MalwareBytes – Page 294 – Computer Security Articles

Credit to Author: Malwarebytes Labs| Date: Wed, 15 May 2019 16:57:16 +0000

This month marks two years since the infamous WannaCry attack. Now a Remote Desktop Protocol (RDP) vulnerability has been discovered that could be used in a similar large-scale attack—though Microsoft has released a patch. Have you updated yet?

Categories:

Tags: exploit patching rdp remote desktop protocol vulnerability WannaCry windows 7 windows 8 windows server 2003 windows server 2008 windows xp worm

MalwareBytes Security

May 15, 2019 admin

Threat spotlight: CrySIS, aka Dharma ransomware, causing a crisis for businesses

Credit to Author: Pieter Arntz| Date: Wed, 15 May 2019 16:02:13 +0000

CrySIS, aka Dharma, is a ransomware family making waves over the last two months, often being used in targeted attacks through RDP access. What other tricks are up its sleeve?

Categories:

Tags: Anti-Ransomware crysis dharma malware ransom ransomware rdp rdp access

MalwareBytes Security

May 14, 2019 admin

WhatsApp fix goes live after targeted attack on human rights lawyer

Credit to Author: Christopher Boyd| Date: Tue, 14 May 2019 16:46:21 +0000

A fix was rolled out for a WhatsApp vulnerability, which was used to inject spyware into mobile devices and target a human rights lawyer.

Categories:

Tags: attack Mobile spyware targeted whatsapp

MalwareBytes Security

May 14, 2019 admin

Exploit kits: spring 2019 review

Credit to Author: Jérôme Segura| Date: Tue, 14 May 2019 15:57:05 +0000

In this edition, we review active and unique exploit kits hitting consumers and businesses over the spring season.

Categories:

Tags: EKs exploit kits Fallout Magnitude RIG Router EK Spelevo Underminer

(Read more…)

The post Exploit kits: spring 2019 review appeared first on Malwarebytes Labs.

MalwareBytes Security

May 13, 2019 admin

A week in security (May 6 – 12)

Credit to Author: Malwarebytes Labs| Date: Mon, 13 May 2019 15:55:43 +0000

A roundup of security news from May 6–12, including breaches, privacy, financials, takedowns, and new ransomware tactics.

Categories:

Tags: 5G baltimore confluence data breach dharma electricfish financial fintech Google mozilla privacy seep dot web wolters kluwer

(Read more…)

The post A week in security (May 6 – 12) appeared first on Malwarebytes Labs.

MalwareBytes Security

May 10, 2019 admin

Vital infrastructure: Threats target financial institutions, fintech, and cryptocurrencies

Credit to Author: Pieter Arntz| Date: Fri, 10 May 2019 15:00:00 +0000

Losing trust in financial institutions can have a disrupting effect on society. And malware authors love to target these direct sources of money. How can we protect them?

Categories:

Tags: APTs banking apps banking Trojans banks bitcoin cryptocurrencies cryptocurrency cryptowallets emotet exploit kits financial institutions financials fintech information stealers infrastructure malware vital

MalwareBytes Security

May 9, 2019 admin

How 5G could impact cybersecurity strategy

Credit to Author: Kayla Matthews| Date: Thu, 09 May 2019 16:00:00 +0000

With 5G wireless on the horizon, what will businesses need to do to secure their devices and networks?

Categories:

Tags: 5G 5G wireless automation cybersecurity strategy integration internet mirai Mirai botnet networks wireless wireless technology

(Read more…)

The post How 5G could impact cybersecurity strategy appeared first on Malwarebytes Labs.

MalwareBytes Security

May 8, 2019 admin

Vulnerabilities in financial mobile apps put consumers and businesses at risk

Credit to Author: Jovi Umawing| Date: Wed, 08 May 2019 16:30:00 +0000

It’s good to know that your bank’s website boasts that little green padlock, promotes secure communication, and follows a two-factor authentication (2FA) scheme. But are their mobile apps equally secure?

Categories:

Tags: app vulnerabilities client-side injection development hygiene exposure of database parameters and sql queries financial financial mobile app flaws implicit trust of all certificates insecure data storage insecure random number generator lack of binary protections man-in-the-middle man-int-the-middle mitm private key exposure secure app development security hubris SQL injection unintended data leakage vulnerabilities weak encryption