Month: August 2016

New ‘Fantom’ Ransomware Poses As Windows Update http://ift.tt/2bPnXoF New ‘Fantom’ Ransomware Poses As Windows Update Fantom malware comes disguised as a legitimate Microsoft Windows update to trick consumers and business users into downloading it. IT managers have a new ransomware threat on their radar that comes camouflaged as a Critical Windows Update to trick enterprise users…

Angler’s obituary: Super exploit kit was the work of Russia’s Lurk group http://ift.tt/2bFwxpq Ruslan Stoyanov was right: what could be history’s most advanced financially-driven malware was the progeny of some 50 jailed hackers known as the Lurk group. It is a finding that solves the mysterious demise of the world’s most capable exploit kit and…

OneLogin breached, hacker finds cleartext credential notepads http://ift.tt/2bAjicd Password attic OneLogin has been breached, and it’s bad, because the service that suffered the breach is one often used by people to store credentials like admin password and software keys. The online credential manager says a its Secure Notes facility was breached, allowing the intruder to…

iOS 9.3.4 and minor versions are vulnerable to the Trident Exploit http://ift.tt/2caFWXq Its name is the Trident: a chain of zero-day exploits that aim to infect iPhone with commercial spyware. Researchers linked it to the NSO group. Its name is the Trident: a chain of zero-day exploits that aim to infect iPhone with commercial spyware.…

Dropbox Hacked — More Than 68 Million Account Details Leaked Online http://ift.tt/2c3FTxo Hackers have obtained credentials for more than 68 Million accounts for online cloud storage platform Dropbox from a known 2012 data breach. Dropbox has confirmed the breach and already notified its customers of a potential forced password resets, though the initial announcement failed…

#Malware  #Analysis – Dridex Loader – Part 2 http://ift.tt/2bInDcs On our last blog post, we performed malware analysis of Dridex and found out how to decode its strings. This gave us more visibility into its intent and functionality. In this part we will continue the analysis and move into getting the Dridex configuration settings and…