Cryptocurrency users in Ethiopia, Nigeria, India, Guatemala, and the Philippines are being targeted by a new variant of the Phorpiex botnet called Twizt that has resulted in the theft of virtual coins amounting to $500,000 over the last one year.
Isra…
noPac: A Tale of Two Vulnerabilities That Could End in RansomwareNumerous public proof-of-concept exploits reveal that the noPac vulnerabilities (CVE-2021-42278 and CVE-2021-42287) are trivial to exploit and lead to privilege escalation.Numerous public…
Type: Threat AnalysisLog4j Vulnerability FAQsOn December 9, 2021, the Apache Software Foundation released Log4j 2.15.0 to resolve a critical remote code execution vulnerability (CVE-2021-44228) that affects versions 2.0-beta9 through 2.14.1. Log4j is a…
Log4Shell: Easy to Launch the Attack but Hard to Stick the Landing?Although Log4j vulnerability CVE-2021-44228 continues to be a serious threat, evidence suggests that the ability to remotely execute code is not as trivial as originally thought.Althoug…
Cybersecurity researchers have demonstrated a new attack technique that makes it possible to leverage a device’s Bluetooth component to directly extract network passwords and manipulate traffic on a Wi-Fi chip, putting billions of electronic devices a…
Cyber threats used to be less threatening. While nobody wants their customers’ credit card numbers stolen in a data breach, or to see a deranged manifesto plastered over their company website, such incidents can almost seem quaint compared to ransomwa…
 |
|
| Online dating app Grindr has been fined by Norwegain privacy watchdog Datatilsynet for sharing data with advertisers without proper consent.
Categories: Reports Tags: Datatilsynetgdprgrindrnorway |
The post Grindr fined for selling user data to advertisers appeared first on Malwarebytes Labs.
 |
|
| While everyone has one eye on Log4j, there are other vulnerabilities that need patching since Patch Tuesday has come along as well.
Categories: Exploits and vulnerabilities Tags: Applecve-2021-41333cve-2021-42310cve-2021-43215cve-2021-43217cve-2021-43883cve-2021-43890cve-2021-43899cve-2021-43905microsoftpatch tuesday |
The post After Log4j, December’s Patch Tuesday has snuck up on us appeared first on Malwarebytes Labs.
A new JavaScript-based remote access Trojan (RAT) propagated via a social engineering campaign has been observed employing sneaky “fileless” techniques as part of its detection-evasion methods to elude discovery and analysis.
Dubbed DarkWatchman by re…
A number with ISD code +92 sent a video via WhatsApp. No text, only a video. About 20 days later, another number with same ISD sent another video.
Should I open the video?
OR
Should I Report and Block?
Moreover, a family member received th…
