The United Arab Emirates-based ride-hailing giant Careem has been hacked. As a result, personal and private data of 14 million drivers and customers has been stolen. Careem is Uber’s rival in the Middle East and South Asia and North Africa. The company operates in 80 cities in 13 countries and […]
Année : 2018
RANSSIRIA : LE RANSOMWARE QUI PROFITE DU SORT DES RÉFUGIÉS SYRIENS
Certains cybercriminels n’ont vraiment aucun scrupule et profitent souvent des événements les plus dramatiques pour s’enrichir. Dernièrement, le site MalwareHunterTeam a découvert le ransomware RansSIRIA. Comme son nom l’indique, il profite de la crise des réfugiés syriens. Il s’agit d’une variante du ransomware WannaPeace. COMMENT FONCTIONNE RANSSIRIA ? RansSIRIA se manifeste […]
Take These Steps to Secure Your WordPress Website Before It’s Too Late
You might have heard that WordPress security is often referred to as hardening, WordPress website security is all about putting locks on doors and windows and having lookouts on each of your “towers.” You might have heard that WordPress security is often referred to as “hardening.” While the name might […]
Google Project Zero hacker discloses a Zero-Day in Windows Lockdown Policy
Google researcher has publicly disclosed a Windows 10 zero-day that could be exploited by attackers to bypass Windows Lockdown Policy on systems with User Mode Code Integrity (UMCI). Google has publicly disclosed a Windows 10 zero-day vulnerability that could be exploited by attackers to bypass Windows Lockdown Policy on systems with User […]
NEW FACEBOOK MALWARE AFFECTS THOUSANDS WORLDWIDE
Radware detected a malware disguised as a paint program. It gathers Facebook data and credentials, and it is believed to be used for ransom and identity theft. The threat analysts at Radware first detected the threat named ‘Stresspaint’ on April 12. While the researchers do not yet know how it […]
Nigerian Hackers Attempt to Steal Millions From Shipping Firms
Secureworks has recently discovered a threat actor whose business email compromise (BEC) campaigns focus solely on global maritime shipping companies and their customers. Named GOLD GALLEON, the group is said to have attempted to steal at least $3.9 million from their intended victims between June 2017 and January 2018 alone. Overall, […]
Experts spotted spam campaigns delivering XTRAT and DUNIHI backdoors bundled with the Adwind RAT
Security experts at Trend Micro have spotted spam campaigns delivering XTRAT and DUNIHI Backdoors and Loki malware bundled with the Adwind RAT. Malware researchers at Trend Micro have uncovered a spam campaign that delivers the infamous Adwind RAT (aka jRAT) alongside the XTRAT backdoor (aka XtremeRAT) and the Loki info stealer. In a separate Adwind RAT spam campaign, the researchers observed […]
Google Discloses Windows Lockdown Policy Zero-Day
Google Discloses Unpatched Windows Lockdown Policy Bypass A Windows 10 vulnerability that could bypass Windows Lockdown Policy and result in arbitrary code execution remains unpatched 90 days after Microsoft has been informed on the bug’s existence. On systems with User Mode Code Integrity (UMCI) enabled, a .NET bug can be […]
CVE-2018-0229 flaw in SAML implementation threatens Firepower, AnyConnect and ASA products
Cisco has announced a set of security patches that address the CVE-2018-0229 vulnerability in its implementation of the Security Assertion Markup Language (SAML). The CVE-2018-0229 flaw could be exploited by an unauthenticated, remote attacker to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. “A vulnerability […]
SunTrust unfaithful employee may have stolen data on 1.5 Million customers
SunTrust Banks Inc announced it discovered that a former employee may have attempted to download information on nearly 1.5 million clients and share it a criminal organization. A former employee at the SunTrust Bank may have stolen data on 1.5 million clients, including names, addresses, phone numbers, and account balances. “The […]