A script compile error has temporarily stopped the infection chain of a malspam campaign trying to infect users with the GandCrab ransomware. Not all GandCrab versions are affected, but only a GandCrab operation that tries to infect victims via malicious Word files users receive via spam emails. These Word documents contain […]
Hacking
$3.3 Million stolen from main Coinsecure Bitcoin wallet
Cryptocurrency exchange Coinsecure, India’s second exchange, announced that it has suffered a severe issue, 438 bitcoin, $3,3 million worth of bitcoin Cryptocurrency exchange Coinsecure, India’s second exchange, announced that it has suffered a severe issue, 438 bitcoin, $3,3 million worth of bitcoin, have been transferred from the main wallet to an account that is […]
APT33 devised a code injection technique dubbed Early Bird to evade detection by anti-malware tools
The Iran-linked APT33 group continues to be very active, security researchers at Cyberbit have discovered an Early Bird code injection technique used by the group. The Early Bird method was used to inject the TurnedUp malware into the infected systems evading security solutions. The technique allows injecting a malicious code into a legitimate process, it […]
Malware Distribution Campaign Has Been Raging for More Than Four Months
An organized and highly dynamic malware distribution campaign has been leveraging thousands of hacked websites to redirect users to web pages peddling fake software updates in an attempt to infect them with malware. According to Jerome Segura, the Malwarebytes researcher who analyzed multiple infection chains to piece together the grander […]
Microsoft Removes Antivirus Registry Key Check for All Windows Versions
Microsoft has decided to remove a mandatory « registry key requirement » it introduced in the aftermath of the Meltdown and Spectre vulnerability disclosure. Microsoft used this registry key to prevent Windows updates from being installed on computers running antivirus software incompatible with the Meltdown and Spectre patches. Antivirus vendors were supposed […]
QUANT LOADER TROJAN SPREADS VIA MICROSOFT URL SHORTCUT FILES
Researchers are warning of a new email phishing campaign that downloads and launches the Quant Loader trojan, capable of distributing ransomware and stealing passwords. Barracuda on Tuesday said it has been tracking emails containing zipped Microsoft internet shortcut files with a “.url” file extension sent to millions of inboxes via […]
Phishing par SMS sur WhatsApp : attention aux billets gratuits sur Atlantic Virgin !
Selon un message WhatsApp, Virgin Atlantic offrait deux billets gratuits par famille. Cela semblait trop beau pour être vrai et il est fort probable que cela soit effectivement une arnaque ! Vendredi dernier, nous avons reçu un message WhatsApp qui a piqué notre curiosité : 2 billets gratuits sur Virgin Atlantic ! Billets gratuits […]
Hack Zone Tunisia 2018
ÉVÉNEMENT ANNUEL Le HackZone est un événement annuel de sécurité informatique, d’une durée de 24 heures. Organisé à l’ENSI depuis 2013 par la Communauté de Sécurité Informatique de l’Ecole Nationale des Sciences Informatiques: CSI ENSI . Après le succès des éditions précédentes , HackZone revient cette année dans une 6ème édition, comme […]
HACKFEST. NATIONAL CYBER SECURITY COMPETITION
Hackfest is an annual event of cyber security, initially hosted by the Higher School of Communication. Each year, since 2015, it gathers under the same roof specialists of cyber security, entrepreneurs and students. After its massive success in the previous editions, Hackfest is back this year in its 4th edition […]
AMD and Microsoft release microcode and operating system updates against Spectre flaw
AMD released patches for Spectre Variant 2 attack that includes both microcode and operating system updates. AMD and Microsoft worked together to issue the updates on Tuesday. AMD and Microsoft released the microcode and security updates for Spectre vulnerabilities. The Meltdown and Spectre attacks could be exploited by attackers to bypass memory isolation […]