Google Alert – malware – IT Security Alerts Daily

⋅ July 26, 2023

NEWS

Lazarus targets Microsoft IIS servers to spread malware – SC Magazine

SC Magazine

The North Korean state-sponsored APT group is using the compromised ISS web servers as malware distribution points.

Over 400,000 corporate credentials stolen by info-stealing malware – Bleeping Computer

Bleeping Computer

The analysis of nearly 20 million information-stealing malware logs sold on the dark web and Telegram channels revealed that they had achieved …

Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

The Hacker News

The financially motivated threat actors behind the Casbaneiro banking malware family have been observed making use of a User Account Control (UAC) …

Lazarus group exploits Windows IIS servers to distribute malware – CSO Online

CSO Online

When a system using a vulnerable version of INISAFE CrossWeb EX V6 visits this website via a web browser, the Lazarus malware (SCSKAppLink.dll) is …

Researchers find Decoy Dog malware campaign likely linked to nation-state spying – Axios

Axios

Researchers at Infoblox released new details Tuesday about a malware campaign they're calling Decoy Dog.

US Neutralizes Russian Snake Malware Program – Dialogo-Americas.com

Dialogo-Americas.com

A coalition of U.S. security agencies dismantled Russia's global Snake Malware network, considered “the most sophisticated cyber espionage tool …

Decoy Dog is No Ordinary Pupy – Infoblox Reveals Shift in Malware Tactics After Initial Discovery

PR Newswire

The malware uses DNS to establish command and control (C2) and is suspected as a secret tool used in ongoing nation-state cyber attacks.

Barbie malware: India among top five countries facing attacks, says McAfee research

Hindustan Times

McAfee, which works in the online malware protection market, urges consumers to exercise caution as Barbie-related malware attacks rise.

Security experts sniffing around dangerous new malware Decoy Dog – Cybernews

Cybernews

New malware is suspected to be a secret tool used in ongoing nation-state cyber-attacks, utilizing DNS to establish command and control.

Decoy Dog Malware Upgraded to Include New Features – Infosecurity Magazine

Infosecurity Magazine

To support further investigation of the malware's C2 systems, Infoblox has released a new dataset containing DNS traffic captured from their servers.