MOVEit discloses THIRD critical vulnerability

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: Progress

Tags: Moveit

Tags: CVE-2023-34362

Tags: CVE-2023-35036

Tags: Cl0p

Progress has released an advisory about yet another MOVEit Transfer vulnerability while new victims of the first one keep emerging.

(Read more…)

The post MOVEit discloses THIRD critical vulnerability appeared first on Malwarebytes Labs.

Read more

More MOVEit vulnerabilities found while the first one still resonates

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: MOVEit

Tags: Progress

Tags: Cl0p

Tags: ransomware

Tags: CVE-2023-34362

A security audit of the MOVEit code has revealed more SQL injection vulnerabilities, while victims of the first vulnerability are coming to the surface.

(Read more…)

The post More MOVEit vulnerabilities found while the first one still resonates appeared first on Malwarebytes Labs.

Read more

Brightline breach hits at least 964,000 people, US records show

Categories: News

Categories: Ransomware

Tags: Brightlight

Tags: GoAnywhere MFT

Tags: data breach

Tags: Cl0p

Following the Cl0p ransomware gang’s attacks that leveraged Fortra’s GoAnywhereMFT software tool, behavioral health provider Brightline informed customers about a data breach related to the attacks.

(Read more…)

The post Brightline breach hits at least 964,000 people, US records show appeared first on Malwarebytes Labs.

Read more

A week in security (April 24 -30)

Categories: News

Tags: Lockbit

Tags: cl0p

Tags: papercut

Tags: vmware

Tags: magecart

Tags: fileless

Tags: chatgpt

Tags: apc

Tags: Pupy rat

Tags: guloader

Tags: black basta

Tags: flipper zero

Tags: clickjacking

The most interesting security related news of the week from April 24 till April 30

(Read more…)

The post A week in security (April 24 -30) appeared first on Malwarebytes Labs.

Read more

New Ransom Payment Schemes Target Executives, Telemedicine

Credit to Author: BrianKrebs| Date: Thu, 08 Dec 2022 18:25:04 +0000

Ransomware groups are constantly devising new methods for infecting victims and convincing them to pay up, but a couple of strategies tested recently seem especially devious. The first centers on targeting healthcare organizations that offer consultations over the Internet and sending them booby-trapped medical records for the “patient.” The other involves carefully editing email inboxes of public company executives to make it appear that some were involved in insider trading.

Read more

“We absolutely do not care about you”: Sugar ransomware targets individuals

Credit to Author: Jovi Umawing| Date: Tue, 08 Feb 2022 14:04:51 +0000

They call it Sugar ransomware, but it’s not sweet in any way.

Categories: Ransomware

Tags:

(Read more…)

The post “We absolutely do not care about you”: Sugar ransomware targets individuals appeared first on Malwarebytes Labs.

Read more