Category: Malwarebytes Labs

Warning issued over increased activity of TrueBot malware

Categories: News Categories: Ransomware Tags: TrueBot Tags: Cl0p Tags: Silence Group Tags: CVE-2022-31199 Tags: Raspberry Robin Tags: FlawedGrace Tags: Cobalt Strike Tags: Teleport CISA, the FBI, the MS-ISAC, and the CCCS have warned about increased activity of the TrueBot malware…

Malwarebytes Browser Guard introduces three new features

Categories: Personal Tags: Malwarebytes Tags: Browser Guard Tags: Premium Tags: new features Malwarebytes Browser Guard introduces three new features: Content control, import & export, and historical detection statistics (Read more…) The post Malwarebytes Browser Guard introduces three new features appeared…

MOVEit Transfer fixes three new vulnerabilities

Categories: Exploits and vulnerabilities Categories: News Categories: Ransomware Tags: Progress Tags: MOVEit Tags: vulnerabilities Tags: CVE-2023-36934 Tags: CVE-2023-36932 Tags: CVE-2023-36933 CISA has warned users about three new vulnerabilities in Progress Software’s MOVEit Transfer software. (Read more…) The post MOVEit Transfer…

Solar monitoring systems exposed: Secure your devices

Categories: Business Tags: solar Tags: monitoring Tags: service Tags: exposed Tags: web Tags: facing Tags: secure Tags: scan Tags: lockdown Tags: update We take a look at reports that 130,000 solar monitoring devices are sitting exposed online. (Read more…) The…

How kids pay the price for ransomware attacks on education

Categories: News Categories: Personal Categories: Ransomware Tags: ransomware Tags: vice Tags: education Tags: files Tags: dark web Tags: ssn Tags: stolen identity Data stolen during attacks on schools can contain highly sensitive information. (Read more…) The post How kids pay…

Update Android now! Google patches three actively exploited zero-days

Categories: Exploits and vulnerabilities Categories: News Tags: Google Tags: Android Tags: 2023-07-05 Tags: CVE2021-29256 Tags: CVE-2023-26083 Tags: CVE-2023-2136 Tags: CVE-2023-21250 Tags: ARM Tags: Skia Google has patched 43 vulnerabilities in Android, three of which are actively exploited zero-day vulnerabilities. (Read…

Warning issued over vulnerability in cardiac devices

Categories: Exploits and vulnerabilities Categories: News Tags: Medtronic Tags: Paceart Optima Tags: CVE-2023-31222 Tags: deserialization Tags: update Tags: messaging A vulnerability in Medtronic’s Paceart Optima cardiac device could lead to further network penetration, RCE, and DoS attacks (Read more…) The…

Self-driving cars are a privacy issue, says security expert

Categories: News Categories: Personal Categories: Privacy Tags: self-driving cars Tags: CCTV Tags: video doorbell Tags: security cams Tags: dashcams As the number of self-driving cars increases, so does the number of cameras on the roads. This creates a possible privacy…

Malicious ad for USPS fishes for banking credentials

Categories: Threat Intelligence Tags: malvertising Tags: google Tags: usps Tags: phishing Next time you need to track a package, be aware that malicious ads could be leading you to sites that steal your banking information. (Read more…) The post Malicious…

Elderly targeted in car accident scam, kingpin arrested

Categories: News Categories: Personal Tags: Europol Tags: relative Tags: law enforcement The head of a criminal network responsible for defrauding hundreds of elderly people has been arrested, Europol has announced. (Read more…) The post Elderly targeted in car accident scam,…

Fake reviewers face big fines

Categories: Business Tags: reviews Tags: fake Tags: ftc Tags: fine Tags: fraud Tags: bogus Tags: portal Tags: site Tags: rating Tags: score The FTC’s new proposed rule would apply large fines to those found distributing fake reviews online. (Read more…)…

A week in security (June 26 – July 2)

Categories: News A list of topics we covered in the week of June 26 to July 2 of 2023 (Read more…) The post A week in security (June 26 – July 2) appeared first on Malwarebytes Labs. This article has…

Online safety tips for LGBTQIA+ communities

Categories: Personal The internet is great for bringing people together, but it can also be a nasty place. Here are some tips to help keep you as safe as possible online. (Read more…) The post Online safety tips for LGBTQIA+…

