UNE NOUVELLE FAMILLE DE MALWARE APPELÉE SQUIRTDANGER A ÉTÉ DÉCOUVERTE Une nouvelle famille de botnet, nommée SquirtDanger, a été découverte. SquirtDanger se propage via le téléchargement illicite de contenus Warez. Le malware a été développé en C#. Une fois exécuté, il garantit sa persistance en planifiant une tâche s’exécutant toutes les […]
Année : 2018
Les meilleures pratiques de sécurité à adopter pour protéger son entreprise
En faisant les gros titres en 2017, les cyberattaques ont fait réaliser aux entreprises l’importance de s’en prémunir. Dans le même temps, elles ont démontré que la simple installation d’un antivirus ne suffit plus face aux menaces les plus récentes. Tribune par José Fernandes, directeur France de Malwarebytes – L’heure est désormais aux […]
New Tool Detects Evil Maid Attacks on Mac Laptops
A security researcher has developed a simple tool that helps Mac laptop owners detect unauthorized physical access to their device, also known as an evil maid attack, by monitoring its lid. The free tool, named DoNotDisturb (DND), was created by Patrick Wardle, co-founder and chief research officer at enterprise macOS security […]
Hackers Infect X-Ray and MRI Machines
A new hacker group is conducting cyber attacks against the healthcare industry around the world, this time they have gotten holds on the systems controlling X-Ray, MRI and other medical machines, according to a report from security researchers at cybersecurity firm Symantec. Security researchers in past has warned about the […]
CSE Malware ZLab – Malware Analysis Report: The Bandios malware suite
The researchers at CSE ZLab have spotted a new family of malware, tracked as Bandios malware spreading in the wild. The peculiarity of Bandios malware is the fact that this malware is in a rapid and constant evolution and development. Experts observed several versions of the malware stored on the same websites, […]
MyEtherWallet piraté : les DNS de Google en cause
Le site Myetherwallet a été piraté ce 24 avril 2018 au niveau des serveurs DNS publics de Google (8.8.8.8, 8.8.4.4). L’attaquant a détourné le trafic du site web vers l’IP de son serveur de phishing basé en Russie, laissant la porte ouverte aux utilisateurs pour y déposer leurs clés privées… dans les […]
Researcher Discloses « Unpatchable » Nintendo Switch Exploit
A security researcher has released a proof-of-concept exploit affecting the Nvidia Tegra line of embedded processors that come with Nintendo Switch devices. Codenamed « Fusée Gelée, » the PoC is a cold-boot hack that lets a device owner to bypass device-lockdown and run custom code on the Switch. This exploit opens the […]
MikroTik Patches Zero-Day Flaw Under Attack in Record Time
BREAKING —MikroTik has released firmware patches for RouterOS, the operating system that ships with some of its routers. The patches fix a zero-day vulnerability exploited in the wild. A MikroTik engineer said yesterday that « the vulnerability allowed a special tool to connect to the [MikroTik] Winbox port, and request the system user […]
Atlanta’s Ransomware Cleanup Costs Hit $2.6 Million
On March 22, a ransomware outbreak hit Atlanta city government systems, freezing not just the city’s technology but also its ability to get work done. As a result of the outbreak, the city’s 8,000 employees were unable to use their PCs for several days (see Atlanta After Ransomware Attack: Please Restart Your […]
Gmail Spam Campaign Annoying, Not a Hack
When users take a look through their sent messages, they aren’t always searching for an email they sent. The security-minded user is looking for any messages that they did not send out. That’s how some Gmail users recently discovered a spam message campaign. Several users in a Gmail help forum reported that they […]