📊 2023 OpenText Cybersecurity Threat Report
News, Announcements, Tech Discussions
We are very excited to share today's announcement highlighting Webroot's achievements over the last quarter and fiscal year, including significant bookings growth, strategice security alliances and partnerships, new security solutions introduced, and more. [url=http://bit.ly/1EOKLSe]Check out the full press release![/url]
[img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/7477iF179481C9BACA919.jpg[/img] A security researcher has uncovered what Google has described as a “high impact” bug in its account recovery process, which could have potentially allowed hackers to trick users into handing over their passwords. White-hat hacker Oren Hafif found the security hole, which has now been fixed by Google. On his blog, Hafif describes how the security hole could be exploited, and made a video (blessed with a suitably funky beat) demonstrating how it could work. Hafif’s demonstration of how to steal a Google password starts simply enough – with a fairly normal looking phishing email, claiming to come from Google. [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/7485iF68AF1BEB5C8E1C3.jpg[/img] [url=http://grahamcluley.com/2013/11/security-hole-gmail-password-recovery-system/]Full Topic[/url]
COVID-19 has absolutely dominated headlines this year, so it’s of no surprise that criminals have taken advantage of this to where most of the threat landscape this year is also heavily COVID-19 related. While this list may define payloads into different categories of malware, note that many of these bad actor groups contract work from others. This will allow each group to specialize on their respective payload and perfect it. This criminal underground community working together is what makes the threat landscape as nasty as ever.Ransomware continues to dominate headlines of breaches and the amount of devastation they cause. The average ransom payment is now over $175k and looks to clear $200k before the end of the year. Not only are most ransomware campaigns specifically targeting businesses over consumers, but some of them are now leaking your data if you decide not to pay the ransom. This is done so that if the victim tries to not pay the ransom and sweep it under the rug, they will
Copycat Guardian site used by loan company to boost its credibility by Patrick Collinson and Miles Brignall The Guardian, Friday 18 July 2014 It looks virtually identical to a conventional online page of the Guardian – the same layout, typography, links to other sections, and comments below the line. The story, with Money reporter Miles Brignall's byline, gives a glowing account of a company called Business Grants & Loans. But the page is entirely fake, hosted on a copycat website and apparently designed by fraudsters to give the impression that the company has won independent endorsement from the Guardian – and to lure victims into handing over hundreds of pounds each. Until now, fake websites have tended to be clones of bank websites or institutions such as HM Revenue & Customs. Conmen send out "phishing" emails which convince people to click through to the bank, but, in reality, they are taken through to the copycat website designed to illegally capture log-ins
My name is Thomas from FL. I just purchased Webroot protection for my PC and iPhones.
Great! I'll take a venti non-fat latte, please. :)
I wanted to take a second to say thanks to ? for attaining the rank of Sr. Community Guide! Thank you for all that you do and we look forward to continuing to work with you! We appreciate all of your efforts!! Regards,
[b]19th July 2017 By [url=https://betanews.com/author/ianbarker/]Ian Barker[/url][/b] [img]https://betanews.com/wp-content/uploads/2017/07/Online-card-crime-600x400.jpg[/img] E-learning courses costing under $1,000 are giving aspiring cyber criminals the potential to make $12k a month, based on a standard 40-hour working week according to new research. The study from digital risk management company [url=https://www.digitalshadows.com]Digital Shadows[/url] finds the courses, available to Russian speakers only, last for six weeks and comprise 20 lectures with five expert instructors. The course includes webinars, detailed notes and course material at a cost of RUB 45,000 ($745), plus $200 for course fees. With the average Russian earning under $700 a month, it's easy to see why the potential to earn 17 times as much might be attractive. [url=https://betanews.com/2017/07/19/credit-card-crime-training/]Full Article.[/url]
Darren Niller promoting Webroot rapid-fire style at the #MESW2015 conference in L.A. [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21610i32B84E38E55C5EFE.jpg[/img] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21611iB9F736C2B7F95E1B.jpg[/img] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21609i90831998CDBD0A49.jpg[/img]
To misquote Nathan Bedford Forrest, Webroot gets their firstest with the leastest (resources, that is). Check out the full report attached.