Spyware app LetMeSpy hacked, tracked user data posted online

Categories: News Categories: Personal Stalkerware-type app LetMeSpy has been hacked, with the attacker taking user data with it, the service has announced. (Read more…) The post Spyware app LetMeSpy hacked, tracked user data posted online appeared first on Malwarebytes Labs.…

A proxyjacking campaign is looking for vulnerable SSH servers

Categories: Cybercrime Categories: News Tags: proxyjacking Tags: cryptojacking Tags: curl Tags: Docker Tags: proxy service Tags: compromised Proxyjacking is a cybercrime where your bandwidth is sold by criminals. (Read more…) The post A proxyjacking campaign is looking for vulnerable SSH…

Why blocking ads is good for your digital health

Categories: Personal Tags: ad Tags: advert Tags: block Tags: blocking Tags: advertising Tags: blocker Tags: ad block Tags: tracking Tags: cookies Tags: analytics Tags: affiliate Tags: adware Tags: IoT We take a look at why blocking adverts and tracking is…

SupremeBot and Mario cross the finish line together

Categories: News Tags: Mario Tags: SupremBot Tags: XMR miner Tags: cryptominers Tags: mining client Tags: scheduled task Tags: C2 Download your games from trusted sources or you may get more than you bargained for… (Read more…) The post SupremeBot and…

Understanding ransomware reinfection: An MDR case study

Categories: Business Ransomware is like that stubborn cold that you thought you kicked, but creeps back up determined to run amok again. (Read more…) The post Understanding ransomware reinfection: An MDR case study appeared first on Malwarebytes Labs. This article…

A week in security (June 19 – 25)

Categories: News Tags: week Tags: security A list of topics we covered in the week of June 19 to June 25 of 2023 (Read more…) The post A week in security (June 19 – 25) appeared first on Malwarebytes Labs.…

9 basic security tips for seniors

Categories: News Categories: Personal Tags: seniors Tags: basic secuirty tips Tags: personal information Tags: too good to be true Tags: infected computer Tags: system optimizers Tags: web push notifications Tags: green padlock Tags: password manager Help the people around you…

5 facts to know about the Royal ransomware gang

Categories: Business A quick look the cybercriminal group known as Royal—one of the fastest growing ransomware gangs today. (Read more…) The post 5 facts to know about the Royal ransomware gang appeared first on Malwarebytes Labs. This article has been…

Microsoft Azure AD flaw can lead to account takeover

Categories: Exploits and vulnerabilities Categories: News Tags: OAuth Tags: nOAuth Tags: IdP Tags: Azure Tags: Microsoft Tags: login with Researchers have found a flaw in Microsoft Azure AD which they claim can be used to take over accounts that rely…

6 tips for a cybersecure honeymoon

Categories: Personal Your big day is over, but while you’re relaxing on honeymoon you don’t want to get distracted by security problems. So, we rounded up some quick tips to keep your devices safe. (Read more…) The post 6 tips…

Update now! Apple fixes three actively exploited vulnerabilities

Categories: Apple Categories: Exploits and vulnerabilities Categories: News Tags: Apple Tags: kernel webkit Tags: CVE-2023-32434 Tags: CVE-2023-32435 Tags: CVE-2023-32439 Tags: type confusion Tags: integer overflow Tags: operation triangulation Apple has released security updates for several products to address a set…

Baby monitor safety: What you need to know

Categories: Personal Tags: baby Tags: monitor Tags: wi-fi Tags: wireless Tags: cam Tags: webcam Tags: camera Tags: DECT Tags: FHSS Tags: cloud Tags: storage Tags: secure Tags: safety Tags: password We take a look at some of the options available…

Update now! ASUS fixes nine security flaws

Categories: Exploits and vulnerabilities Categories: News Tags: ASUS Tags: router Tags: models Tags: CVE-2022-26376 Tags: CVE-2018-1160 Tags: Netatalk Tags: disable WAN ASUS has released firmware updates for several router models fixing two critical and several other security issues. (Read more…)…

A week in security (June 12 – 18)

