Tag: Malwarebytes Labs

August Patch Tuesday stops actively exploited attack chain and more

Categories: Exploits and vulnerabilities Categories: News Microsoft has announced patches for 87 vulnerabilities this month, including two that are being actively exploited. (Read more…) The post August Patch Tuesday stops actively exploited attack chain and more appeared first on Malwarebytes…

Ransomware review: August 2023

Categories: Threat Intelligence July saw one of the highest number of ransomware attacks in 2023 at 441. At the forefront of these attacks is, once again, Cl0p. (Read more…) The post Ransomware review: August 2023 appeared first on Malwarebytes Labs.…

Voter data stolen in UK Electoral Commission systems breach

Categories: Personal Tags: electoral commission Tags: election Tags: voting Tags: vote Tags: record Tags: roll Tags: register Tags: breached Tags: compromise Tags: uk Tags: opt-out We take a look at reports that the UK’s electoral commission has been breached, and…

Cloudflare Tunnel increasingly abused by cybercriminals

Categories: News Tags: Cloudflare Tunnel Tags: cloudflared Tags: rdp Tags: https Tags: smb Tags: ssh Researchers have found that cybercriminals are shifting to Cloudflare Tunnel to hide and anonymize their nefarious activities. (Read more…) The post Cloudflare Tunnel increasingly abused…

Digital assets continue to be prime target for malvertisers

Categories: Threat Intelligence Tags: malvertising Tags: nft Tags: crypto Tags: wallet Tags: bing Tags: google NFT enthusiasts are getting their wallets drained after clicking on a malicious ad. (Read more…) The post Digital assets continue to be prime target for…

Server breach could be fatal blow for LetMeSpy

Categories: Personal Tags: letmespy Tags: stalkerware Tags: spy Tags: snoop Tags: install Tags: data Tags: breach Tags: hacked We take a look at reports of an app called LetMeSpy facing an imminent shutdown after a server breach and data deletion…

A week in security (July 31 – August 6)

Categories: News Tags: Ivanti Tags: Meta Tags: Teams Tags: ransomware rollback Tags: AMP Tags: Minecraft Tags: Barracuda A list of topics we covered in the week of July 31 to August 6 of 2023 (Read more…) The post A week…

New Security Advisor amps up security in minutes

Categories: Business The new feature provides comprehensive health score that assesses the quality of your Nebula implementation. (Read more…) The post New Security Advisor amps up security in minutes appeared first on Malwarebytes Labs. This article has been indexed from…

2022’s most routinely exploited vulnerabilities—history repeats

Categories: Exploits and vulnerabilities Categories: News Tags: Zoho ManageEngine Tags: CVE-2021-40539 Tags: Log4Shell Tags: CVE-2021-44228 Tags: CVE-2021-13379 Tags: ProxyShell Tags: CVE-2021-34473 Tags: CVE-2021-31207 Tags: CVE-2021-34523 Tags: CVE-2021-26084 Tags: Atlassian Tags: CVE-2022-22954 Tags: CVE-2022-22960 Tags: CVE-2022-26134 Tags: CVE-2022-1388 Tags: CVE-2022-30190 Tags:…

TikTok facing fines for violating children’s privacy

Categories: News Categories: Privacy Tags: tiktok Tags: privacy Tags: gdpr Tags: children Tags: under 13 TikTok is looking at yet another fine… (Read more…) The post TikTok facing fines for violating children’s privacy appeared first on Malwarebytes Labs. This article…

How to protect your child’s identity

Categories: News Categories: Personal Tags: Children Tags: identity Tags: theft Tags: protection Tags: SSN Tags: COPPA Identity theft is a serious problem, especially when it affects children. (Read more…) The post How to protect your child’s identity appeared first on…

FAQ: How does Malwarebytes ransomware rollback work?

