Babuk Ransomware Builder Mysteriously Appears in VirusTotal
The gang’s source code is now available to rivals and security researchers alike – and a decryptor likely is not far behind.
Read More
Malware
Dropbox Used to Mask Malware Movement in Cyberespionage Campaign
The ongoing spear-phishing campaign targeting the Afghan government uses Dropbox as an API that leaves no traces of communications with weirdo websites.
Read MoreIndexsinas SMB Worm Campaign Infests Whole Enterprises
The self-propagating malware’s attack chain is complex, using former NSA cyberweapons, and ultimately drops cryptominers on targeted machines.
Read MoreWhy MTTR is Bad for SecOps
Kerry Matre, senior director at Mandiant, discusses the appropriate metrics to use to measure SOC and analyst performance, and how MTTR leads to bad behavior.
Read MoreZero-Day Used to Wipe My Book Live Devices
Threat actors may have been duking it out for control of the compromised devices, first using a 2018 RCE, then password-protecting a new vulnerability.
Read MoreUsers Clueless About Cybersecurity Risks: Study
The return to offices, coupled with uninformed users (including IT pros) has teed up an unprecedented risk of enterprise attack.
Read MoreCobalt Strike Usage Explodes Among Cybercrooks
The legit security tool has shown up 161 percent more, year-over-year, in cyberattacks, having “gone fully mainstream in the crimeware world.”
Read MoreRussian Attackers Breach Microsoft Customer Service Accounts
American IT companies and government have been targeted by the Nobelium state-sponsored group.
Read MoreMicrosoft Signs Malware That Spreads Through Gaming
The driver, called “Netfilter,” is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers’ geo-locations to cheat the system and play from anywhere, Microsoft said.
Read MoreFIN7 ‘Pen Tester’ Headed to Jail Amid $1B in Payment-Card Losses
One of the Carbanak cybergang’s highest-level hackers is destined to serve seven years while making $2.5 million in restitution payments.
Read More