Nowe aktualizacje

At least three hacking groups have been identified aiming to interfere with or disrupt power grids across the United States. Attempts in attacking the utilities industry are on the rise, according to a report on the state of industrial control systems (ICSs).

The cryptocurrency-miner, a multi-component threat comprised of different Perl and Bash scripts, miner binaries, the application hider Xhide, and a scanner tool, propagates by scanning vulnerable machines and brute-forcing (primarily default) credentials.

Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory.

A web skimming attack was used to target a school administration software that handles school accounting, student fees, and online stores for K-12 and other educational institutions.

As the new year rolls in, new developments in different ransomware strains have emerged. Here we discuss the different techniques that Clop, DeathRansom, and Maze ransomware use and the ways users and organizations can protect themselves against infection.

Financial applications are closely connected or even directly tied to a user’s finances, making them prime targets for cybercriminals. We provide simple steps and guidelines on how to protect mobile banking apps from common scams and malicious actors.

We take a closer look at an incident involving the MyKings botnet to show how the MITRE ATT&CK framework helps with threat investigation.

The city of Frankfurt, Germany, became the latest victim of Emotet after an infection forced it to close its IT network.

We recap the history and recent campaigns of IoT botnets to help users defend against the different malware competing for control and resources of regular smart devices.