Categories: News Tags: week Tags: security Tags: june 2023 A list of topics we covered in the week of June 12 to June 18 of 2023 (Read more…) The post A week in security (June 12 – 18) appeared first…

Phishing scam takes $950k from DoorDash drivers

Categories: Business Tags: door dash Tags: delivery Tags: phish Tags: phishing Tags: scam Tags: fake Tags: fraud Tags: theft Tags: call Tags: support Tags: phone We take a look at a phishing scam that cost 700 DoorDash drivers a combined…

Fake security researchers push malware files on GitHub

Categories: News Tags: GitHub Tags: malware Tags: repository Tags: security researcher Tags: fake Tags: download Tags: scam Tags: twitter Tags: social We take a look at reports of fake security researchers offering up malware downloads via GitHub repositories. (Read more…)…

MOVEit discloses THIRD critical vulnerability

Categories: Exploits and vulnerabilities Categories: News Categories: Ransomware Tags: Progress Tags: Moveit Tags: CVE-2023-34362 Tags: CVE-2023-35036 Tags: Cl0p Progress has released an advisory about yet another MOVEit Transfer vulnerability while new victims of the first one keep emerging. (Read more…)…

Ticket scammers target Taylor Swift tour

Categories: Personal Tags: Taylor Tags: swift Tags: eras Tags: music Tags: gig Tags: concert Tags: tour Tags: scam Tags: ticket Tags: reseller Tags: fraud Tags: fake We take a look at multiple reports of ticket reseller fraud aimed at fans…

Microsoft fixes six critical vulnerabilities in June Patch Tuesday

Categories: Exploits and vulnerabilities Categories: News Tags: Microsoft Tags: patch Tuesday Tags: CVE-2023-29357 Tags: CVE-2023-29363 Tags: CVE-2023-32014 Tags: CVE-2023-32015 Tags: CVE-2023-32013 Tags: CVE-2023-24897 Tags: CVE-2023-32031 Tags: SharePoint Tags: PGM Tags: Exchange Tags: Hyper-V Patch Tuesday of June 2023 is relatively…

Edge browser feature sends images you view back to Microsoft

Categories: News Tags: Edge Tags: Enhance images Tags: super resolution Tags: content creators A new Edge feature labelled ‘Enhance images in Microsoft Edge’ has raised some privacy concerns because it sends information to Microsoft. (Read more…) The post Edge browser…

A week in security (June 5 – 11)

Categories: News Tags: week in security A list of topics we covered in the week of June 5 to June 11 of 2023 (Read more…) The post A week in security (June 5 – 11) appeared first on Malwarebytes Labs.…

Public and free WiFi: Can I safely use it?

Categories: News Categories: Personal Tags: Free Tags: public Tags: WiFi Tags: HTTPS Tags: TLS Tags: VPN The Internet has changed. A lot. Does that make it safer to use public, free WiFi? (Read more…) The post Public and free WiFi:…

Strava heatmap loophole may reveal users’ home addresses

Categories: Personal Tags: strava Tags: fitness Tags: health Tags: run Tags: running Tags: jog Tags: jogging Tags: jogger Tags: cycling Tags: bike Tags: race Tags: data Tags: anonymous Tags: anonymise Tags: location Tags: map Tags: heatmap Anonymous data on fitness…

VMware patches critical vulnerabilities in Aria Operations for Networks

Categories: Exploits and vulnerabilities Categories: News Tags: cve-2023-20887 Tags: cve-2023-20888 Tags: cve-2023-20889 Tags: vmware Tags: Aria Operations for Networks Tags: RCE Tags: information disclosure Tags: deserialization Tags: command injection VMware has released security updates to fix a trio of flaws…

Ransomware review: June 2023

Categories: Ransomware Categories: Threat Intelligence May saw a record number of 556 reported ransomware victims, the unusual emergence of Italy and Russia as major targets, and a significant rise in attacks on the education sector. (Read more…) The post Ransomware…

Facebook clickbait leads to money scam for users

Categories: Threat Intelligence Tags: facebook Tags: posts Tags: google Tags: cloud run Clickbait posts on Facebook can lead to malicious websites. In this campaign, crooks are redirecting Facebook victims to scam pages hosted on Google’s infrastructure. (Read more…) The post…

