MalwareBytes – Page 307 – Computer Security Articles

Credit to Author: Wendy Zamora| Date: Wed, 23 Jan 2019 08:01:36 +0000

The 2019 State of Malware report is here. Learn what Malwarebytes Labs researchers discovered about the top global threats for businesses and consumers in 2018, and predictions for 2019.

Categories:

Tags: 2019 State of Malware report AI byos cryptominers emotet information stealers IoT labs report ransomware state of malware report trickbot Trojans

MalwareBytes Security

January 22, 2019 admin

Browser push notifications: a feature asking to be abused

Credit to Author: Pieter Arntz| Date: Tue, 22 Jan 2019 18:03:05 +0000

Whoever invented browser push notifications must have been able to guess they would be abused for advertising. This post explains what they are and how to disable them.

Categories:

Tags: Android api apps browser alert chrome Chrome Extension Edge Edge browser firefox mac notifications opera opera browser push safari Safari browser web windows

MalwareBytes Security

January 21, 2019 admin

A week in security (January 14 – 20)

Credit to Author: Malwarebytes Labs| Date: Mon, 21 Jan 2019 16:48:38 +0000

A roundup of last week’s security news from January 14 to 20, including APT10, Fallout EK, Colllection 1 data, Youtube challenges, hosting malicious sites and a Fortnite security flaw.

Categories:

Tags: APT10 ArsTechnica BleepingComputer CoinDesk collection 1 cryptopia cve-2019-0543 DAS Fallout EK fortnite garmin Garmin watch hosting HTTPS oregon powershell PowerShell Team Blog SC Media shutdown telegram threadx youtube

(Read more…)

The post A week in security (January 14 – 20) appeared first on Malwarebytes Labs.

MalwareBytes Security

January 21, 2019 admin

Has two-factor authentication been defeated? A spotlight on 2FA’s latest challenge

Credit to Author: Malwarebytes Labs| Date: Mon, 21 Jan 2019 16:15:30 +0000

While many tech-savvy folks are familiar with two-factor authentication (2FA), more are unaware that there are several ways around it. A tactic called Modlishka, the English pronunciation for the Polish word for “mantis,” is the latest in this list.

Categories:

Tags: 2fa 2FA modlishka Amnesty International CERTFA defeat 2FA mantis modlishka password manager PGP Social Engineering the return of charming kitten totp two-factor authentication

MalwareBytes Security

January 18, 2019 admin

Collection 1 data breach: what you need to know

Credit to Author: Malwarebytes Labs| Date: Fri, 18 Jan 2019 18:33:40 +0000

In what’s being dubbed one of the largest data dumps in history, Collection 1 contains the data of over 770 million people. But is it really as bad as it sounds? We take a closer look and let users know what to do if their info is caught up in the mix.

Categories:

Tags: breaches Brian Krebs collection 1 data breach data dump extortion hack hacking haveibeenpwned MEGA passwords PPI Troy Hunt user awareness

(Read more…)

The post Collection 1 data breach: what you need to know appeared first on Malwarebytes Labs.

MalwareBytes Security

January 18, 2019 admin

Hosting malicious sites on legitimate servers: How do threat actors get away with it?

Credit to Author: Pieter Arntz| Date: Fri, 18 Jan 2019 16:00:00 +0000

Is money all hosting providers care about when it comes to allowing malicious sites on their servers? Or is there more at play? We embark on an investigation to discover their motives.

Categories:

Tags: hosting malicious sites malware takedowns web security

MalwareBytes Security

January 17, 2019 admin

Improved Fallout EK comes back after short hiatus

Credit to Author: Jérôme Segura| Date: Thu, 17 Jan 2019 19:51:27 +0000

The Fallout exploit kit is back with some noteworthy improvements.

Categories:

Tags: CVE-2018-15982 EK exploit exploit kits Fallout powershell

(Read more…)

The post Improved Fallout EK comes back after short hiatus appeared first on Malwarebytes Labs.

MalwareBytes Security

January 16, 2019 admin

The Advanced Persistent Threat files: APT10

Credit to Author: William Tsing| Date: Wed, 16 Jan 2019 17:00:00 +0000

While security companies are getting good at analyzing the tactics of nation-state threat actors, they still struggle with placing these actions in context and making solid risk assessments. So in this series, we’re going to take a look at a few APT groups, and see how they fit into the larger threat landscape—starting with APT10.

Categories:

Tags: advanced persistent threat advanced persistent threats aerospace APT APT10 APTs china Chinese Ministry of State Security construction engineering FireEye MSS PlugX Poison Ivy scanbox sogu telecoms threat actors

(Read more…)

The post The Advanced Persistent Threat files: APT10 appeared first on Malwarebytes Labs.