15 August 2022

Search Results for: botnet

Meet the Admins of the RSOCKS Proxy Botnet The RUSdot mailer, the email spamming tool made and sold by the administrator of RSOCKS.
5 min read

Meet the Admins of the RSOCKS Proxy Botnet

RiSec.Mitch 27 June 2022
Authorities in the United States, Germany, the Netherlands and the U.K. last week said they dismantled the “RSOCKS” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. While the coordinated action did not name the Russian hackers allegedly behind RSOCKS, KrebsOnSecurity has identified its owner as a 35-year-old Russian man living abroad who also runs the world’s top spam forum, reports KrebsOnSec. According to a statement by the U.S. Department of Justice, RSOCKS offered...
Continue Reading
DISMANTLED: Russian ‘RSocks botnet’ down after hacking millions of devices RSocks botnet
3 min read

DISMANTLED: Russian ‘RSocks botnet’ down after hacking millions of devices

RiSec.Mitch 17 June 2022
The U.S. Department of Justice has announced the disruption of the Russian RSocks malware botnet used to hijack millions of computers, Android smartphones, and IoT (Internet of Things) devices worldwide for use as proxy servers. The law enforcement operation involved the FBI and police forces in Germany, the Netherlands, and the United Kingdom, where the botnet maintained parts of its infrastructure. What is a botnet? A botnet is a swarm of devices that threat actors can remotely control to perform various behaviour, including DDoS attacks, crypto mining, and deploying...
Continue Reading
Log4Shell flaw: Still being used for crypto mining, botnet building… and Rickrolls Log4Shell Flaw
3 min read

Log4Shell flaw: Still being used for crypto mining, botnet building… and Rickrolls

RiSec.n0tst3 3 March 2022
Log4Shell is still a threat, however the flaw is currently mostly being used for crypto mining and knocking out websites Nearly three months on, at the time of writing, Log4Shell, the critical bug in Apache’s widely used Log4j project, hasn’t triggered the disaster that was feared, but it’s still being exploited and predominantly from cloud computers in the US.  The Log4Shell vulnerability came to light in December and sparked concern that it would be exploited by attackers because it was relatively easy to do and because the Java application...
Continue Reading
Abcbot Botnet Linked to Operators of Xanthe Cryptomining malware malware
2 min read

Abcbot Botnet Linked to Operators of Xanthe Cryptomining malware

RiSec.n0tst3 10 January 2022
New research into the infrastructure behind an emerging DDoS botnet named Abcbot has uncovered links with a cryptocurrency-mining botnet attack that came to light in December 2020. Attacks involving Abcbot, first disclosed by Qihoo 360’s Netlab security team in November 2021, are triggered via a malicious shell script that targets insecure cloud instances operated by cloud service providers such as Huawei, Tencent, Baidu, and Alibaba Cloud to download malware that co-opts the machine to a botnet, but not before terminating processes from competing threat actors and establishing persistence. The shell script in question...
Continue Reading
Stantinko Botnet Now Targeting Linux Servers to Hide Behind Proxies 74536e40280daf8107b60d6b132a74c5
2 min read

Stantinko Botnet Now Targeting Linux Servers to Hide Behind Proxies

RiSec.Mitch 24 November 2020
An adware and coin-miner botnet concentrating on Russia, Ukraine, Belarus, and Kazakhstan at least considering that 2012 has now set its sights on Linux servers to fly less than the radar. In accordance to a new evaluation published by Intezer now and shared with The Hacker Information, the trojan masquerades as HTTPd, a usually employed method on Linux servers, and is a new model of the malware belonging to a threat actor tracked as Stantinko. Back again in 2017, ESET researchers comprehensive a significant adware botnet that performs by...
Continue Reading
Akamai: We stopped record DDoS attack in Europe DDoS
3 min read

Akamai: We stopped record DDoS attack in Europe

RiSec.Mitch 2 August 2022
A ‘sophisticated, global botnet’ held an Eastern European biz under siege over 30 days Akamai Technologies squelched the largest-ever distributed denial-of-service (DDoS) attack in Europe earlier this month against a company that was being consistently hammered over a 30-day period. According to the cybersecurity and cloud services vendor, the height of the attack hit on July 21, when over a 14-hour period it peaked at 659.6 million packets per second (Mpps) and 853.7 gigabits per second (Gbps). “The attack, which targeted a swath of customer IP addresses, formed the...
Continue Reading
Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors
3 min read

Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors

RiSec.n0tst3 21 July 2022
A new and previously undetected malware dubbed ‘Lightning Framework’ targets Linux systems and can be used to backdoor infected devices using SSH and deploy multiple types of rootkits. Described as a “Swiss Army Knife” in a report published today by Intezer, Lightning Framework is a modular malware that also comes with support for plugins. “The framework has both passive and active capabilities for communication with the threat actor, including opening up SSH on an infected machine, and a polymorphic malleable command and control configuration,” Intezer security researcher Ryan Robinson said. This malware...
Continue Reading
10+ Cyber security statistics that every business should know Cyber security statistics
4 min read

10+ Cyber security statistics that every business should know

RiSec.n0tst3 2 July 2022
Though the information age has revolutionized the way we work, it has also directly resulted in businesses becoming susceptible to cyber attacks. In recent years, the COVID-19 pandemic has changed the way we work, even more, resulting in many of us working from home full-time. With such an unexpected and colossal shift, cyber crime skyrocketed. Working from home may be beneficial for some businesses, but most homes have weaker security measures, leaving data ripe for targeting. It is essential that companies provide their employees with information or training on...
Continue Reading
Confluence servers hacked to deploy AvosLocker, Cerber2021 Ransomware Confluence servers hacked to deploy AvosLocker, Cerber2021 Ransomware
3 min read

Confluence servers hacked to deploy AvosLocker, Cerber2021 Ransomware

RiSec.n0tst3 11 June 2022
Ransomware gangs are now targeting a recently patched and actively exploited remote code execution (RCE) vulnerability affecting Atlassian Confluence Server and Data Center instances for initial access to corporate networks. If successfully exploited, this OGNL injection vulnerability (CVE-2022-26134) enables unauthenticated attackers to take over unpatched servers remotely by creating new admin accounts and executing arbitrary code. Soon after active exploitation was reported in the wild and Atlassian patched the bug, proof-of-concept exploits were also leaked online, lowering the skill level required for exploitation even further. The severity of this security flaw and the...
Continue Reading
CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog Avast, AVG Release Security Updates for Decade-Old Vulnerability
3 min read

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

RiSec.n0tst3 17 May 2022
US Critical Infrastructure Security Agency (CISA) adds critical CVE-2022-30525 RCE flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency added the recently disclosed remote code execution bug, tracked as CVE-2022-30525, affecting Zyxel firewalls, to its Known Exploited Vulnerabilities Catalog. According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. Experts recommend also private organizations review the Catalog and...
Continue Reading

You may have missed

A new PyPI Package was found delivering fileless Linux Malware pypi
2 min read

A new PyPI Package was found delivering fileless Linux Malware

15 August 2022
Russia’s Shuckworm cyber group launching ongoing attacks on Ukraine russia
3 min read

Russia’s Shuckworm cyber group launching ongoing attacks on Ukraine

15 August 2022
Comparing Twilio and Slack breach responses cybersecurity news
3 min read

Comparing Twilio and Slack breach responses

15 August 2022
Starlink Hacked Using $25 Modchip Elon Musk Starlink Satellite-Internet Dishes Arrive in Ukraine - Credit Bloomberg
4 min read

Starlink Hacked Using $25 Modchip

13 August 2022
en English
af Afrikaanssq Albanianam Amharicar Arabichy Armenianaz Azerbaijanieu Basquebe Belarusianbn Bengalibs Bosnianbg Bulgarianca Catalanceb Cebuanony Chichewazh-CN Chinese (Simplified)zh-TW Chinese (Traditional)co Corsicanhr Croatiancs Czechda Danishnl Dutchen Englisheo Esperantoet Estoniantl Filipinofi Finnishfr Frenchfy Frisiangl Galicianka Georgiande Germanel Greekgu Gujaratiht Haitian Creoleha Hausahaw Hawaiianiw Hebrewhi Hindihmn Hmonghu Hungarianis Icelandicig Igboid Indonesianga Irishit Italianja Japanesejw Javanesekn Kannadakk Kazakhkm Khmerko Koreanku Kurdish (Kurmanji)ky Kyrgyzlo Laola Latinlv Latvianlt Lithuanianlb Luxembourgishmk Macedonianmg Malagasyms Malayml Malayalammt Maltesemi Maorimr Marathimn Mongolianmy Myanmar (Burmese)ne Nepalino Norwegianps Pashtofa Persianpl Polishpt Portuguesepa Punjabiro Romanianru Russiansm Samoangd Scottish Gaelicsr Serbianst Sesothosn Shonasd Sindhisi Sinhalask Slovaksl Slovenianso Somalies Spanishsu Sudanesesw Swahilisv Swedishtg Tajikta Tamilte Teluguth Thaitr Turkishuk Ukrainianur Urduuz Uzbekvi Vietnamesecy Welshxh Xhosayi Yiddishyo Yorubazu Zulu