Posts

Showing posts with the label cyber attack

Kaspersky warns of cookies on the web

Image
 Kaspersky warns of cookies on the web A research study shows that more than 20% of websites use cookies, which are stored on users' devices, to remember previously saved information, settings, preferences and login credentials. Kaspersky highlights certain security considerations to keep in mind when working with cookies, although they may be phased out or replaced in the future. And almost every website still asks the user today if they want to "accept all cookies". Cookies, are designed to make websites more user friendly. For example, a shopping site can remember a user's preferred currency, or a social networking site saves login details, so that the user does not have to enter a username and password each time they open their page.   But cookies can also track users' activities, such as collecting user data to make suggestions (and display targeted ads) based on them. These cookies may be o...

Kaspersky leak 2022

Image
Kaspersky leak 2022 A message transmitted from one place to another in social networking sites on the Internet. we appreciate the patience of our loving supporters around the world, especially the fbs and kaspersky labs .  As promised nb65 has the source code dump for you all to enjoy.  The countless war crimes committed by russia, the murder of civilians in Ukraine, these acts will not be forgotten.  Always, a friendly reminder to president Putin and his ragtag band of soldiers: we won't stop until you cease all hostialities against Ukraine.  How many tanks are you going to donate to Ukrainian farmers? Still stuck in the mud? Kaspersky has a lot of work to do but i'm sure the intelligence community will have a field day with this, Don't forget that the fight goes on until Russia pulls back their military forces. Later  Netherland government...

How to avoid phishing email from facebook

Image
phishing software attempting to hijack Facebook accounts by impersonating victims' friends in Facebook Messenger chats phishing email from Facebook What is Facebook phishing software? When someone tries to get access to your Facebook account by sending you a suspicious message or link that asks for your personal information. If they get into your account, they may use your account to send spam. How to know if I've been Facebook phished. What can I do? If you accidentally entered your username or password into a strange link, someone else might be able to log in to your account. Here are some things you can do. If you're able to log in to your account, learn how to secure your account by resetting your password and logging out of any devices that you don't own. If you can't get into your account and your username or password don't work, learn how to recover your account. If you want to see if anything strange has been happening to your account, learn how t...

DeadBolt ransomware locks QNAP devices

Image
What is QNAP ? QNAP is a type of network attached storage nas, that consist of one or more hard drives,  that are constantly connected to the internet. The QNAP works as your backup hub or storage unit that stores all your important files and media. Such as photos, videos, and music. You don't need external hard drive, NAS can be placed at home and accessible for you and your family to use at any time, and anywhere. DeadBolt ransomware  targeting QNAP devices? DeadBolt ransomware is targeting QNAP devices and appending the .deadbolt extension to encrypted file's names. DeadBolt ransomware locks QNAP The ransomware is also hijacking the QNAP login screen to display a ransom note demanding 0.03 cryptos, worth approximately $1100. last time QNAP found solution for free when .7z encrypt their devices. Eac...

Remove techobc .com Whatsapp pop-up ads

Image
   If you see this message from Techobc.com  on your phone, Don't trust it, Techobc  are not going to give a surprise, which seem subnormal every year with the same, Browser hijackers like techobc com Virus, in general, are commonly encountered online advertising applications, is part of an advertising service that website publishers can use to generate revenue on their sites and collect information from victims. it is a type off phishing to track your money wallet,  This guide  will help you to remove it, Techobc.com is a scam website that is spread via social media platforms like WhatsApp.

Remove Rediroff.ru Whatsapp pop-up ads

Image
  If you see this message from Rediroff.ru  on your phone, Don't trust it, Rediroff  are not going to give you 15,000 Amazon products, which seem subnormal every year with the same, Browser hijackers like Rediroff Ru Virus, in general, are commonly encountered online advertising applications, is part of an advertising service that website publishers can use to generate revenue on their sites. it is a type off phishing to track your money wallet,  This guide  will help you to remove it, Rediroff.ru is a scam website that is spread via social media platforms like WhatsApp.