5 unusual cybersecurity tips that actually work

Categories: Personal It’s time to shake off that special feeling, start lying, forget everything you’ve been told about passwords, spin up a million email addresses, and start throwing away computers for fun. (Read more…) The post 5 unusual cybersecurity tips…

Update now! MOVEit Transfer vulnerability actively exploited

Categories: Exploits and vulnerabilities Categories: News Tags: Progress Tags: MOVEit Tags: vulnerability Tags: human2.aspx A critical vulnerability in Progress MOVEit Transfer is being used to steal large amounts of data (Read more…) The post Update now! MOVEit Transfer vulnerability actively…

Amazon’s Ring cameras were used to spy on customers

Categories: News Categories: Personal It’s what we all feared, but hoped wouldn’t be the case. (Read more…) The post Amazon’s Ring cameras were used to spy on customers appeared first on Malwarebytes Labs. This article has been indexed from Malwarebytes…

US hospital forced to divert ambulances after cyberattack

Categories: News Categories: Ransomware Tags: Idaho Tags: hospital Tags: cyberattack Tags: virus Tags: ransomware The Idaho Falls Community Hospital fell victim to a cyberattack on Monday and had to divert ambulances to nearby hospitals and close some of its clinics.…

Microsoft gives Apple a migraine

Categories: Exploits and vulnerabilities Categories: News Tags: Apple Tags: macOS Tags: Ventura 13.4 Tags: Monterey 12.6.6 Tags: Big Sur 11.7.7 Tags: libxpc Tags: SIP Tags: XPC Tags: NVRAM Tags: CVE-2023-32369 Tags: Migraine Microsoft has released details about a vulnerability that…

A week in security (May 22-28)

Categories: News Tags: Cisco Tags: Zyxel Tags: ChatGPT Tags: Malvertising Tags: Apple Tags: Google Tags: insider threat Tags: Pentagon explosion Tags: CISA Tags: ransomware guide Tags: Rheinmetall Tags: BlackBasta Tags: WordPress A list of topics we covered in the week…

Zyxel patches two critical vulnerabilities

Categories: Exploits and vulnerabilities Categories: News Zyxel has released a security advisory about two critical vulnerabilities that could allow an unauthorized, remote attacker to take control of its firewall devices. (Read more…) The post Zyxel patches two critical vulnerabilities appeared…

CISA updates ransomware guidance

Categories: News Categories: Ransomware Tags: CISA Tags: StopRansomware Tags: guide Tags: ZTA Tags: compromised Tags: cloud Tags: MDR CISA has updated its #StopRansomware guide to account for changes in ransomware tactics and techniques. (Read more…) The post CISA updates ransomware…

Rheinmetall attacked by BlackBasta ransomware

Categories: News Categories: Ransomware Tags: Rheinmetall Tags: BlackBasta Tags: ransomware A cyberattack on arms manufacturer Rheinmetall has been claimed by the BlackBasta ransomware group on its leak site. (Read more…) The post Rheinmetall attacked by BlackBasta ransomware appeared first on…

Malvertising via brand impersonation is back again

Categories: Threat Intelligence Tags: malvertising Tags: google Tags: ads Tags: amazon Tags: cloaking Ads containing the official website of an impersonated brand are running again, allowing fraudsters to scam users. (Read more…) The post Malvertising via brand impersonation is back…

Update now! Apple issues patches for three actively used zero-days

Categories: Exploits and vulnerabilities Categories: News Tags: Apple Tags: RSR Tags: CVE-2023-32409 Tags: CVE-2023-28204 Tags: CVE-2023-32373 Tags: out of bounds Tags: use after free Apple issued information about patches against three actively exploited zero-days in WebKit. One vulnerability is new,…

A week in security (May 15-21)

Categories: News Tags: Week in security Tags: May 2023 The most interesting security-related news of the week from May 15-21. (Read more…) The post A week in security (May 15-21) appeared first on Malwarebytes Labs. This article has been indexed…

ChatGPT: Cybersecurity friend or foe?

Categories: Business There are a lot of benefits to ChatGPT, but many in the security community have concerns about it. Malwarebytes’ CEO Marcin Kleczynski takes a deep dive into the topic. (Read more…) The post ChatGPT: Cybersecurity friend or foe?…