Hijackers can bypass Active Directory controls
Infosec researchers discovered a recent attack on Microsoft’s Active Directory software that let them insert their own domain controller into an existing enterprise setup.
Etiqueta: hacking
libcurl vulnerable since your inception
libcurl is a command-line transfer library that supports DICT, FILE, FTP, FTPS, Gopher, HTTP, HTTPS, IMAP and other. It is used to transfer data via URLs. Are you prepared? It is vulnerable since the first commit we recorded and it was fixed in 7.58.0 version.
Bell Canada – Leaked 100.000 individuals records
Bell Canada has been compromised in a breach that reportedly affects up to 100.000 individuals. It was communicated to customers, that their names and personal emails were accessed in a malicious campaign.
Monero crypto miner leveraging Apache Struts vulnerability
Cryptocurrency miners have begun using two older and already patched vulnerabilities to compromise servers to mine the Monero digital currency.
New botnet approach infects cryptocurrency replacing wallet address
After gaining control of the coin-mining software, Satori bot replaces the victim wallet address with the malicious address. In this way, the computer mining currency through the address controlled by the attacker.
Critical Flaw in All Blizzard Games
A Google security researcher has discovered a severe vulnerability in Blizzard games, played every month by half a billion users—World of Warcraft, Overwatch, Diablo III, Hearthstone and Starcraft II.
Sonic apps in the Google Play published by SEGA leak users’ data
Android apps such as Sonic Dash, Sonic the Hedgehog™ Classic, and Sonic Dash 2: Sonic Boom, that have been totally downloaded millions of times are compromising user’s date.
Crypto-jacking via ARP Poisoning Attack on Wi-Fi Networks
Hackers are using more sophisticated techniques to mine cryptocurrency in an unauthorized manner. They currently using ARP Poisoning to inject malicious code into all web requests on a Wi-Fi network.
Hackers are attacking Portuguese websites with crypto-jacking. Are you safe?
Crypto jacking detected in Portuguese website. This article refers that Portuguese websites are using this type of resources to mine the cryptocurrency Monero. One of the cases already detected was Dinheiro Vivo, a very well-known Portuguese news website.
Crypto-jacking again identified in Monero cryptocurrency
Again crypto-jacking on Monero. PyCryptoMiner is a botnet cryptocurrency-oriented, designed in Python, that uses Pastebin as the source-pool when the C&C server is unavailable. It attacks Linux machines and exploits SSH service via brute-force.
Attention, chrome extensions are mining cryptocurrency
Archive Poster Malware – The Chrome store claims that the extension affects 105,000 users, and presumably everyone is mining coins in their computer through this extension running in background.