FireEye Research Labs identified a new Internet Explorer (IE) zero-day exploit used in targeted attacks. The vulnerability affects IE6 through IE11, but the attack is targeting IE9 through IE11. This zero-day bypasses both ASLR and DEP. Microsoft has assigned CVE-2014-1776 to the vulnerability and released [url=https://technet.microsoft.com/en-US/library/security/2963983]security advisory[/url] to track this issue. Threat actors are actively using this exploit in an ongoing campaign which we have named “Operation Clandestine Fox.” However, for many reasons, we will not provide campaign details. But we believe this is a significant zero day as the vulnerable versions represent about a quarter of the total browser market. We recommend applying a patch once available. [url=http://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html]Full Article[/url]
We're in Seattle doing some training for Datec folks. After the training everyone went out to a soccer game: [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21185i48E1DB1044961F34.jpg[/img] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21186i35CB28341FE5543F.jpg[/img] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/21187i24665BADD128757C.jpg[/img]
Do I need to sync LastPass with Webroot's PM, or is this automatic? And which one takes precedence?
Attackers are compromising Linux and Windows systems to install a new malware program designed for launching distributed denial-of-service (DDoS) attacks, according to researchers from the Polish Computer Emergency Response Team (CERT Polska). The malware was found by the Polish CERT at the beginning of December and the Linux version is being deployed following successful dictionary-based password guessing attacks against the SSH (Secure Shell) service. This means only systems that allow remote SSH access from the Internet and have accounts with weak passwords are at risk of being compromised by attackers distributing this malware. ”We were able to obtain a 32-bit, statically linked, ELF file,” the Polish CERT researchers said Monday in a [url=http://www.cert.pl/news/7849/langswitch_lang/en]blog post[/url]. The executable runs in daemon mode and connects to a command-and-control (C&C) server using a hard-coded IP (Internet Protocol) address and port, they said. When first run, t
BROOMFIELD, Colo., Sept. 9, 2015 /PRNewswire/ -- [url=http://www.webroot.com/]Webroot[/url], the market leader in intelligent cybersecurity for endpoints and collective threat intelligence, today announced a partnership with Exeed Limited, a New Zealand-based IT distribution company. The agreement provides retailers, IT resellers and managed service providers (MSPs) across New Zealand access to Webroot® cloud-based big data analytics, automated machine learning and intelligent endpoint security to enhance home and business protection. [url=http://www.virtual-strategy.com/2015/09/09/webroot-and-exeed-partner-deliver-cloud-based-endpoint-protection-and-collective-threat-i#axzz3lH2kKgAY]Full article here[/url]. And some coverage: [url=http://www.reseller.co.nz/article/584190/webroot-wins-over-kiwi-resellers-exeed-cloud-distie-deal/]http://www.reseller.co.nz/article/584190/webroot-wins-over-kiwi-resellers-exeed-cloud-distie-deal/[/url]
July 5th, 2014, 17:32 GMT · By [url=http://news.softpedia.com/editors/browse/ionut-ilascu]Ionut Ilascu[/url] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12188iF7F24D30825450D2.png[/img] [i]Fake Java update alert[/i] [b]A new Java update scam is currently circulating online in search of fresh victims. It alerts the computer user that, in order to view some video content, they have to update to an odd Java 13.6.[/b] Cybercriminals can resort to various ways to show a potential victim the update alert message. They generally use social networks to promote fake footage of some important event. [url=http://news.softpedia.com/news/Java-Update-13-6-Required-In-Scam-449644.shtml]Full Article[/url]
