Researchers were surprised by the botnet’s size, with security firm NSFOCUS dubbing it “the largest botnet ever discovered”. A botnet named ‘Pink’ infected over 1.6 million devices, according to security researchers who have been analyzing the malicious network for some time. Pink has been used to launch over 100 DDoS attacks to date, making it…
Tag: Malware
New Malware-As-A-Service Targets Gamers’ Accounts And Banking Info
Just as Microsoft and Google offer subscription-based productivity software and cloud file storage, cybercriminals offer pay-as-you-go malware. One such service that was discovered recently is taking aim at PC gamers. Unsubtly Dubbed BloodyStealer, the malware is being offered via Russian-speaking underground hacking forums. The going rate is around $10 per month, but for the bargain…
This phishing email is pushing password-stealing malware to Windows PCs
An old form of trojan malware has been updated with new abilities, warn cybersecurity researchers. A phishing campaign is delivering a new variant of one of the oldest forms of remote access trojan (RAT) malware in an effort to steal usernames, passwords and other sensitive information. It also aims to steal cryptocurrency from the victim….
M1 security vulnerability ‘baked into chip,’ but researcher says it doesn’t matter
An M1 security vulnerability has been discovered that likely cannot be mitigated by Apple, but the researcher who found it says it’s not something we need to worry about … Here’s Hector Martin’s description of it: A flaw in the design of the Apple Silicon “M1” chip allows any two applications running under an OS to covertly exchange data…
Malware and ransomware gangs have found this new way to cover their tracks
Theres’s been a huge uptick in the proportion of malware using TLS or the Transport Layer Security to communicate without being spotted, cybersecurity firm Sophos reports. While HTTPS helps prevent eavesdropping, man-in-the-middle attacks, and hijackers who try to impersonate a trusted website, the protocol has also offered cover for cyber criminals to privately share information…
Hackers Targeting professionals With ‘more_eggs’ Malware via LinkedIn Job Offers
A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called “more_eggs.” To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the same name as that of the victims’ job titles taken…
Hackers exploit websites to give them excellent SEO before deploying malware
Cyberattackers have turned to search engine optimization (SEO) techniques to deploy malware payloads to as many victims as possible. According to Sophos, the so-called search engine “deoptimization” method includes both SEO tricks and the abuse of human psychology to push websites that have been compromised up Google’s rankings. SEO optimization is used by webmasters to legitimately increase…