Security

MalwareBytesSecurity

Update now! GoAnywhere MFT zero-day patched

Categories: News

Tags: GoAnywhere MFT

Tags: managed file transfer

Tags: Kevin Beaumont

Tags: Brian Krebs

Tags: emergency patch 7.1.2

Tags: Fortra

Tags: Cobalt Strike

Tags: Florian Hauser

Tags: Code White

A bug in GoAnywhere, a B2B management file transfer software, could lead to a serious supply chain attack if left unpatched. Update now!

(Read more…)

The post Update now! GoAnywhere MFT zero-day patched appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Stalkerware-type app developers fined by NY Attorney General

Categories: News

Tags: stalkerware

Tags: mobile

Tags: device

Tags: NYAG

Tags: monitoring

Tags: New York

Tags: app

Tags: developer

We take a look at news that the NYAG has penalised developers of stalkerware-type apps, and the ramifications for those developers further down the line.

(Read more…)

The post Stalkerware-type app developers fined by NY Attorney General appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

ION starts bringing customers back online after LockBit ransomware attack

Categories: News

Categories: Ransomware

Tags: LockBit

Tags: ransomware

Tags: LockBit ransomware group

Tags: FBI

Tags: Todd Conklin

Tags: Financial Conduct Authority

Tags: FCA

Tags:

Tags: Prudential Regulation Authority

Tags: PRA

Tags: Tom Kellermann

Tags: Joseph Schifano

Pernicious ransomware group, LockBit, is making headlines again. Less than a month after attacking HACLA, it hit the derivatives trading division of ION Group, a financial software company.

(Read more…)

The post ION starts bringing customers back online after LockBit ransomware attack appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

[update]Two year old vulnerability used in ransomware attack against VMware ESXi

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: VMware

Tags: ESXi

Tags: Nevada

Tags: ransomware

Tags: Linux

Tags: CVE-2021-21974

Over the weekend, several CERTs warned about ongoing ransomware attacks against unpatched VMware ESXi virtual machines.

(Read more…)

The post [update]Two year old vulnerability used in ransomware attack against VMware ESXi appeared first on Malwarebytes Labs.

Read More