March 2022 – Page 8

Unsecured Microsoft SQL, MySQL servers hit by Gh0stCringe malware

Hackers target poorly secured Microsoft SQL and MySQL database servers to deploy the Gh0stCringe remote access trojans on vulnerable devices. […]

16 Mar

Facebook removes deepfake of Ukrainian President Zelenskyy

Facebook has removed a deepfake video of Ukrainian President Volodymyr Zelenskyy spreading across the social network and asking Ukrainian troops lay down their arms and surrender. […]

16 Mar

SolarWinds warns of attacks targeting Web Help Desk instances

SolarWinds warned customers of attacks targeting Internet-exposed Web Help Desk (WHD) instances and advised removing them from publicly accessible infrastructure (likely to prevent the exploitation of a potential security flaw). […]

16 Mar

Microsoft Defender tags Office updates as ransomware activity

Windows admins were hit today by a wave of Microsoft Defender for Endpoint false positives where Office updates were tagged as malicious in alerts pointing to ransomware behavior detected on their systems. […]

16 Mar

Hundreds of GoDaddy-hosted sites backdoored in a single day

Internet security analysts have spotted a spike in backdoor infections on WordPress websites hosted on GoDaddy’s Managed WordPress service, all featuring an identical backdoor payload. […]

15 Mar

HackerOne apologizes to Ukrainian hackers for mistakenly blocking payouts

Today, Chris Evans, the CISO of bug bounty platform HackerOne, apologized to Ukrainian hackers after erroneously blocking their bug bounty payouts following sanctions imposed on Russia and Belarus after Ukraine’s invasion. […]

15 Mar

Dozens of ransomware variants used in 722 attacks over 3 months

The ransomware space was very active in the last quarter of 2021, with threat analysts observing 722 distinct attacks deploying 34 different variants. […]

15 Mar

FBI warns of MFA flaw used by state hackers for lateral movement

The FBI says Russian state-backed hackers gained access to a non-governmental organization (NGO) cloud after enrolling their own device in the organization’s Duo MFA following the exploitation of misconfigured default multifactor authentication (MFA) protocols. […]

15 Mar

New Linux botnet exploits Log4J, uses DNS tunneling for comms

A recently discovered botnet under active development targets Linux systems, attempting to ensnare them into an army of bots ready to steal sensitive info, installing rootkits, creating reverse shells, and acting as web traffic proxies. […]

15 Mar

Android trojan persists on the Google Play Store since January

Security researchers tracking the mobile app ecosystem have noticed a recent spike in trojan infiltration on the Google Play Store, with one of the apps having over 500,000 installs. […]

Month: March 2022

Unsecured Microsoft SQL, MySQL servers hit by Gh0stCringe malware

Facebook removes deepfake of Ukrainian President Zelenskyy

SolarWinds warns of attacks targeting Web Help Desk instances

Microsoft Defender tags Office updates as ransomware activity

Hundreds of GoDaddy-hosted sites backdoored in a single day

HackerOne apologizes to Ukrainian hackers for mistakenly blocking payouts

Dozens of ransomware variants used in 722 attacks over 3 months

FBI warns of MFA flaw used by state hackers for lateral movement

New Linux botnet exploits Log4J, uses DNS tunneling for comms

Android trojan persists on the Google Play Store since January