News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Worldwide campaign against government authorities discovered 
B2B Cyber ​​Security ShortNews

Kaspersky experts have uncovered a cyber espionage campaign targeting government agencies worldwide. As part of the campaign, more than 30 malware dropper samples are used - some with text changes to make the samples more difficult to detect. New DuneQuixote cyber espionage campaign targets government entities worldwide Kaspersky researchers have discovered an ongoing malicious campaign initially targeting a government entity in the Middle East. Further investigation revealed that more than 30 malware dropper samples were actively used in this campaign and the victim group was reportedly expanded to APAC, Europe and North America. Disguised droppers as the first attack The first droppers of the malware…

Read more

Double attack via vulnerable Exchange servers 
Double attack via vulnerable Exchange servers

SophosLabs is investigating the use of the Squirrelwaffle malware "distribution station" in combination with social engineering. There was a double attack: malware droppers and financial fraud ran through the same vulnerable Exchange Server. An incident guide for security teams at organizations impacted by Squirrelwaffle. In a recent article, the Sophos Rapid Response Team describes a case where Squirrelwaffle malware exploited a vulnerable Exchange server to distribute malicious spam through hijacked email threads. At the same time, an email thread was stolen by the attackers in order to trick unsuspecting users into transferring money. Combination of Squirrelwaffle, ProxyLogon and ProxyShell The…

Read more

Newly discovered: Buer malware dropper
SophosNews

Sophos Rapid Response Team detects new Buer malware. Rapid intervention by specialist teams can protect companies from major damage from cyber attacks. After Sophos officially went live with its Rapid Response Service at the end of October 2020, the security specialists exposed the first known use of the Buer malware dropper to smuggle in ransomware. Sophos Rapid Response made this discovery while defusing a Ryuk ransomware attack that is part of a wave of Ryuk attacks using new tools, techniques, and techniques. In this incident, the attackers used a new variant of Buer to destroy the Ryuk ransomware.

Read more

H1 / 2020: Over 2 million infected Android apps
Android danger contaminated apps

The new G DATA Mobile Malware Report shows that malicious Android apps are available every second. The cyber defense company identified more than two million infected Android apps in the first half of 2020. Cyber ​​criminals publish an Android app with malware every eight seconds. That is the result of a current study by G DATA CyberDefense. Compared to the first half of 2019, an increase of over ten percent. The focus was particularly on fake corona trackers and droppers. Criminal hackers also attacked smartphones during the Corona crisis and tried to install malware on the devices. Current figures from G DATA CyberDefense ...

Read more

Analysis results of the Kaspersky Threat Intelligence Portal
Analysis

Many requests submitted as links or files to the Kaspersky Threat Intelligence Portal turn out to be Trojans (25 percent), backdoors (24 percent) and Trojan droppers (23 percent) Almost three quarters (72 percent) of the malicious files analyzed, that were submitted via the free version of Kaspersky Threat Intelligence Portal were Trojans, backdoors or droppers. Analysis of the submitted data also shows that the types of malware that researchers investigate most often do not necessarily match the most widespread ones. The detection of harmful activities is only the starting point for ...

Read more