Security

MalwareBytesSecurity

Update now! GoAnywhere MFT zero-day patched

Categories: News

Tags: GoAnywhere MFT

Tags: managed file transfer

Tags: Kevin Beaumont

Tags: Brian Krebs

Tags: emergency patch 7.1.2

Tags: Fortra

Tags: Cobalt Strike

Tags: Florian Hauser

Tags: Code White

A bug in GoAnywhere, a B2B management file transfer software, could lead to a serious supply chain attack if left unpatched. Update now!

(Read more…)

The post Update now! GoAnywhere MFT zero-day patched appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Stalkerware-type app developers fined by NY Attorney General

Categories: News

Tags: stalkerware

Tags: mobile

Tags: device

Tags: NYAG

Tags: monitoring

Tags: New York

Tags: app

Tags: developer

We take a look at news that the NYAG has penalised developers of stalkerware-type apps, and the ramifications for those developers further down the line.

(Read more…)

The post Stalkerware-type app developers fined by NY Attorney General appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

ION starts bringing customers back online after LockBit ransomware attack

Categories: News

Categories: Ransomware

Tags: LockBit

Tags: ransomware

Tags: LockBit ransomware group

Tags: FBI

Tags: Todd Conklin

Tags: Financial Conduct Authority

Tags: FCA

Tags:

Tags: Prudential Regulation Authority

Tags: PRA

Tags: Tom Kellermann

Tags: Joseph Schifano

Pernicious ransomware group, LockBit, is making headlines again. Less than a month after attacking HACLA, it hit the derivatives trading division of ION Group, a financial software company.

(Read more…)

The post ION starts bringing customers back online after LockBit ransomware attack appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

[update]Two year old vulnerability used in ransomware attack against VMware ESXi

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: VMware

Tags: ESXi

Tags: Nevada

Tags: ransomware

Tags: Linux

Tags: CVE-2021-21974

Over the weekend, several CERTs warned about ongoing ransomware attacks against unpatched VMware ESXi virtual machines.

(Read more…)

The post [update]Two year old vulnerability used in ransomware attack against VMware ESXi appeared first on Malwarebytes Labs.

Read More
MicrosoftSecurity

Solving one of NOBELIUM’s most novel attacks: Cyberattack Series

Credit to Author: Christine Barrett| Date: Wed, 08 Feb 2023 17:00:00 +0000

This is the first in an ongoing series exploring some of the most notable cases of the Microsoft Detection and Response Team (DART), which investigates cyberattacks on behalf of our customers. The Cyberattack Series takes you behind the scenes for an inside look at the investigation and share lessons that you can apply to better protect your own organization. In this story, we’ll explore how NOBELIUM continues to target identity providers with novel attacks—and how Microsoft DART identified one of NOBELIUM‘s most creative exploits yet.​

The post Solving one of NOBELIUM’s most novel attacks: Cyberattack Series appeared first on Microsoft Security Blog.

Read More