The latest Malicious Software Removal Tool, released Tuesday by Microsoft as part of its monthly security update, includes detection and elimination of the Internet Antivirus Pro family of rogue security programs. Like other scareware, Antivirus Pro tries to trick users into believing their computers are infested with malware, according to a post on the Microsoft Malware Protection Center blog. When users run the purported cleanup feature, the program instead infects their machines with a trojan that steals FTP usernames and passwords. — DK
Japanese multinational conglomerate Sony has begun an investigation into an alleged cyberattack, which was reported to have resulted in the exposure of 3.14 GB of data in hacking forums, amid the emergence of different attackers claiming to be behind the hack, according to BleepingComputer.
BleepingComputer reports that vulnerable Openfire messaging servers impacted by the already addressed high-severity authentication bypass flaw, tracked as CVE-2023-32315, are being subjected to ongoing attacks aimed at ransomware encryption and cryptominer distribution.
T-Mobile has denied being impacted by a cyberattack in April that compromised employee information after VX-Underground reported that it had been notified by threat actors of the attack, which occurred immediately after the telecommunications provider was breached in March, according to The Record, a news site by cybersecurity firm Recorded Future.