some Android phones can be hacked remotely, without the intended victim having to click on anything.If an attack is successful, the hacker could access data going through the Samsung Exynos chipsets used in many devices, scooping up call information and text messages.And what does a hacker need to know about you to target your phone?Your phone number. >> Full Article <<

5 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Why You Should Opt Out of Sharing Data With Your Mobile Provider

March 20, 2023 By Brian Krebs A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection. Here’s a primer on why you might want to do that, and how. Image: Shutterstock Telecommunications giant AT&T disclosed this month that a breach at a marketing vendor exposed certain account information for nine million customers. AT&T said the data exposed did not include sensitive information, such as credit card or Social Security numbers, or account passwords, but was limited to “Customer Proprietary Network Information” (CPNI), such as the number of lines on an account. >> Full Article <<

5 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Threat actors abuse Adobe Acrobat Sign to distribute RedLine info-stealer

March 20, 2023 By Pierluigi Paganini Threat actors are abusing the legitimate Adobe Acrobat Sign service to distribute the RedLine information stealer.Avast researchers reported that threat actors are abusing the legitimate Adobe Acrobat Sign service to distribute the RedLine information stealer.Adobe Acrobat Sign allows registered users to sign documents online and send a document signature request to anyone. This latter process consists of generating an email that is sent to the intended recipients. The message includes a link to the document that that will be hosted on Adobe itself. The experts pointed out that the users can also add a text to the email, this option can be abused by the attackers. >> Full Article <<

5 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Hackers target .NET developers with malicious NuGet packages

March 20, 2023 By Sergiu Gatlan Threat actors are targeting and infecting .NET developers with cryptocurrency stealers delivered through the NuGet repository and impersonating multiple legitimate packages via typosquatting.Three of them have been downloaded over 150,000 times within a month, according to JFrog security researchers Natan Nehorai and Brian Moussalli, who spotted this ongoing campaign.While the massive number of downloads could point to a large number of .NET developers who had their systems compromised, it could also be explained by the attackers' efforts to legitimize their malicious NuGet packages. >> Full Article <<

5 days ago

Jasper_The_RasperModerator

posted in Security Industry News

CYBERCRIMEMillions Stolen in Hack at Cryptocurrency ATM Manufacturer General Bytes

Cryptocurrency ATM maker General Bytes discloses a security incident resulting in the theft of millions of dollars’ worth of crypto-coins. March 20, 2023 By Ionut Arghire Cryptocurrency ATM manufacturer General Bytes over the weekend disclosed a security incident that resulted in the theft of millions of dollars’ worth of funds.The attackers, the company says, exploited a vulnerability in the master service interface that Bitcoin ATMs use to upload videos, which allowed them to upload a JavaScript script and execute it with batm user privileges.“The attacker scanned the Digital Ocean cloud hosting IP address space and identified running CAS services on ports 7741, including the General Bytes Cloud service and other GB ATM operators running their servers on Digital Ocean (our recommended cloud hosting provider),” the company says. >> Full Article <<

5 days ago

acooldozenBronze VIP

asked in Community 101

Allstate Identity Protection

Several of my friends that I have turned on to Webroot, are questioning the nag screen on the Application, regarding Allstate. Is this being offered to all Webroot customers or in the United States only? Also there are different costs being advertised. One at $19.95, another at $23.99?Thanx much,

5 days ago

ConnorMThreat Research Analyst

published in Security Industry News

Cyber News Rundown: Phishing attacks capitalizing on SVB collapse on the riseNews

Phishing campaigns taking advantage of the uncertainty following the collapse of Silicon Valley Bank (SVB) have been using phishing sites to try to steal SVB users’ crypto wallet information. In other cybersecurity news, insurer DC Health Link – the main insurer for many U.S. House of Representatives’ members and staff – suffered a data breach potentially exposing patient information.LockBit leaks data on LA Housing AuthorityFollowing an investigation into a security incident at the Housing Authority of the City of Los Angeles (HACLA), officials have confirmed that the LockBit ransomware group had unauthorized access to their systems for nearly a year and were able to exfiltrate a significant amount of sensitive data. LockBit posted the stolen data to their leak site at the end of January, but after a month of negotiations, no ransom appears to have been paid and the download link on their leak site is no longer active.DC Health Link breach exposes House of Representatives’ dataThe mai

14510

6 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Feds arrest and charge exiled Chinese billionaire over massive crypto fraud

This one has it all: Donald Trump’s inner circle, a Beijing bot backlash, conspiracy theories, and more March 17, 2023 By Simon Sharwood Meet the newest member of the crypto rogues' gallery: Ho Wan Kwok, aka Guo Wengui, aka Miles Guo, whom the US Department of Justice on Wednesday arrested over what investigators have described as a "sprawling and complex scheme … to solicit investments in various entities and programs through false statements and representations to hundreds of thousands of Kwok's online followers."Kwok/Guo has a fascinating back story. Born in China, he became a property entrepreneur and was rated as a billionaire. He left China in 2014 as multiple controversies swirled around his interests and actions, and by 2017 he was resident in New York and became a strident critic of the Chinese government, circulating vivid theories about his troubles and Beijing's role in them. >> Full Article <<

7 days ago

1
2
3
4
5
...
1627

Page 2 / 1627

Badges

jhartnerd123has earned the badge Most Wanted
ConnorMhas earned the badge Broadcast Boss
ConnorMhas earned the badge Hot Topic Hero
ConnorMhas earned the badge News: Posted 50 topics!
TylerMhas earned the badge News: Posted 100 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

Customer Support
Webroot.com
Blog
Status Page
Community Guidelines
Legal
Privacy
Cookie Preferences

We have recently updated our Privacy Policies. We encourage you to read the full terms here.