Hacking

Pierluigi Paganini June 14, 2018
China-linked Emissary Panda APT group targets National Data Center in Asia

A China-linked APT group, LuckyMouse, Emissary Panda, APT27 and Threat Group 3390, has targeted a national data center in Central Asia. The APT group has been active since at least 2010, the crew targeted U.S. defense contractors and financial services firms worldwide. In March 2018, security experts at Kaspersky Lab have observed an attack powered by the […]

Pierluigi Paganini June 13, 2018
June 12 2018 Historic Edition of Cyber Defense eMagazine Has Arrived. Over 150 pages…

June 12, 2018 – Cyber Defense eMagazine is arrived – OVER SIX THOUSAND PAGES – SIX YEARS – #1 GLOBAL SOURCE FOR CYBER DEFENSE Cyber Defense eMagazine June 2018 Edition has arrived. We hope you enjoy this month’s edition…packed with over 150 pages of excellent content.  InfoSec Knowledge is Power.  We have 6 years of eMagazines online […]

Pierluigi Paganini June 13, 2018
Researcher found 43 Million email addresses leaked by the Trik spam botnet

A security researcher from Vertek Corporation reported to Bleeping Computer that over 43 million email addresses have been leaked from the command and control server of a spam botnet. An expert from Vertek Corporation spotted the C&C server while investigating a recent malware campaign distributing a version of the Trik trojan. The malicious code was used as a first-stage malware […]

Pierluigi Paganini June 13, 2018
Dixons Carphone data breach, 5.9 million payment cards exposed

Retailer Dixons Carphone has disclosed a security breach that involved 5.9 million payment cards and 1.2 million personal data records. Dixons Carphone discovered an “unauthorised access” to certain data held by the company, it promptly launched an investigation and hired an external firm to shed the light on the case. The company immediately reported the […]

Pierluigi Paganini June 12, 2018
North Korea-linked Lazarus APT behind recent ActiveX attacks

North Korea-linked Lazarus APT group planted an ActiveX zero-day exploit on the website of a South Korean think tank focused on national security. According to researchers at AlienVault, North Korea-linked hackers planted an ActiveX zero-day vulnerability on the website of a South Korean think tank focused on national security. The experts attributed the attack to the notorious Lazarus APT group […]

Pierluigi Paganini June 12, 2018
VMware addresses a critical remote code execution vulnerability in AirWatch Agent

VMware has found a critical remote code execution vulnerability in the AirWatch Agent applications for Android and Windows Mobile. The agent is installed by users on a mobile device in order to allow the AirWatch to manage it. The flaw, tracked as CVE-2018-6968, “may allow for unauthorized creation and execution of files in the Agent sandbox […]

Pierluigi Paganini June 12, 2018
Operation WireWire – Law enforcement arrested 74 individuals involved in BEC scams

US authorities announced the arrest of 74 individuals as part of an international law enforcement operation dubbed ‘operation WireWire’ targeting BEC scams. On Monday, the U.S. authorities announced the arrest of 74 individuals as part of an international law enforcement operation dubbed ‘operation WireWire’ targeting business email compromise (BEC) scams. The authorities conducted the investigation for over […]

Pierluigi Paganini June 12, 2018
Crooks used multi-stage attacks aimed at Russian Service Centers

Fortinet recently observed a series of cyber-attacks targeting Russian service centers offering maintenance and support for various electronic goods. Security researchers from Fortinet have recently spotted a series of cyber-attacks targeting Russian service centers offering maintenance and support for various electronic goods. Experts highlighted the hackers conducted multi-stage attacks but excluded the involvement of a nation-state […]

Pierluigi Paganini June 11, 2018
Experts warn hackers have already stolen over $20 Million from Ethereum clients exposing interface on port 8545

Cybercriminal group has managed to steal a total of 38,642 Ether, worth more than $20,500,000, from clients exposing the unsecured interface on port 8545. Cybercriminals have raked over 20 million dollars in the past few months by hijacking poorly configured Ethereum nodes exposed online are continuing their operations. In March, security experts from Qihoo 360 Netlab […]

Pierluigi Paganini June 11, 2018
Former GCHQ chief Hannigan warns of Russia’s aggressive approach to the cyberspace

According to former GCHQ chief, the recently discovered VPNFilter botnet is the demonstration that Russia appears to be live-testing cyberattacks. Former GCHQ chief Robert Hannigan has warned that the availability of hacking tools in the main marketplaces is rapidly changing the threat landscape. Hannigan served as the director of the UK intelligence agency between November 2014 until January 2017. Threat actors have an […]