Exploit | SC Media
Skip to navigation Skip to main content

Exploit

Mobile Security, Privacy & Compliance News and Analysis, Research, Security News, Vulnerabilities, Wireless Security

Researchers devise method to track Bluetooth devices, despite built-in protections

By
Publish Date

Researchers from Boston University (BU) have discovered a way to circumvent anonymization protections on Bluetooth Low Energy devices, allowing potentially malicious actors to passively track the movements of these devices and their users. BLE devices rely on non-encrypted advertising messages to signal their availability to other devices to pair up. To prevent third-party actors from…

Cryptocurrency, Cybercrime, Malware, Ransomware, Security News

ShadowGate malvertising group serves up SEON ransomware via Greenflash Sundown exploit kit

By
Publish Date

The cybercriminal group ShadowGate has emerged from a long quiet period, launching a global malvertising campaign that redirects victims to the Greenflash Sundown exploit kit, in order to infect them with SEON ransomware, a cryptominer and the Pony credential-stealer. Also known as WordsJS, the ShadowGate group is more typically known for targeting Asia, especially South…

Cybercrime, Phishing, Ransomware, Security News

Sodinokibi ransomware campaigns span growing array of attack vectors

By
Publish Date

Since its discovery of Sodinokibi ransomware last April, cybercriminals have reportedly been attempting to infect networks with the malicious encryption program through a growing number of vectors, including supply chain attacks, spam, and malvertisements that redirect victims to an exploit kit. Sodinokibi encrypts data found in the user directory and prevents data recovery by leveraging…

Malware, Security News, Vulnerabilities

New OSX/Linker malware created to exploit bypass bug in macOS X Gatekeeper

By
Publish Date

Mac researchers have discovered a new malware program designed to specifically exploit a recently disclosed zero-day bypass vulnerability in macOS X Gatekeeper, which has still yet to be patched. Dubbed OSX/Linker, the malware appears to be crafted by the same developers behind OSX/Surfbuyer, an adware program that also targets Mac users, according to Joshua Long,…

Cryptocurrency, Cybercrime, Malware, Security News

Plurox backdoor opens up networks to cryptominers and protocol exploits

By
Publish Date

Researchers earlier this year discovered a modular backdoor that delivers one of eight different cryptominers to infected systems, as well as malicious plug-ins that exploit the UPnP and SMB protocols. Written in C and compiled with Mingw GCC, the malware, dubbed Plurox, was discovered last February by researchers at Kaspersky, who believe they detected the…

Monero crypto-currency (Cryptonic.net)
Cryptocurrency, Cybercrime, Malware, Security News, Vulnerabilities

Adversaries exploit WebLogic bug to deliver cryptominer, use .cer files for obfuscation

By
Publish Date

Cybercriminals have been using a recently discovered critical vulnerability in the Oracle WebLogic server to deliver a Monero cryptomining program, while using certificate files to obfuscate malicious code. Caused by a deserialization error, the flaw, CVE-2019-2725, was patched in an April 26 out-of-band security update. The SANS ISC InfoSec forums originally hosted reports of malicious actors exploiting…

Cryptocurrency, Cybercrime, Malware, Security News

BlackSquid malware wants to wrap its tentacles around web servers and drives

By
Publish Date

Researchers have discovered a new malware family that uses a set of eight exploits to compromise web servers, network drives and removable drives. Dubbed BlackSquid, the malware has been observed dropping XMRig cryptominer programs, but attackers could easily use it to deliver other nasty payloads to infected devices, as well as obtain unauthorized access, escalate…

EternalBlue
Cybercrime, Security News, Vulnerabilities

Attempted cyberattacks using EternalBlue exploit soar in recent months

By
Publish Date

Cyberattacks leveraging the Windows Server Message Block exploit known as EternalBlue have reportedly reached historically high levels over the last few months, even though the vulnerability it affects was patched by Microsoft more than two years ago. In a May 17 blog post, ESET security evangelist Ondrej Kubovic said his company’s telemetry data has revealed…

APTs/cyberespionage, Cybercrime, Government/Defense, Malware, Security News

Researchers: Chinese APT group used stolen NSA tools prior to Shadow Brokers leak

By
Publish Date

Some of the U.S. government-linked exploit tools that were published online by the Shadow Brokers hacking group in 2016 and 2017 were actually employed by Chinese actors well before that infamous leak occurred, researchers say. In a blog post yesterday, Symantec reported that its threat research team discovered evidence that cyber espionage actor APT3, aka…

Next post in Security News