So you've just decided to log into that website you go to about once every couple of weeks, and now it's time to enter your password. What was that password again? Did you write it down somewhere? If so, that wasn't good. What if somebody found it? Did you make it so easy you'll never forget it? If so, it will probably be easily crackable by a [url=https://community.webroot.com/member/profile?mid=4592]Jeff[/url] before he discovered Webroot's password manager. [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/4534i1BCDEB0B1B5F6039.jpg[/img] Shortly after discovering Webroot's password manager, [url=https://community.webroot.com/member/profile?mid=4592]Jeff[/url]'s condition improved dramatically. In all seriousness though, if you're having issues with passwords, maybe it's time to take a look at a password management solution. With a password manager, you no longer need to remember that your password for your banking site
[b]How one box was converted into a Bitcoin-mining, DoS-spewing, bug-exploiting bot.[/b] Like most mainstream operating systems these days, fully patched installations of Linux provide a level of security that requires a fair amount of malicious hacking to overcome. Those assurances can be completely undone by a single unpatched application, as Andre' DiMino has demonstrated when he documented an Ubuntu machine in his lab being converted into a Bitcoin-mining, denial-of-service-spewing, vulnerability-exploiting hostage under the control of attackers. A security researcher with George Washington University, DiMino noticed several IP addresses attempting to hijack the Linux server by exploiting a [url=http://www.kb.cert.org/vuls/id/520827]now-patched PHP flaw[/url] that gave attackers the ability to remotely execute commands on vulnerable machines. DiMino was curious to know what the people behind the attacks intended to do with his machine, so he set up a "honeypot" box that, for rese
[H2]Hayter's gonna hate[/H2]By [url=http://www.theregister.co.uk/Author/2578]John Leyden[/url], 17 Apr 2014 Software that claims to detect the presence of OpenSSL's Heartbleed bug in servers, PCs and other gear may falsely report a system to be safe when users are actually in danger, according to a security consultancy. This finding is disputed by developers publishing tools that test for the vulnerability. The teams behind Nessus, Metasploit, Nmap and others have each released utilities for sensing whether or not computers and gadgets are affected by the [url=http://www.theregister.co.uk/2014/04/09/heartbleed_explained/]password-leaking Heartbleed flaw[/url]. "The problem is, most of them have bugs themselves which lead to false negatives results: that is, a result which says a system is not vulnerable when in reality it is," claimed Adrian Hayter, senior penetration tester at security consultancy CNS Hut3. "With many people likely running detect
A tech cleaned up my computer yesterday and downloaded Webroot on my computer. Now I have discovered: 1. The $250.00 that I paid for this service was a bit more than the $50.00 others are paying. 2. He only downloaded it onto my laptop but my desktop is still using PCMRI. Which was also a rip-of. 3. I did not receive a key code for my rather expensive security. 4. I am unable to make contact with him. 5. He told me this was a one time expense. "The security is for your lifetime". 6. I am feeling incredibly old and very stupid at the moment. Any suggestions? margot927
A couple of days ago and every day since I checked my Windows 10 Network and observed some strange devices that showed up on it. My PC is Ethernet-connected only; I am using a TP Link Archer C7 wireless router. After much research, I found people have been complaining about this (Windows 8, too) since 2013 and as recently as December 2016. The number of threads is huge, including from MS itself, and I don't believe any of the reasons for this stuff happening or most of the suggested solutions. Most suggestions are that machines are picking up nearby devices or drive-by's. I don't believe that explanation because most of the specific device names are the same in many cases with people spread out all over the USA and beyond. Here's just one example of somebody else that saw "full-ford": [url=http://www.overclock.net/t/1583033/strange-unknown-devices-on-my-network]http://www.overclock.net/t/1583033/strange-unknown-devices-on-my-network[/url] I've noticed
[url=http://indiaeducationdiary.in/Shownews.asp?newsid=27447]CloudmantraTM Partners with Webroot® to Offer Innovative Cloud-based Endpoint Protection in India [/url]
