Month: November 2017

FortinetSecurity

A Deep Dive Analysis of the FALLCHILL Remote Administration Tool

Credit to Author: Minh Tran| Date: Tue, 28 Nov 2017 12:45:59 +0000

FortiGuard Labs has been actively monitoring FALLCHILL, validating all its IOCs (indicators of compromise), and providing protection for our customers. In a previous post we provided a high level overview of FALLCHILL. In this research report we dig even further, providing a deep dive analysis of the FALLCHILL Remote Administration Tool (RAT) in order to shed additional light on this threat, and thereby help our customer and the security community at large defend against this threat and similar threats.

Read More
QuickHealSecurity

Beware! 12.5 million emails hiding a ransomware have been let loose by Necurs botnet

Credit to Author: Rajib Singha| Date: Tue, 28 Nov 2017 09:40:57 +0000

If you weren’t careful with your incoming emails, then it’s time you should. Attackers have released 12.5 million emails hiding a ransomware called the Scarab malware. And Necurs botnet, the world’s largest email spam botnet, is being used in this attack. First, what is a botnet? A group of computers…

Read More
QuickHealSecurity

Beware! 12.5 million emails hiding ransomware have been let loose by Necurs botnet

Credit to Author: Rajib Singha| Date: Tue, 28 Nov 2017 09:40:57 +0000

Necurs BotnetIf you weren’t careful with your incoming emails, then it’s time you should. Attackers have released 12.5 million emails hiding a ransomware called the Scarab malware. And Necurs botnet, the world’s largest email spam botnet, is being used in this attack. First, what is a botnet? A group of computers…

The post Beware! 12.5 million emails hiding ransomware have been let loose by Necurs botnet appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Read More
FortinetSecurity

Ph0wn: A CTF Dedicated to Smart Devices

Credit to Author: Axelle Apvrille, Alain Forcioli| Date: Mon, 27 Nov 2017 14:30:59 +0000

We have organized a Capture The Flag event this week. Codenamed Ph0wn, this CTF is really unique because it is dedicated to smart devices. This CTF is free and takes place this Wednesday, November 29, 2017, starting at 6pm at Campus SophiaTech, Sophia Antipolis, France – where our FortiSmart research team is located. Traditional CTFs include challenges on standard infrastructures: PCs, servers, webservers, etc. And from time to time, some CTFs feature hardware challenges. (We should probably cite Hardwear.io CTF , and RHME3 for automotive.)…

Read More
SecuritySophos

Intercept X is the Security Innovation of the year

Credit to Author: matthewphillion| Date: Mon, 27 Nov 2017 17:09:20 +0000

Sophos Intercept X takes home the prize at Computing’s Security Excellence Awards <img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=44268&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/KELShk4zOsI” height=”1″ width=”1″ alt=””/>

Read More
SecuritySophos

Introducing the new SophosLabs homepage

Credit to Author: Bill Brenner| Date: Mon, 27 Nov 2017 16:50:22 +0000

Discover the latest threat research, read our reports and try to outsmart an AI machine on the new-look SophosLabs page<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=44146&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/CtBUvwihlfY” height=”1″ width=”1″ alt=””/>

Read More
ComputerWorldIndependent

HP stealthily installs new spyware called HP Touchpoint Analytics Client

Credit to Author: Woody Leonhard| Date: Mon, 27 Nov 2017 13:29:00 -0800

Hard to imagine in this age of privacy scandals, but HP is installing a telemetry client on its customers’ computers — and it isn’t offering any warning, or asking permission, before delivering the payload.

Dubbed “HP Touchpoint Analytics Service,” HP says it “harvests telemetry information that is used by HP Touchpoint’s analytical services.” Apparently, it’s HP Touchpoint Analytics Client version 4.0.2.1435.

There are dozens of reports of this new, ahem, service scattered all over the internet. According to Günter Born, reports of the infection go all the way back to Nov. 15, when poster MML on BleepingComputer said:

To read this article in full, please click here

Read More