Categories: Business Malwarebytes Ransomware Rollback rescues your data from encryption by effectively “turning back the clock” of a ransomware attack. But how does it work, exactly? (Read more…) The post FAQ: How does Malwarebytes ransomware rollback work? appeared first on…

Film companies lose battle to unmask Reddit users

Categories: Personal Tags: reddit Tags: copyright Tags: piracy Tags: court Tags: case Tags: movie Tags: film Tags: producer Tags: pirate Tags: torrent Tags: steal Tags: theft Tags: download Tags: IP A Judge has thrown out a case where multiple movie…

Ivanti patches second zero-day vulnerability being used in attacks

Categories: Exploits and vulnerabilities Categories: News Tags: Ivanti Tags: EPMM Tags: MobileIron Tags: CVE-2023-35081 Tags: CVE-2023-35078 Tags: tomcat Tags: arbitrary file write Tags: ACL Tags: upgrade Ivanti has issued a patch to address a second critical zero-day vulnerability (Read more…)…

A week in security (July 24 – July 30)

Categories: News Tags: week Tags: security Tags: 2023 Tags: July A list of topics we covered in the week of July 24 to July 30 of 2023 (Read more…) The post A week in security (July 24 – July 30)…

60,000 Androids have stalkerware-type app Spyhide installed

Categories: News Categories: Privacy Tags: stalkerware Tags: carew Tags: spyhide A hacktivist was able to grab all the data from a stalkerware operator and shared the method and the findings. (Read more…) The post 60,000 Androids have stalkerware-type app Spyhide…

How to set up computer security for your parents

Categories: News Categories: Personal Tags: parents Tags: cybersecurity Tags: chromebook Tags: auto updates Tags: urgent notifications Tags: remote desktop Tags: router Tags: block list Tags: encryption Here are some tips that you can use to set up a secure environment…

Update now! Apple fixes several serious vulnerabilities

Categories: Exploits and vulnerabilities Categories: News Tags: Apple Tags: WebKit Tags: CVE-2023-38606 Tags: CVE-2023-32409 Tags: CVE-2023-37450 Tags: CVE-2023-32416 Apple has released security updates for several products to address several serious vulnerabilities including some actively exploited zero-days. (Read more…) The post…

A week in security (July 17 – 23)

Categories: News Tags: week in security Tags: malwarebytes Tags: July Tags: 2023 A list of topics we covered in the week of July 17 to July 23 of 2023 (Read more…) The post A week in security (July 17 –…

Docker Hub images found to expose secrets and private keys

Categories: Awareness Categories: News Tags: Docker Tags: Docker Hub Tags: containerization Tags: secrets Tags: exposed Researchers have found that numerous Docker images shared on Docker Hub expose sensitive data. (Read more…) The post Docker Hub images found to expose secrets…

FakeSG enters the ‘FakeUpdates’ arena to deliver NetSupport RAT

Categories: Threat Intelligence Tags: fakeupdates Tags: socgholish Tags: netsupport Tags: RAT A new campaign leveraging compromised WordPress sites emerges with another fake browser update. (Read more…) The post FakeSG enters the ‘FakeUpdates’ arena to deliver NetSupport RAT appeared first on…

A week in security (July 10 – 16)

Categories: News Tags: week Tags: security Tags: July Tags: 2023 A list of topics we covered in the week of July 10 to July 16 of 2023 (Read more…) The post A week in security (July 10 – 16) appeared…

Act now! In-the-wild Zimbra vulnerability needs a workaround

Categories: Exploits and vulnerabilities Categories: News Tags: Zimbra Tags: MalasLocker Tags: vulnerability Tags: Google Tags: actively exploited Tags: fn:escapeXml Security experts are warning Zimbra users that a vulnerability for which there is no patch is being actively exploited in the…

Tax preparation firms shared sensitive information with Meta

Categories: News Categories: Privacy Tags: tax preparation Tags: Meta Tags: Pixel Tags: Markup Tax preparation firms shared personal and financial information with social media giant Meta (Read more…) The post Tax preparation firms shared sensitive information with Meta appeared first…

Ransomware review: July 2023

Categories: Threat Intelligence Following a three-month lull of activity, Cl0p returned with a vengeance in June and beat out LockBit as the month’s most active ransomware gang. (Read more…) The post Ransomware review: July 2023 appeared first on Malwarebytes Labs.…

From Malvertising to Ransomware: A ThreatDown webinar recap

Categories: Business Get the low-down on our recent webinar From Malvertising to Ransomware. (Read more…) The post From Malvertising to Ransomware: A ThreatDown webinar recap appeared first on Malwarebytes Labs. This article has been indexed from Malwarebytes Labs Read the…

