JavaScript – Page 2 – Computer Security Articles

Rocket Loader skimmer impersonates CloudFlare library in clever scheme

March 17, 2020 admin https, JavaScript, Magecart, skimmer, skimming, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 10 Mar 2020 15:46:13 +0000

URLs can be deceiving, but the one used to mimic CloudFlare’s Rocket Loader in the latest Magecart attack takes it to a whole new level.

Categories:

Threat analysis

Tags: HTTPS JavaScript Magecart skimmer skimming

MalwareBytes Security

Domen toolkit gets back to work with new malvertising campaign

February 28, 2020 admin buren ransomware, Domen, domen toolkit, intelrapid cryptominer, JavaScript, malicious websites, malvertising, malvertising campaigns, smoke loader, Social engineering, Threat analysis, toolkit, Vidar, vidar stealer

Credit to Author: Threat Intelligence Team| Date: Fri, 28 Feb 2020 17:54:18 +0000

We describe the latest malvertising campaign that uses Domen, an advanced social engineering toolkit.

Categories:

Threat analysis

Tags: buren ransomware Domen domen toolkit intelrapid cryptominer JavaScript malicious websites malvertising malvertising campaigns smoke loader Social Engineering toolkit Vidar vidar stealer

MalwareBytes Security

Magecart Group 4: A link with Cobalt Group?

October 3, 2019 admin Carbanak, colbalt group, credit cards, data theft, ecommerce, FIN7, group 4, Hyas, JavaScript, Magecart, skimmers, threat actor, threat actor group, threat actors, Threat analysis

Credit to Author: Threat Intelligence Team| Date: Thu, 03 Oct 2019 15:00:00 +0000

Malwarebytes threat intel partnered with security firm HYAS to connect the dots between Magecart Group 4 and the advanced threat group Cobalt.

Categories:

Threat analysis

Tags: carbanak colbalt group credit cards data theft ecommerce FIN7 group 4 HYAS JavaScript Magecart skimmers threat actor threat actor group threat actors

(Read more…)

The post Magecart Group 4: A link with Cobalt Group? appeared first on Malwarebytes Labs.

MalwareBytes Security

Magecart criminals caught stealing with their poker face on

August 20, 2019 admin drupal, JavaScript, Magecart, Magento, poker, skimmer, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 20 Aug 2019 15:00:38 +0000

This blog post details the curious case of a web skimmer encountered in a poker application.

Categories:

Threat analysis

Tags: drupal JavaScript Magecart magento poker skimmer

MalwareBytes Security

A week in security (June 24 – 30)

July 1, 2019 admin a week in security, atm attacks, ATM fraud, atm malware strains, ATM scam, Azure, cryptocurrency scams, Facial Recognition, fake jquery, greenflas, Internet of Things, IoT, JavaScript, Massachusettes, Microsoft Azure, scareware, slack, Slack outage, Somerville, spyware, stalkerware, Yandex

Credit to Author: Malwarebytes Labs| Date: Mon, 01 Jul 2019 17:02:56 +0000

A roundup of cybersecurity news from June 24–30, including top malicious web campaigns, updates on the GreenFlash Sundown exploit, a Malwarebytes initiative to double down on stalkerware detection and awareness, and more.

Categories:

A week in security

Tags: atm attacks atm fraud atm malware strains ATM scam Azure cryptocurrency scams facial recognition fake jquery greenflas Internet of Things IoT JavaScript Massachusettes Microsoft Azure scareware Slack Slack outage Somerville spyware stalkerware Yandex

(Read more…)

The post A week in security (June 24 – 30) appeared first on Malwarebytes Labs.

Security TrendMicro

This Week in Security News: Adware and Ransomware

January 11, 2019 admin Adware, Android, Current News, JavaScript, malware, MongoLock, ransomware, Security

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 11 Jan 2019 15:23:08 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about an adware that disguised itself as different apps and monitors mobile devices. Also, learn more about the different ransomware attacks Trend Micro has been tracking….

The post This Week in Security News: Adware and Ransomware appeared first on .

MalwareBytes Security

Google logins: JavaScript now required

November 7, 2018 admin Browsers, cybercrime, google, Google logins, JavaScript, login, logins, phishing, privacy, Security

Credit to Author: Christopher Boyd| Date: Wed, 07 Nov 2018 16:00:00 +0000

Google now requires users to enable JavaScript before logging in for extra security measures. But wait, hasn’t JavaScript been used in cyberattacks? We take a look at the impact of Google’s decision.

Categories:

Tags: browsers Google Google logins JavaScript login logins phishing security

(Read more…)

The post Google logins: JavaScript now required appeared first on Malwarebytes Labs.

MalwareBytes Security

Mass WordPress compromises redirect to tech support scams

September 20, 2018 admin bitcoin, Bitcoin Code, browlock, Indicators of compromise, injections, JavaScript, Social engineering, tech support scams, Threat analysis, TSS, wordpress, Zues

Credit to Author: Jérôme Segura| Date: Thu, 20 Sep 2018 17:42:47 +0000

Thousands of WordPress sites have been injected with the same malicious redirection. We review the infection details and the malicious traffic leading to browser lockers.

Categories:

Tags: bitcoin Bitcoin Code browlock Indicators of compromise injections JavaScript tech support scams TSS wordpress Zues