Exploits – Page 9 – Computer Security Articles

MalwareBytes Security

New Flash Player zero-day comes inside Office document

February 5, 2018 admin CVE-2018-4878, cybercrime, Exploits, Flash Player zero day, Korean

Credit to Author: Jérôme Segura| Date: Mon, 05 Feb 2018 20:55:16 +0000

Threat actors are targeting South Korea with a Flash Player zero-day in limited attacks, according to Adobe.

Categories:

Tags: CVE-2018-4878 Flash Player zero-day Korean

MalwareBytes Security

GandCrab ransomware distributed by RIG and GrandSoft exploit kits (updated)

February 2, 2018 admin exploit kits, Exploits, gandcrab, gandcrab ransomware, grandsoft, ransomware, RIG, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 30 Jan 2018 23:43:52 +0000

Ransomware may have slowed its growth but is still a go-to payload for threat actors looking to monetize drive-by download attacks. The latest attempt: GandCrab ransomware.

Categories:

Tags: exploit kits gandcrab gandcrab ransomware grandsoft ransomware RIG

MalwareBytes Security

GandCrab ransomware distributed by RIG and GrandSoft exploit kits

January 30, 2018 admin exploit kits, Exploits, gandcrab, gandcrab ransomware, grandsoft, ransomware, RIG, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 30 Jan 2018 23:43:52 +0000

Ransomware may have slowed its growth but is still a go-to payload for threat actors looking to monetize drive-by download attacks. The latest attempt: GandCrab ransomware.

Categories:

Tags: exploit kits gandcrab gandcrab ransomware grandsoft ransomware RIG

Kaspersky Security

Detected does not mean harmless

January 19, 2018 admin 34c3, Business, CCC, Chaos Communications Congress, Exploits, vulnerabilities

Credit to Author: Nikolay Pankov| Date: Fri, 19 Jan 2018 07:36:49 +0000

Is it possible to exploit a “theoretical” vulnerability?

Microsoft Security

A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017

January 16, 2018 admin bad rabbit, cloud protection service, cybersecurity, EternalBlue, EternalRomance, Exploits, Hypervisor Code Integrity (HVCI), machine learning, malware research, Microsoft Edge, Microsoft Intelligent Security Graph (ISG), Petya, ransomware, research, Security Intelligence, Security Response, WannaCry, Windows 10, Windows Defender Antivirus, Windows Defender ATP, Windows Defender AV

Credit to Author: Windows Defender ATP| Date: Wed, 10 Jan 2018 14:00:31 +0000

Adopting reliable attack methods and techniques borrowed from more evolved threat types, ransomware attained new levels of reach and damage in 2017. The following trends characterize the ransomware narrative in the past year: Three global outbreaks showed the force of ransomware in making real-world impact, affecting corporate networks and bringing down critical services like hospitals,

MalwareBytes Security

Meltdown and Spectre fallout: patching problems persist

January 11, 2018 admin Exploits, Google Project Zero, Intel, meltdown, processor, Security world, spectre, vulnerabilities

Credit to Author: Jérôme Boursier| Date: Thu, 11 Jan 2018 14:00:00 +0000

In the days since Meltdown and Spectre have been made public, we’ve tracked which elements of the design flaw, known as speculative execution, are vulnerable and how different vendors are handling the patching process.

Categories:

Tags: Google Project Zero Intel Meltdown processor Spectre vulnerabilities

MalwareBytes Security

Use TeamViewer? Fix this dangerous permissions bug with an update

December 6, 2017 admin bug, client, cybercrime, exploit, Exploits, Server, teamviewer

Credit to Author: Malwarebytes Labs| Date: Wed, 06 Dec 2017 19:42:54 +0000

A potentially dangerous permissions bug in TeamViewer grants unauthorised access to either the client or the server—and patches may take up to a week to fully roll out.

Categories:

Tags: bug client exploit server teamviewer

MalwareBytes Security

Seamless campaign serves RIG EK via Punycode (updated)

December 5, 2017 admin Exploits, phishing, Punycode, ramnit, Ramnit Trojan, RIG, RIGEK, Seamless, Threat analysis, Trojan

Credit to Author: Jérôme Segura| Date: Mon, 04 Dec 2017 22:48:49 +0000

The most prolific gate to the RIG exploit kit is coming in a different flavor. The Seamless campaign is now using a domain name with foreign characters translated by Punycode.

Categories:

Tags: phishing Punycode ramnit Ramnit Trojan RIG RIGEK Seamless trojan