MalwareBytes – Page 267 – Computer Security Articles

Credit to Author: Pieter Arntz| Date: Tue, 28 Jan 2020 16:00:00 +0000

Zero Trust is an information security framework that insists its users “never trust, always verify.” Is this the best security model for organizations today? We examine its strengths and weaknesses.

Categories:

Explained

Tags: byod cloud framework identity management insider threats IoT lateral threat movement mfa perimeter rdp security security orchestration strategy zero trust zero trust model zero trust security model

MalwareBytes Security

January 27, 2020 admin

A week in security (January 20 – 26)

Credit to Author: Malwarebytes Labs| Date: Mon, 27 Jan 2020 17:17:14 +0000

A roundup of the previous week’s most notable security stories and events, including tech support scams, deepfakes, and the latest ransomware attack in Florida.

Categories:

A week in security

Tags: Apple awis blog recap breach facebook phishing fake job listings Google hiring scam JhoneRAT Nest IOT PupyRAT ransomware rat remote access Trojan sextortion tech support scam THSuite Tinder weekly blog roundup

(Read more…)

The post A week in security (January 20 – 26) appeared first on Malwarebytes Labs.

MalwareBytes Security

January 24, 2020 admin

Tampa Bay Times hit with Ryuk ransomware attack

Credit to Author: David Ruiz| Date: Fri, 24 Jan 2020 20:11:10 +0000

Florida newspaper The Tampa Bay Times suffered a Ryuk ransomware attack Thursday, making it the latest major victim of the notorious ransomware family that continues to rise in popularity.

Categories:

Ransomware

Tags: Chicago Tribune CrowdStrike DCH Health System emotet Imperial County Imperial County California Lake City Lake City Florida Los Angeles Times ProPublica ransom Ransom.Ryuk ransomware ryuk Ryuk ransomware Tampa Bay Times tribune publishing trickbot Trojan.TrickBot US Coast Guard

(Read more…)

The post Tampa Bay Times hit with Ryuk ransomware attack appeared first on Malwarebytes Labs.

MalwareBytes Security

January 23, 2020 admin

Deepfakes laws and proposals flood US

Credit to Author: David Ruiz| Date: Thu, 23 Jan 2020 17:59:05 +0000

In a rare example of legislative haste, roughly one dozen state and federal bills were introduced in the past 12 months to regulate deepfakes, the relatively modern technology that some fear could upend democracy.

Categories:

Artificial Intelligence

Tags: AB 602 AB 730 California DEEP FAKES Accountability Act deepfake Deepfake Report Act deepfakes deepfakes laws deepfakes legislation Deeptrace election interference Gavin Newsom IOGAN Act Maryland Massachusetts National Defense Authorization Act NDAA New York nonconsensual deepfake pornography nonconsensual pornorgraphy revenge porn Rogue One SAG-AFTRA Screen Actors Guild‐American Federation of Television and Radio Artists Star Wars Star Wars: Rogue One texas Virginia

(Read more…)

The post Deepfakes laws and proposals flood US appeared first on Malwarebytes Labs.

MalwareBytes Security

January 22, 2020 admin

WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation

Credit to Author: Jérôme Segura| Date: Wed, 22 Jan 2020 16:00:00 +0000

We reveal the inner workings of WOOF locker, the most sophisticated browser locker campaign we’ve seen to date. Learn how this tech support scam evades researchers and ensnares users by hiding in plain sight.

Categories:

Threat analysis

Tags: 404Browlock 404error browlock browlocks Browser guard browser locker chrome Edge firefox malvertising malvertising campaigns microsoft scams Social Engineering steganography tech support tech support scams TSS WOOF

MalwareBytes Security

January 20, 2020 admin

A week in security (January 13 – 19)

Credit to Author: Malwarebytes Labs| Date: Mon, 20 Jan 2020 16:32:45 +0000

Our weekly security roundup for January 13-19, with a look at elastic servers, data enrichment, rootkits, regulation for deepfakes, and more.

Categories:

A week in security

Tags: apt40 Cisco citrix data enrichment deepfakes elastic servers emotet rootkit travelex weleakinfo

(Read more…)

The post A week in security (January 13 – 19) appeared first on Malwarebytes Labs.

MalwareBytes Security

January 17, 2020 admin

Business in the front, party in the back: backdoors in elastic servers expose private data

Credit to Author: Vasilios Hioureas| Date: Fri, 17 Jan 2020 18:58:47 +0000

It’s all too easy to discover data leaks online, especially in cloud services. We take a look at misconfigurations in elastic servers that lead to exposed data on the Internet.

Categories:

Threat spotlight

Tags: aws AWS buckets cloud database cloud databases cloud infrastructure elastic databases elastic servers insecure cloud pacs personally identifiable information port 9200