Category: February

Do you have a GoDaddy hosted site? Has the site been acting strangely recently? Well, do I have a story for you…. GoDaddy webhosting breach GoDaddy, the Internet’s largest web host, headquartered in Tempe, Arizona, has recently announced that they have been subject to a complex security breach which appears to […]

First seen in 2016, the mirai botnet has become one of the most notorious botnets the Internet has ever seen. And now it’s back with 13 new vulnerabilities to target! A bit of history Named after the Anime series Mirai Nikki, the Mirai malware targets vulnerable IoT devices and attempts […]

Security researchers at Vedere Labs (part of Forescout Technologies) have recently released details of 56 different vulnerabilities across 10 OT (Operational Technology) companies devices in a security brief called ICEFALL in an attempt to illustrate how the opaque and proprietary nature of such systems, the sub-optimal vulnerability management surrounding them, […]

In this blog, I take a look at the complex web which surrounds one of Russia’s most prolific hacking groups – Evil Corp, and the enormous malware campaigns they have been responsible for. Some of the data in this blog (OP Walerin) has been supplied to me by the Detective […]

A few years ago I wrote a blog for the company I work for, where I mulled the idea that the GDPR (General Data Protection Regulations) could be used by threat actors as a weapon to cause financial damage to a victim. Under GDPR, companies can be fined upto 4% […]

Brazilian threat actors behind a modular and highly advanced point-of-sale (PoS) malware known as Prilex have updated their attacks that allow the malware to block contactless payment transactions. Since Prilex came on the scene in 2014 as an ATM-based malware, the threat actor has continuously incorporated new features that are […]

Last week, the United Kingdom and the united states placed sanctions on seven Russian nationals who are behind at least two of the most virulent ransomware campaigns seen in recent years. Members of the TrickBot cybercrime group whose malware campaigns supported attacks by the Conti and Ryuk ransomware operations have […]

Threat actors, suspected to be from Russia have been targeting Eastern European users in the crypto industry with fake job opportunities as bait to install information-stealing malware on their devices. Trend Micro researchers Aliakbar Zahravi and Peter Girnus said in a report this week that the attackers “use several highly obfuscated and […]

Gootkit – a malware which has been around since 2014 has recently been seen to have adopted a new mechanism of deployment, and attackers are using it to deliver Cobalt Strike and SystemBC on compromised machines. The new attacks have been exclusively targeting healthcare and finance organisations in the UK, […]

It’s been a rough few weeks for hundreds of companies across the globe who operate their businesses with VMware’s ESXi server. A two-year-old Remote Code Execution (RCE) vulnerability is being used against unpatched servers to allow hackers to deploy the new ransomware variant called ESXiArgs. A hackers two favourite words […]