Log4Shell found in Minecraft

Image
Researchers from cybersecurity firm Cybereason have produced a vaccine to remotely mitigate a widespread "Log4Shell" Apache  log4shell  github  code execution vulnerability. Apache Log4j is a Java-based logging system that can be used to analyze web server access logs or application logs. The software is heavily used in enterprise, e-commerce and gaming platforms, such as Minecraft which quickly patched its version. The researchers explained how to exploit this zero-day remote code execution vulnerability in Apache Log4j that was tracked as CVE-2021-44228 named "Log4Shell". While Apache released Log4j 2.15.0 quickly to resolve the vulnerability, cybersecurity firms watched attackers scan vulnerable devices and try to hack them. This vulnerability can be exploited simply by changing the web browser user agent and visiting a vulnerable site or searching for this string on a site, it quickly bec...

android.cynos.7.origin in some apps

Image
Dangerous malware infected nine million Huawei phones More than 190 apps installed on nearly 9.3 million devices by Huawei's AppGallery  has been detected with  information stealing malware. The  “Android.Cynos.7.origin,”  Trojan horse loaded on these AppGallery apps is known as  according to Bleeping Computer, and it was spotted by Dr Web AV researchers. Dr. Web has reportedly notified Huawei, a Chinese tech company, of the threat and has worked to remove infected apps from AppGallery. The infected applications were very dangerous because the data theft malware was hidden in different applications all working as advertised. The list of infected apps is too long to fully share, but Bleeping Computer has listed some popular apps like Hurry Up and Hide, Cat Adventures, and Drive School Simulator. A Huawei spokesperson told the outlet that they were aware of the Android threat and were working to re...

KISTERS Ransomware Attack

Image
The attack became on the night of November 10th, the company announced: "As far as we know, the attackers gained access to the computer network via an orchestrated ransomware attack despite a strong security system," explained the management. The software provider specializing in the energy industry therefore no longer has access to its own IT because it has shut down the system "to avert further damage". The extent of the damage is still unclear. At the moment, "no statements can be made about which data are affected by the attack," says managing director Klaus Kisters. Both the Federal Office for Information Security and the criminal police and a specialist team of data forensics have already started their investigations. In the recent past, the energy industry has been increasingly targeted by  Cyber ​​criminals advised. Attacks on public utilities have already made headlines several times...

Ransomware attack hits Barcelona's Damm brewery

Image
Production at the main brewery outside Barcelona has been halted after a cyber attack that hit computer systems earlier this week.

Facebook, Instagram and WhatsApp are down

Image
Is it a type of cyber attack ? Facebook, Instagram and WhatsApp are facing defending the company over a whistleblower’s accusations and its handling of research data suggesting Instagram is harmful to teens, the company’s entire network of services suddenly went offline. On Twitter, giving a message "This site can't be reached". A peek at Down Detector (or your Twitter feed) reveals the problems are widespread. While it’s unclear exactly why the platforms are unreachable for so many people, their DNS records show that, like last week’s Slack outage, the problem is apparently DNS (it’s always DNS). Cloudflare senior vice president Dane Knecht notes that Facebook’s border gateway protocol routes — BGP helps networks pick the best path to deliver internet traffic — have been “withdrawn from the internet.” Instagram.com is flashing a 5xx Server Error message, while the Facebook site merely tells us that somethin...

BlackMatter & Haron Avaddon New faces

Image
Two new ransomware groups Apeared on July 2021. Or maybe they’re old ones with a new look. BlackMatter & Haron say target big-game business to pay ransoms in the millions of dollars. The additions come as recent ransomware intrusions of oil pipeline operator Colonial Pipeline , meat packer JBS SA, and managed network provider Kaseya have caused major disruptions and created pressure in Washington to curb the threats. Haron take Avaddon with A new face. The first group is calling itself Haron, m ost of the group’s site on the dark web is password protected by extremely weak credentials. Past the login page, there’s a list of alleged targets, a chat transcript that’s not fit to be shown in full, and the group’s explanation of its mission. As S2W Lab pointed out, the layout, organization, and appearance of the site are almost identical to those for Avaddon, the ransomware group that w...

XLoader malware steals accounts from macOS and Windows systems

Image
A malware that specializes in stealing information from Windows has been modified into a new strain called XLoader, so it can target macOS systems. XLoader is currently showing up on an underground forum as a bot download service that can "take" passwords from web browsers and some email clients. XLoader was announced as a multi-platform botnet (Windows and macOS) with no dependencies, and launched last February and growing in popularity. XLoader's most important functions (steal login credentials, take screenshots, keystrokes, and execute malicious files). A customer can rent the macOS version of the malware for $49 (one month) and access a server provided by the vendor. Windows technology is more expensive with the seller asking $59 for a one-month license and $129 for three months. XLoader makers also provide a Java binder for free, which allows customers to create a standalone JAR file with the ...

