IT Sec News updates – Malware Attacks

Industrial Cyber Security Solutions

Researchers from Nozomi Networks Labs have detailed a unique malware family detected by their honeypots that replaces the existing SSH server on …

Silicon Republic

The cybersecurity company said it spotted ZIP files being distributed called “crowdstrike-hotfix.zip” which actually contains malware content.

Help Net Security

HotPage browser injector malware, masquerading as DwAdsafe ad blocker, can replace the content of the current page, redirect the user.

SecurityWeek

The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery.

The Hacker News

SocGholish malware campaign exploits BOINC project, infecting thousands of computers. AsyncRAT and V8 JavaScript used to evade detection in …

TechRadar

The hacker used the RDGA to create command and control (C2) and decoy domains for the XLoader infostealing malware. Are you a pro? Subscribe to …

The Hindu

Microsoft has released a custom recovery tool for users affected by the global outage. The WinPE tool can help in finding the malware and removing …

Security Affairs

The JavaScript downloader SocGholish (aka FakeUpdates) is being used to deliver the AsyncRAT and the legitimate open-source project BOINC.

9to5Mac

… malware through a trojanized meeting app. Once infected, the malware would establish a connection between the Mac and the attacker's command and …

idahonews.com

Computers that detected the malware were isolated and the dispatching system known as CAD was taken offline to ensure internal security. Dispatchers …