SophosLabs Uncut – Computer Security Articles

Patch Tuesday squashes 89 bugs-including a SophosLabs find

June 11, 2019 admin 0 Comments adobe, Chakra, ChakraCore, Edge, Exploits, Flash Player, Hyper-V, microsoft, Patch Tuesday, polar bears, SandboxEscaper, SophosLabs Uncut, Updates, VBScript, Vulnerability, windows

Credit to Author: SophosLabs Offensive Security| Date: Tue, 11 Jun 2019 21:20:51 +0000

No bugs known to be exploited in the wild, but plenty of serious flaws that need updates<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/l4pze2u2S-k” height=”1″ width=”1″ alt=””/>

Security Sophos

Worms deliver cryptomining malware to web servers

May 30, 2019 admin Apache, Cryptojacking, cryptomining, Neutrino, Rat, Server, SophosLabs Uncut, Tomcat2, worm

Credit to Author: Vikas Singh| Date: Thu, 30 May 2019 13:00:08 +0000

An automated attack, targeting poorly-protected Apache Tomcat servers, turns enterprise hardware into a high-end cryptominer<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/NXX1H4BUrTk” height=”1″ width=”1″ alt=””/>

Security Sophos

Directed attacks against MySQL servers deliver ransomware

May 24, 2019 admin database, ddos, edge devices, ELF, gandcrab, malware, MySQL, ransomware, Rat, SophosLabs Uncut, sql, SQL Injection

Credit to Author: Andrew Brandt| Date: Fri, 24 May 2019 12:00:29 +0000

Someone is attacking internet-facing Windows database servers with GandCrab ransomware<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/Cjmfa68wtrI” height=”1″ width=”1″ alt=””/>

Security Sophos

May, 2019 Patch Tuesday addresses critical remote desktop, DHCP bugs

May 14, 2019 admin Chakra, microsoft, Patch Tuesday, RDP, Remote Desktop services, SMB, SophosLabs Uncut, update, windows

Credit to Author: Andrew Brandt| Date: Tue, 14 May 2019 17:34:07 +0000

The vulnerabilities were so potentially harmful, Microsoft released updates for no-longer-supported Windows XP and Server 2003<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/wDsmYlJCQ2o” height=”1″ width=”1″ alt=””/>

Security Sophos

MegaCortex, deconstructed: mysteries mount as analysis continues

May 10, 2019 admin CryptoGuard, MegaCortex, psexec, ransomware, SophosLabs Uncut, wmi

Credit to Author: Andrew Brandt| Date: Fri, 10 May 2019 17:52:11 +0000

An update to last week’s late-breaking information about this novel ransomware<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/kiEZb_dZSkk” height=”1″ width=”1″ alt=””/>

Security Sophos

“MegaCortex” ransomware wants to be The One

May 3, 2019 admin malware, MegaCortex, ransomware, SophosLabs Uncut, Targeted attack

Credit to Author: Andrew Brandt| Date: Fri, 03 May 2019 19:45:43 +0000

By Andrew Brandt A new ransomware that calls itself MegaCortex got a jolt of life on Wednesday as we detected a spike in the number of attacks against Sophos customers around the world, including in Italy, the United States, Canada, the Netherlands, Ireland, and France. The attackers delivering this new malware campaign employed sophisticated techiques […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/pFdm0BTbxug” height=”1″ width=”1″ alt=””/>

Security Sophos

How Anubis uses Telegram (and Chinese characters) to phone home

May 1, 2019 admin Android Banker, Android malware, Anubis, Bankbot, banking Trojan, SophosLabs Uncut

Credit to Author: Jagadeesh Chandraiah| Date: Wed, 01 May 2019 17:01:26 +0000

The ubiquitous Android bank credential thief tries new methods to conceal where it gets its instructions from<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/kaXLm8-CbJs” height=”1″ width=”1″ alt=””/>

Security Sophos

A taste of the onslaught at the network’s edge

April 30, 2019 admin attack, breakin, brute force, Corporate, CTA, Cyber Threat Alliance, edge devices, Honeypot, injection, internet, Password, RDP, SophosLabs Uncut, sql, SSH, vnc

Credit to Author: Andrew Brandt| Date: Tue, 30 Apr 2019 14:01:11 +0000

Edge devices take a licking so the rest of the network can keep on ticking, but they do need a little extra TLC<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/yLDeI_Y5qG8″ height=”1″ width=”1″ alt=””/>

Security Sophos

CVE-2018-18500: write-after-free vulnerability in Firefox, Analysis and Exploitation

April 29, 2019 admin CVE-2018-18500, exploit, Firefox, mitigation, SophosLabs Uncut, Vulnerability

Credit to Author: Yaniv| Date: Thu, 18 Apr 2019 15:35:40 +0000

Editor’s note: This article is a technical description of a bug discovered by a member of the Offensive Research team at SophosLabs, and how the researcher created a proof-of-concept “Arbitrary Read/Write Primitive” exploit for this bug. The vulnerability was deemed critical by Mozilla’s bug tracking team and was patched in Firefox 65.0. It’s written for […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/oTcYk6i594c” height=”1″ width=”1″ alt=””/>

Security Sophos