Update now! Microsoft patches a whopping 130 vulnerabilities

Categories: Exploits and vulnerabilities Categories: News Tags: Microsoft Tags: Adobe Tags: Apple Tags: Android Tags: Cisco Tags: Fortinet Tags: MOVEit Tags: Mozilla Tags: SAP Tags: VMware Tags: CVE-2023-32049 Tags: CVE-2023-35311 Tags: CVE-2023-32046 Tags: CVE-2023-36874 Tags: CVE-2023-36844 For the July 2023…

How to secure your business before going on vacation

Categories: Business Are you a critical security expert for your organization? Are you also going on vacation? Here’s how to ensure your time away from the office doesn’t get interrupted with a security incident. (Read more…) The post How to…

Threatening rogue finance apps removed from the Apple Store

Categories: Personal Tags: app Tags: finance Tags: india Tags: loan Tags: rogue Tags: Apple Store Tags: play store Tags: google Tags: threaten Tags: blackmail Tags: sextortion Tags: fake Tags: deepfake Tags: deepfakes Tags: morph Multiple finance apps have been removed…

A week in security (July 3 – 9)

Categories: News Tags: week Tags: security Tags: July 2023 A list of topics we covered in the week of July 3 to July 9 of 2023 (Read more…) The post A week in security (July 3 – 9) appeared first…

Warning issued over increased activity of TrueBot malware

Categories: News Categories: Ransomware Tags: TrueBot Tags: Cl0p Tags: Silence Group Tags: CVE-2022-31199 Tags: Raspberry Robin Tags: FlawedGrace Tags: Cobalt Strike Tags: Teleport CISA, the FBI, the MS-ISAC, and the CCCS have warned about increased activity of the TrueBot malware…

Malwarebytes Browser Guard introduces three new features

Categories: Personal Tags: Malwarebytes Tags: Browser Guard Tags: Premium Tags: new features Malwarebytes Browser Guard introduces three new features: Content control, import & export, and historical detection statistics (Read more…) The post Malwarebytes Browser Guard introduces three new features appeared…

MOVEit Transfer fixes three new vulnerabilities

Categories: Exploits and vulnerabilities Categories: News Categories: Ransomware Tags: Progress Tags: MOVEit Tags: vulnerabilities Tags: CVE-2023-36934 Tags: CVE-2023-36932 Tags: CVE-2023-36933 CISA has warned users about three new vulnerabilities in Progress Software’s MOVEit Transfer software. (Read more…) The post MOVEit Transfer…

Solar monitoring systems exposed: Secure your devices

Categories: Business Tags: solar Tags: monitoring Tags: service Tags: exposed Tags: web Tags: facing Tags: secure Tags: scan Tags: lockdown Tags: update We take a look at reports that 130,000 solar monitoring devices are sitting exposed online. (Read more…) The…

How kids pay the price for ransomware attacks on education

Categories: News Categories: Personal Categories: Ransomware Tags: ransomware Tags: vice Tags: education Tags: files Tags: dark web Tags: ssn Tags: stolen identity Data stolen during attacks on schools can contain highly sensitive information. (Read more…) The post How kids pay…

Update Android now! Google patches three actively exploited zero-days

Categories: Exploits and vulnerabilities Categories: News Tags: Google Tags: Android Tags: 2023-07-05 Tags: CVE2021-29256 Tags: CVE-2023-26083 Tags: CVE-2023-2136 Tags: CVE-2023-21250 Tags: ARM Tags: Skia Google has patched 43 vulnerabilities in Android, three of which are actively exploited zero-day vulnerabilities. (Read…

Warning issued over vulnerability in cardiac devices

Categories: Exploits and vulnerabilities Categories: News Tags: Medtronic Tags: Paceart Optima Tags: CVE-2023-31222 Tags: deserialization Tags: update Tags: messaging A vulnerability in Medtronic’s Paceart Optima cardiac device could lead to further network penetration, RCE, and DoS attacks (Read more…) The…

Self-driving cars are a privacy issue, says security expert

Categories: News Categories: Personal Categories: Privacy Tags: self-driving cars Tags: CCTV Tags: video doorbell Tags: security cams Tags: dashcams As the number of self-driving cars increases, so does the number of cameras on the roads. This creates a possible privacy…

Malicious ad for USPS fishes for banking credentials

Categories: Threat Intelligence Tags: malvertising Tags: google Tags: usps Tags: phishing Next time you need to track a package, be aware that malicious ads could be leading you to sites that steal your banking information. (Read more…) The post Malicious…

