Security researcher Patrick Wardle of Synack has discovered a new potential use of malware that targets the use of the Mac OS X webcam. This new attack allows OS X malware to record video and audio whenever a victim legitimately turns on their webcam, without drawing attention to itself. As you can see in the [...]
APT28 is a Russian hacking group that is recently known for the DNC hacking and the World Anti-Doping Agency (WADA) Olympic data leaks. APT28 is a group of hackers is associated with Sofacy, Pawn Storms, Fancy Bear and Sednit. This time they're targeting OS X devices using a new trojan called Komplex. They're distributing Komplex [...]
Researchers at InfoArmor have uncovered a new tool that allows cybercriminals to package malware into popular torrent files. This new tool is called RAUM and is believed to have been created by an Eastern European crime group by the name of Black Team. The new tool uses a "pay-per-install" model which is only available in [...]
Security researchers at zScaler have come across a new variant of a commercial keylogger called iSpy. This new variance not only captures victim’s keystrokes, but it can also take screenshots, access their webcam, and steal user data and license keys to popular applications. We call it a commercial keylogger because it actually has a subscription [...]
Malware researchers from security firm Sophos have analyzed a new strain of malware detected as Mal/Miner-C that was designed to abuse resources of the infected machine to mine Monero (XMR) cryptocurrency. The experts discovered that the new malware leverages network-attached storage (NAS) devices as attack vector. The authors of Mal/Miner-C used the NSIS (Nullsoft Scriptable [...]
The IT security researchers at MalwareMustDie have discovered a malware that is capable of infecting Linux-based Internet of Things (IoT) devices and web servers to launch DDoS attacks, called Linux/Luabot. Earlier this week we reported on a similar malware BASHLITE. It is written in the Lua programming language which can infect a system and issue [...]
There have been some trojans that install malicious versions of the TeamViewer software circulating since 2011. Dr. Web has posted a new iteration of this tojan, calling it BackDoor.TeamViewerENT.1. All iterations of this trojan have been distributed under the name Spy-Agent. The Trojan is used to install additional malware such as keyloggers and form grabbers [...]
Level 3 Threat Research Labs tracked a family of malware, variously called Lizkebab, BASHLITE, Torlus and Gafgyt, that is capable of causing IoT-based DDoS attacks. Most of the infected IoT devices are digital video recorders (DVRs). What is BASHLITE? Bashlite can brute force a vulnerable device and steal its login credentials and distributes itself on [...]
The CryptoWall ransomware has been updated to make it more difficult for users to recover their encrypted data. The latest version of CryptoWall, version 4.0, will now alter the file names of data that it has encrypted to prevent victims from determining exactly what has been affected by the program. In addition, ransomware will now [...]