Hackers Exploit Bug in Redis Servers To Drop New Bakcdoor Malware “Redigo”

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered a new backdoor malware dubbed “Redigo” written in Go -Language, which targets the Redis servers and drops a backdoor to gain complete control of the servers. Redigo Malware was uncovered via vulnerable Redis honeypots where the attackers attempt …

New Google Chrome Zero-Day Bug Actively Exploited in Wild – Emergency Update!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released new security updates for actively exploited Chrome zero-day vulnerability that allows attackers to execute an arbitrary code to take full control of the system remotely using the exploit that exists in the Wild. A Stable chennal update was …

Hackers Sign Android Malware using Hacked Platform Signing Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Certificate SHA256: 2464ddfefa071f268ea7667123df05ead2293272ff2a64d9cee021c38b46c6afMalware sample SHA256: e4e28de8ad3f826fe50a456217d11e9e6a80563b35871ac37845357628b95f6a Certificate SHA256: 2bfa22964760a25d99ab9a14910e44fe2063b51d5b4ac2e4282573ce94996aa3Malware sample SHA256: 5c173df9e86e959c2eadcc3ef9897c8e1438b7a154c7c692d0fe054837530458 Certificate SHA256: 34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42Malware sample SHA256: b1f191b1ee463679c7c2fa7db5a224b6759c5474b73a59be3e133a6825b2a284 Certificate SHA256: 369c38b18401ea16785f11720e37d7a2bc5a4d209e76955c0858ea469ad62fdfMalware sample SHA256: 19c84a2386abde0c0dae8661b394e53bf246f6f0f9a12d84cfc7864e4a809697 Certificate SHA256: 4274243d7a954ac6482866f0cc67ca1843ca94d68a0ee53f837d6740a8134421Malware sample SHA256: 0251bececeffbf4bf90eaaad27c147bb023388817d9fbec1054fac1324c6f8bf Certificate SHA256: 5304915c4bb7baca28776231993996fde1baffcbbe6500fb0fc7f2d3a2888cb7Malware sample SHA256: c612917d68803efbd2f0e960ade1662be9751096afe0fd81cee283c5a35e7618 Certificate SHA256: 9200c550f2374706eff37e3a8674bc03aeba8b25c052de638972ab94365af0a2Malware sample …

Malware on Google Play Infected over 300,000 Users to Steal Facebook Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Schoolyard Bully Trojan, a new Android threat campaign that has been active since 2018, has been found by Zimperium zLabs. Over 300,000 people have fallen victim to the campaign, which specifically targets Facebook login information.  A recent analysis by Zimperium …

10 Best Bot Protection & Mitigation Software – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bot protection software or bot mitigation software plays a vital role in protecting websites and web apps from malicious traffic. A ‘bot’ (short for robot), is a software program that performs automated, repetitious, pre-defined tasks. Bots typically imitate or replace …

Highly Sophisticated Dolphin Malware Steals Sensitive Files and Store Them on Google Drive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, cybersecurity experts at ESET identified that North Korean hackers had been actively using a previously unknown backdoor called Dolphin. This backdoor has been used for more than a year to carry out highly targeted operations against South Korean targets. …

ConnectWise Quietly Patches Flaw That Helps Phishers

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

ConnectWise, a self-hosted, remote desktop software application that is widely used by Managed Service Providers (MSPs), is warning about an unusually sophisticated phishing attack that can let attackers take remote control over user systems when recipients click the included link. …

Critical RCE Flaw With 2M Downloaded Android Remote Keyboard Apps Let Attackers Access keystrokes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical RCE Flaw With 2M Downloaded Android Remote Keyboard Apps Let Attackers Access keystrokes By Guru – December 1, 2022 Multiple critical vulnerabilities were found by the security researchers at Synopsys in three Android apps that enable users to control …

Hackers Selling Access to Enterprise Networks via a Critical Flaw in Fortinet Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security experts from Cyble security firm have recently identified a security flaw, CVE-2022-40684 that’s affecting multiple versions of Fortinet products, and this product range includes the following products:- FortiOS FortiProxy FortiSwitchManager A recently patched critical vulnerability in Fortinet products may …

New Flaw in Acer Laptops Let Attackers Disable Boot Protection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Experts from Acer observed multiple Acer laptop models have vulnerabilities that might let hackers disable the ‘Secure Boot’ function and security checks to install malware. The vulnerability, tracked as CVE-2022-4020 (CVSS score of 8.1), was found in the HQSwSmiDxe DXE …