Elderly targeted in car accident scam, kingpin arrested

Categories: News Categories: Personal Tags: Europol Tags: relative Tags: law enforcement The head of a criminal network responsible for defrauding hundreds of elderly people has been arrested, Europol has announced. (Read more…) The post Elderly targeted in car accident scam,…

Fake reviewers face big fines

Categories: Business Tags: reviews Tags: fake Tags: ftc Tags: fine Tags: fraud Tags: bogus Tags: portal Tags: site Tags: rating Tags: score The FTC’s new proposed rule would apply large fines to those found distributing fake reviews online. (Read more…)…

A week in security (June 26 – July 2)

Categories: News A list of topics we covered in the week of June 26 to July 2 of 2023 (Read more…) The post A week in security (June 26 – July 2) appeared first on Malwarebytes Labs. This article has…

Online safety tips for LGBTQIA+ communities

Categories: Personal The internet is great for bringing people together, but it can also be a nasty place. Here are some tips to help keep you as safe as possible online. (Read more…) The post Online safety tips for LGBTQIA+…

Spyware app LetMeSpy hacked, tracked user data posted online

Categories: News Categories: Personal Stalkerware-type app LetMeSpy has been hacked, with the attacker taking user data with it, the service has announced. (Read more…) The post Spyware app LetMeSpy hacked, tracked user data posted online appeared first on Malwarebytes Labs.…

A proxyjacking campaign is looking for vulnerable SSH servers

Categories: Cybercrime Categories: News Tags: proxyjacking Tags: cryptojacking Tags: curl Tags: Docker Tags: proxy service Tags: compromised Proxyjacking is a cybercrime where your bandwidth is sold by criminals. (Read more…) The post A proxyjacking campaign is looking for vulnerable SSH…

Why blocking ads is good for your digital health

Categories: Personal Tags: ad Tags: advert Tags: block Tags: blocking Tags: advertising Tags: blocker Tags: ad block Tags: tracking Tags: cookies Tags: analytics Tags: affiliate Tags: adware Tags: IoT We take a look at why blocking adverts and tracking is…

SupremeBot and Mario cross the finish line together

Categories: News Tags: Mario Tags: SupremBot Tags: XMR miner Tags: cryptominers Tags: mining client Tags: scheduled task Tags: C2 Download your games from trusted sources or you may get more than you bargained for… (Read more…) The post SupremeBot and…

Understanding ransomware reinfection: An MDR case study

Categories: Business Ransomware is like that stubborn cold that you thought you kicked, but creeps back up determined to run amok again. (Read more…) The post Understanding ransomware reinfection: An MDR case study appeared first on Malwarebytes Labs. This article…

A week in security (June 19 – 25)

Categories: News Tags: week Tags: security A list of topics we covered in the week of June 19 to June 25 of 2023 (Read more…) The post A week in security (June 19 – 25) appeared first on Malwarebytes Labs.…

9 basic security tips for seniors

Categories: News Categories: Personal Tags: seniors Tags: basic secuirty tips Tags: personal information Tags: too good to be true Tags: infected computer Tags: system optimizers Tags: web push notifications Tags: green padlock Tags: password manager Help the people around you…

5 facts to know about the Royal ransomware gang

Categories: Business A quick look the cybercriminal group known as Royal—one of the fastest growing ransomware gangs today. (Read more…) The post 5 facts to know about the Royal ransomware gang appeared first on Malwarebytes Labs. This article has been…

Microsoft Azure AD flaw can lead to account takeover

Categories: Exploits and vulnerabilities Categories: News Tags: OAuth Tags: nOAuth Tags: IdP Tags: Azure Tags: Microsoft Tags: login with Researchers have found a flaw in Microsoft Azure AD which they claim can be used to take over accounts that rely…

6 tips for a cybersecure honeymoon

Categories: Personal Your big day is over, but while you’re relaxing on honeymoon you don’t want to get distracted by security problems. So, we rounded up some quick tips to keep your devices safe. (Read more…) The post 6 tips…

Update now! Apple fixes three actively exploited vulnerabilities

Categories: Apple Categories: Exploits and vulnerabilities Categories: News Tags: Apple Tags: kernel webkit Tags: CVE-2023-32434 Tags: CVE-2023-32435 Tags: CVE-2023-32439 Tags: type confusion Tags: integer overflow Tags: operation triangulation Apple has released security updates for several products to address a set…