November 2021 – Page 9

These are the top-level domains threat actors like the most

Out of over a thousand top-level domain choices, cyber-criminals and threat actors prefer a small set of 25, which accounts for 90% of all malicious sites. […]

12 Nov

Microsoft warns of surge in HTML smuggling phishing attacks

Microsoft has seen a surge in malware campaigns using HTML smuggling to distribute banking malware and remote access trojans (RAT). […]

12 Nov

Costco discloses data breach after finding credit card skimmer

Costco Wholesale Corporation has warned customers in notification letters sent this month that their payment card information might have been stolen while recently shopping at one of its stores. […]

12 Nov

Zero-day bug in all Windows versions gets free unofficial patch

A free and unofficial patch is now available for a zero-day local privilege escalation vulnerability in the Windows User Profile Service that lets attackers gain SYSTEM privileges under certain conditions. […]

11 Nov

The new Microsoft Store is now rolling out to Windows 10 PCs

Microsoft has started rolling out Windows 11’s new Microsoft Store to Windows 10, allowing users a greater option of apps for users to install. […]

11 Nov

Windows 10 App Installer abused in BazarLoader malware attacks

The TrickBot gang operators are now abusing the Windows 10 App Installer to deploy their BazarLoader malware on the systems of targets who fall victim to a highly targeted spam campaign. […]

11 Nov

Hackers undetected on Queensland water supplier server for 9 months

Hackers stayed hidden for nine months on a server holding customer information for a Queensland water supplier, illustrating the need of better cyberdefenses for critical infrastructure. […]

11 Nov

Magniber ransomware gang now exploits Internet Explorer flaws in attacks

The Magniber ransomware gang is now using two Internet Explorer vulnerabilities and malicious advertisements to infect users and encrypt their devices. […]

11 Nov

Russian ‘King of Fraud’ sentenced to 10 years for Methbot botnet

The U.S. Department of Justice (DOJ) sentenced a Russian man for operating a large-scale digital advertising fraud scheme called ‘Methbot’ (‘3ve’) that stole at least $7 million from American companies. […]

11 Nov

New bill sets ransomware attack response rules for US financial orgs

New legislation introduced this week by US lawmakers aims to set ransomware attack response “rules of road” for US financial institutions. […]

Month: November 2021

These are the top-level domains threat actors like the most

Microsoft warns of surge in HTML smuggling phishing attacks

Costco discloses data breach after finding credit card skimmer

Zero-day bug in all Windows versions gets free unofficial patch

The new Microsoft Store is now rolling out to Windows 10 PCs

Windows 10 App Installer abused in BazarLoader malware attacks

Hackers undetected on Queensland water supplier server for 9 months

Magniber ransomware gang now exploits Internet Explorer flaws in attacks

Russian ‘King of Fraud’ sentenced to 10 years for Methbot botnet

New bill sets ransomware attack response rules for US financial orgs