Cloudstar has been felled by ransomware

Image
“On Friday, July 16, Cloudstar discovered that it had been the victim of a serious ransomware attack,” Florida-based biz warned its customers over the weekend. “Due to the nature of this attack, at this time our systems are out of reach, and although we are working around the clock, we are missing a specific restore schedule. Our Office 365 mail services, email encryption offerings and some support services are still fully functional. his energy. “Cloudstar has retained third-party forensic experts Tetra Defense to assist us in our recovery efforts as well as inform law enforcement. Negotiations with the threat actor are ongoing. We are working hard to fix this matter as quickly as possible and will update stakeholders.” Cloudstar is said to be providing technology to thousands of proprietary firms and lenders. It provides remote virtual desktops, cloud-hosted software and storage, and IT security to companies i...

Kaseya VSA Cyberattack

Image
Kaseya, a software company that provides services to more than 40,000 organizations around the world, said on 2/7/2021 that had been the victim of a cyberattack. The company asked customers that use its systems management platform, called VSA, to immediately shut down their servers to avoid any possibility of being compromised by attackers. REvil, a Russian cybercriminal group may be was behind the hacking  . Some of the affected companies were being asked for $5 million in ransom. At least 200 companies were at risk. Kaseya handles large enterprise all the way to small businesses globally, so ultimately, it has the potential to spread to any size or scale business. “This is a colossal and devastating supply-chain attack.” The United States Cybersecurity and Infrastructure Security Agency also described the incident in a statement on its website as a “supply-chain ransomware attack.” It urged Kaseya’s ...

Crackonosh virus hides in Pirated Games

Image
Are you a Game Lover? , you have to be careful of the "pirate" Copies of your favorite Video and android games.  Avast The most common cybersecurity company published an investigation carried out by its Threat Laboratory on the discovery of a new malware called Crackonosh that hides in "cracked copies" games. Crackonosh is a kind of mining program that takes its name from Czech folklore meaning "mountain spirit" and has been published since at least June 2018. According to Avast investigation, this malware has already generated its authors more than two million dollars in the Monero cryptocurrency, coming from more than 222000 infected systems around the world. Avast even warns that Crackonosh has already infected 2,200 systems in Mexico. The majority of users infected with Crackonosh are from Brazil, the United States, India, the Philippines and Poland, with an average of between 12 and ...

Data deleted! Unplug your WD My Book Live

Image
Western Digital is recommending users to unplug "My Book Live storage" devices from the Internet until they notice many complains about data loss,WD engineers investigate unexplained compromises that have completely wiped data from devices around the world. This type of disk wiping related incident was discovered by Western Digital support forum. There are no reports of recovering deleted data yet. All the data has been deleted A post been found on the WD forum "I have a WD mybook connected directly to my home LAN and it worked fine for years," wrote the user who started the thread. “I just found out that today all the data on it somehow disappeared, while the directories look there but are empty. Previously the volume of 2TB was almost full but now it appears at full capacity.” Soon, Many My Book Live users were quick to report experiencing the exact same thing. One user quickly replied: “All my data...

Edward Don ransomware attack by Qbot trojan

Image
Edward Don the Foodservice supplier and distributor hits by a ransomware attack Edward Don the most famous Company is one of the largest distributors of foodservice equipment and supplies. Foodservice supplier Edward Don shut down portions of the network that has disrupted their business operations, including their phone systems, network, and email to prevent the attack's spread. Edward Don employees forced to use Gmail accounts to communicate with customers regarding urgent orders or fulfillment issues, they have stated that they cannot accept new orders until the systems are brought back online. As Edward Don is one of the leading distributors of food service supplies, this attack will cause a significant disruption in the supply chain for hospitals, restaurants, hotels, and bars. Qbot trojan seen on Edward Don network Qbot trojan has been plaguing computer users and businesses by remote access service, for over a decade and the cybercriminals behind it are still coming up with n...

Court of Justice of RS faces Cyber Attack

Image
A problem in accessing the computer system of the Court of Justice of Rio Grande do Sul (TJRS) was identified on Wednesday 28-2021. Civil servants faced difficulties in carrying out their activities using the judiciary portal. At the end of the morning, the TJRS staff confirmed the problem. The systems security team even instructed internal users not to access computers remotely, nor log in to equipment within the court's network. The problem is being investigated and there is still no expected return. Despite this, the eproc, ethemis, SEEU and SEI systems were not affected. There is a suspicion, not confirmed by the TJRS, of a hacker attack . The court's staff only said it was looking for the responsibilities. "As determined by the Administration of the Court of Justice, the technical area is investigating the origin, together with the Intelligence Nucleus, to verify the responsibility at its origin and its extent", complements the note from the TJRS.