news

MalwareBytesSecurity

New PHP-based Ducktail infostealer is now after crypto wallets

Categories: News

Categories: Threats

Tags: Ducktail

Tags: infosteal

Tags: information stealer

Tags: Zscaler

Tags: Trojan

Tags: Facebook Business

Tags: Facebook API graph

Tags: Facebook Ads Manager

Tags: PHP malware

An information stealer known to go after the Facebook accounts of businesses is now after crypto wallets, too.

(Read more…)

The post New PHP-based Ducktail infostealer is now after crypto wallets appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Microsoft fixes driver blocklist placing users at risk from BYOVD attacks

Categories: News

Tags: BYOVD

Tags: bring your own vulnerable driver

Tags: blocklist

Tags: microsoft

Tags: windows updates

We take a look at reports that Microsoft’s driver blocklist hadn’t been updated for three years, leaving people at risk from BYOVD attacks.

(Read more…)

The post Microsoft fixes driver blocklist placing users at risk from BYOVD attacks appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Why Log4Text is not another Log4Shell

Categories: Exploits and vulnerabilities

Categories: News

Tags: Log4Text

Tags: Apache

Tags: Commons Text

Tags: CVE-2022-42889

Tags: Log4j

Tags: Log4Shell

Tags: interpolators

Log4Text is a recently found vulnerability in Apache Commons. Log4Text provoked a knee jerk reaction because it reminds us of Log4Shell. So should we worry?

(Read more…)

The post Why Log4Text is not another Log4Shell appeared first on Malwarebytes Labs.

Read More