Blog - Page 905 of 910

CCleaner Compromised to Distribute Malware for Almost a Month

Version 5.33 of the CCleaner app offered for download between August 15 and September 12 was modified to include the Floxif malware, according to a report published by Cisco Talos a few minutes ago. Floxif is a malware downloader that gathers information about infected systems and sends it back to its C&C server. The malware […]

18 Sep

LiteBit Bitcoin Exchange Hacked Twice in Two Months

LiteBit.eu — a multi-currency exchange based in the Netherlands — has suffered data breaches two months in a row. According to emails sent to affected customers after each event, no Bitcoin or altcoin funds were stolen in any of these two incidents. The company says the attacker only pilfered user personal information, such as emails, […]

16 Sep

The Loopix Anonymity System Wants to Be a More Secure Alternative to Tor

Loopix is a new anonymity network developed by a group of researchers from University College London (UCL) that comes with all the good parts of previous systems and new additions to improve security. Both Loopix and Tor are based on the concept of mix networks and are meant to provide a way to send anonymous […]

13 Sep

US Officially Bans Kaspersky Products From Government Systems

In a Binding Operational Directive published today by the Department of Homeland Security (DHS), the US government has banned the use of Kaspersky Lab security software on government computers. The decision comes after a Senate Intelligence Committee accused the Russian antivirus vendor of having secret ties to the Russian government. Senate meetings were held on […]

13 Sep

Exploit Broker Zerodium Offers $1 Million for Tor Browser Zero-Days

Zerodium, a company that buys exploits to sell to government agencies, is offering up to $1 million for zero-days affecting the Tor Browser. In a bug acquisition program launched today, the company says it’s interested in Tor Browser exploits that “[lead] to remote code execution on the targeted OS either with privileges of the current […]

13 Sep

Backdoor Found in WordPress Plugin With More Than 200,000 Installations

For the past two and a half months, a WordPress plugin named Display Widgets has been used to install a backdoor on WordPress sites across the Internet. The backdoor code was found between Display Widgets version 2.6.1 (released June 30) and version 2.6.3 (released September 2). The WordPress.org team has intervened and removed the plugin […]

13 Sep

Second Researcher Drops Router Exploit Code After D-Link Mishandles Bug Reports

Embedi, a hardware security firm, has published details about two vulnerabilities that have yet to be patched in the firmware of D-Link routers. This marks the second incident of this sort in the last five days. Last Friday, South Korean security researcher Pierre Kim also published public details about ten unpatched vulnerabilities in D-Link routers. […]

13 Sep

RouteX Malware Uses Netgear Routers for Credential Stuffing Attacks

A Russian-speaking hacker has been infecting Netgear routers over the past months with a new strain of malware named RouteX that he uses to turn infected devices into SOCKS proxies and carry out credential stuffing attacks. According to Forkbombus Labs, the US cyber-security firm that uncovered this new threat, the hacker is using CVE-2016-10176, a […]

11 Sep

Google Accused of Trying to Patent Public Domain Technology

A Polish academic is accusing Google of trying to patent technology he invented and that he purposely released into the public domain so companies like Google couldn’t trap it inside restrictive licenses. The technology’s name is Asymmetric Numeral Systems (ANS) [1, 2], a family of entropy coding methods that Polish assistant professor Jarosław (Jarek) Duda […]

11 Sep

Intra-Library Collusion Attacks Open the Door for a Whole New Kind of Android Malware

A team of Oxford and Cambridge researchers is the latest to join a chorus of voices sounding the alarm on a new attack vector named Intra-Library Collusion (ILC) that could make identifying Android malware much harder in the upcoming future. The research team has described the ILC attack vector in a research paper released last […]