Securezoo Cybersecurity Threat Center topics on malware.
Palo Alto Unit 42 security researchers have been tracking a cryptocurrency mining malware dubbed ‘Rarog’ that has been sold in underground cybercriminal forums since June of 2017.
Rarog Cryptocurrency Mining Trojan Read More »
Security researchers have identified a new MacOS backdoor potentially linked to the OceanLotus threat group, also known as “APT 32”, “SeaLotus” and “Cobalt Kitty” to name a few.
New macOS backdoor spotted Read More »
Talos security researchers have spotted a new family of malware dubbed “GoScanSSH” that compromises internet-facing SSH servers. The malware targets default and weak passwords via a brute force attack on SSH systems that allow password-based SSH authentication.
GoScanSSH malware targets default and weak passwords Read More »
The city of Atlanta was hit in a massive ransomware attack. Many systems and services were still down nearly four days after the attack first hit last Thursday. The ransomware attack has impacted several of its departments and took down government websites that process payments and relay court information, according to Threatpost. The city’s public services department
City of Atlanta victim of ransomware attack Read More »
Researchers at Purdue University have developed a new tool dubbed R2D2 (short for “Reactive Redundancy for Data Destruction Protection”) that can protect systems from disk-wiping malware such as Shamoon and Stonedrill.
R2D2 thwarts disk-wiping malware Read More »
Palo Alto Networks Unit 42 security researchers have discovered a new malware dubbed “ComboJack” that targets multiple cryptocurrencies and web based online wallets.
ComboJack cryptocurrency stealing malware Read More »
The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified Trojan malware variants, HARDRAIN and BADCALL, used by the North Korean government.
HARDRAIN and BADCALL malware Read More »
Trend Micro researchers detected a new variant of Android Remote Access Tool (AndroRAT) that targets an older publicly disclosed vulnerability (CVE-2015-1805) that allows an attacker to compromise older Android devices to perform privilege escalation.
AndroRAT exploits older Android vulnerability Read More »
Trend Micro researchers discovered attackers are exploiting a previously patched Windows vulnerability (CVE-2017-11882) by abusing the Windows Installer service, msiexec.exe, to deliver LokiBot malware.
Attack abuses Windows Installer service to deliver LokiBot Read More »
Another crypto-miner is on the loose. The new strain of malware dubbed “ADB.Miner” is spreading rapidly across Android devices with objective to infect and mine Monero cryptocurrency.
ADB.Miner worm spreads rapidly Read More »
