Malware, Security Strategy, Plan, Budget

Group makes final push to rid DNSChanger infections

Despite months of warnings, 303,867 machines worldwide remain infected with DNSChanger malware, according to the most recent statistics from the DNSChanger Working Group. Unless something happens within the next two weeks, these machines will lose internet connectivity on July 9, when the alternate DNS servers maintained by the nonprofit Internet Systems Consortium are turned off. The trojan can modify DNS settings to point compromised computers to rogue DNS servers, giving attackers control over which websites visitors could access. The alternate servers provide valid DNS routing for those machines still configured to use the malicious addresses, but that functionality is slated to attend in just under two weeks.

Related

GitHub search exploited for malware distribution

Malware-laced GitHub repositories using popular names and topics are being advanced by threat actors through automated updates and fraudulent stars meant to manipulate the leading software developer platform's search rankings as part of a new open-source supply chain attack, The Hacker News reports.

Rhadamanthys infostealer deployed via AI-based PowerShell

Several organizations across Germany have been targeted by suspected initial access broker TA547, also known as Scully Spider, with attacks using a generative artificial intelligence-based PowerShell to deliver the Rhadamanthys information-stealing malware, reports BleepingComputer.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.