Ransomware Attackers Using SystemBC Malware With RAT and Tor Proxy

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybercriminals are increasingly outsourcing the task of deploying ransomware to affiliates using commodity malware and attack tools, according to new research. In a new analysis published by Sophos today and shared with The Hacker News, recent deployments of Ryuk and Egregor ransomware have involved …

New Evidence Suggests SolarWinds’ Codebase Was Hacked to Inject Backdoor

Blog WriterThe Hacker News - Original news source is thehackernews.com

The investigation into how the attackers managed to compromise SolarWinds’ internal network and poison the company’s software updates is still underway, but we may be one step closer to understanding what appears to be a very meticulously planned and highly-sophisticated …

What is Geocoding? — How to Find Coordinates of An Address

Blog WriterThe Hacker News - Original news source is thehackernews.com

How can your app hook into a geocoding service that offers forward and reverse geocoding and an auto-completion facility? Geocoding turns a location name or address into geocoordinates. The service gets used by thousands of applications like Uber and Grubhub …

SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Network monitoring services provider SolarWinds officially released a second hotfix to address a critical vulnerability in its Orion platform that was exploited to insert malware and breach public and private entities in a wide-ranging espionage campaign. In a new update posted to …

Download the Essential Guide to Response Automation

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the classic children’s movie ‘The Princess Bride,’ one of the characters utters the phrase, “You keep using that word. I do not think it means what you think it means.” It’s freely used as a response to someone’s misuse …

Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new wormable botnet that spreads via GitHub and Pastebin to install cryptocurrency miners and backdoors on target systems has returned with expanded capabilities to compromise web applications, IP cameras, and routers. Early last month, researchers from Juniper Threat Labs …

Nearly 18,000 SolarWinds Customers Installed Backdoored Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

SolarWinds, the enterprise monitoring software provider which found itself at the epicenter of the most consequential supply chain attacks, said as many as 18,000 of its high-profile customers might have installed a tainted version of its Orion products. The acknowledgment comes …

Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)

Blog WriterThe Hacker News - Original news source is thehackernews.com

A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without requiring the presence of Wi-Fi hardware on the targeted systems. Dubbed “AIR-FI,” the …

SoReL-20M: A Huge Dataset of 20 Million Malware Samples Released Online

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity firms Sophos and ReversingLabs on Monday jointly released the first-ever production-scale malware research dataset to be made available to the general public that aims to build effective defenses and drive industry-wide improvements in security detection and response. “SoReL-20M” (short …

US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

Blog WriterThe Hacker News - Original news source is thehackernews.com

State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department’s National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign. The Washington Post, citing unnamed sources, said the …