Security News
Convincing ‘YouTube’ Google ads lead to Windows support scams
A scarily realistic-looking Google Search YouTube advertisement is redirecting visitors to tech support scams pretending to be security alerts from Windows Defender.
Bleepingcomputer
21 Jul 2022 1424 Views
New Luna ransomware encrypts Windows, Linux, and ESXi systems
A new ransomware family dubbed Luna can be used to encrypt devices running several operating systems, including Windows, Linux, and ESXi systems.
Bleepingcomputer
21 Jul 2022 1630 Views
Botnet malware disguises itself as password cracker for industrial controllers
Can't get into that machine? No problem, just trust this completely sketchy looking tool
Industrial engineers and operators are being lured into running backdoor malware disguised as tools for recovering access to work systems.…
The Register
19 Jul 2022 6442 Views
Password recovery tool infects industrial systems with Sality malware
A threat actor is infecting industrial control systems (ICS) to create a botnet through password "cracking" software for programmable logic controllers (PLCs).
Bleepingcomputer
18 Jul 2022 1219 Views
PayPal phishing kit added to hacked WordPress sites for full ID theft
A newly discovered phishing kit targeting PayPal users is trying to steal a large set of personal information from victims that includes government identification documents and photos. [...]
Bleepingcomputer
15 Jul 2022 1231 Views
New Lilith ransomware emerges with extortion site, lists first victim
A new ransomware operation has been launched under the name 'Lilith,' and it has already posted its first victim on a data leak site created to support double-extortion attacks. [...]
Bleepingcomputer
14 Jul 2022 1588 Views
New UEFI firmware flaws impact over 70 Lenovo laptop models
The UEFI firmware used in several laptops made by Lenovo is vulnerable to three buffer overflow vulnerabilities that could enable attackers to hijack the startup routine of Windows installations. [...]
Bleepingcomputer
14 Jul 2022 1372 Views
Hackers impersonate cybersecurity firms in callback phishing attacks
Hackers are impersonating well-known cybersecurity companies, such as CrowdStrike, in callback phishing emails to gain initial access to corporate networks.
Bleepingcomputer
13 Jul 2022 1384 Views
Microsoft: Phishing bypassed MFA in attacks against 10,000 orgs
Microsoft says a massive series of phishing attacks has targeted more than 10,000 organizations starting with September 2021, using the gained access to victims' mailboxes in follow-on business email compromise (BEC) attacks.
Bleepingcomputer
13 Jul 2022 1400 Views
New ‘Luna Moth’ hackers breach orgs via fake subscription renewals
A new data extortion group has been breaching companies to steal confidential information, threatening victims to make the files publicly available unless they pay a ransom.
The gang received the name Luna Moth and has been active since at least March in phishing campaigns that delivered remote access...
Bleepingcomputer
13 Jul 2022 1318 Views
