When malware source code leaks, you can expect increases in attacks. This week, Bleeping Computer warned that the source code for a pretty capable Android banking trojan, Exobot, has leaked. At least two respected security teams have verified the malicious code. Watch today's video to learn more about this leak, and what you can do to avoid this sort of Android … [Read more...]
GandCrab is not a Ransomworm – Daily Security Byte
In May, a new ransomware variant called GandCrab started spreading. It has continued to evolve over the last few months, with attackers changing the way they deliver it and refining its encryption techniques. The latest variant, version 4.1, uses a new encryption method, changes its extension, and was rumored to use an automated SMB spreader similar to Wannacry. However, one of … [Read more...]
D-Link Cert in Malware – Daily Security Byte
A new backdoor trojan with password stealing capabilities has spread lately, which isn't that unusual save for the fact that this one uses a stolen D-Link digital certificate. Watch today's video to learn a bit more about the Plead malware, and how its use of stolen certificates might help it get past some security mechanisms. Episode Runtime: 1:26 Direct YouTube … [Read more...]
VPNFilter Infects Over 500,000 Consumer Routers
Last week, researchers at Cisco Talos published an early analysis of an APT malware called “VPNFilter” which they estimate has infected over 500,000 small and home office (SOHO) routers in at least 54 countries. A few hours later, the FBI announced that it had seized, through court order, a key domain name for the malware’s command and control (C2) botnet. VPNFilter is a … [Read more...]
Sophisticated Slingshot Attack – Daily Security Byte
The researchers at Kaspersky have found a new sophisticated malware sample that has infected victims and evaded detection since 2012. Besides infecting Windows computers, the attackers behind the malware also seem to have hijacked Microtik routers to help deliver the malware. The sample also uses many sophisticated techniques to evade forensic software, install with a … [Read more...]
