article thumbnail

Cyberspies tap free tools to make powerful malware framework

Network World

Over the past year, a group of attackers has managed to infect hundreds of computers belonging to government agencies with a malware framework stitched together from JavaScript code and publicly available tools. To read this article in full or to leave a comment, please click here

Malware 90
article thumbnail

Malware distributors are switching to less suspicious file types

Network World

After aggressively using JavaScript email attachments to distribute malware for the past year, attackers are now switching to less suspicious file types to trick users. Last week, researchers from the Microsoft Malware Protection Center warned about a new wave of spam emails that carried malicious.LNK files inside ZIP archives.

Malware 60
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Microsoft warns of critical Windows DNS Server vulnerability that’s ‘wormable’

The Verge

Such a flaw could allow attackers to create special malware that remotely executes code on Windows servers and creates malicious DNS queries that could even eventually lead to a company’s infrastructure being breached. Microsoft is warning of a 17-year-old critical Windows DNS Server vulnerability that the company has classified as “wormable.”

Windows 131
article thumbnail

SysAdmin Gets 10 Years in Prison

SecureWorld News

Being a systems administrator can be a fulfilling job with a lot of rewards. Some were hackers, others developed the malware installed on computers, and still others crafted the malicious emails that duped victims into infecting their company systems.

Malware 87
article thumbnail

Microsoft fixes 55 vulnerabilities, 3 exploited by Russian cyberspies

Network World

Fifteen of the vulnerabilities fixed in Microsoft's patch bundle for May are rated as critical and they affect Windows, Microsoft Office, Microsoft Edge, Internet Explorer, and the malware protection engine used in most of the company's anti-malware products.

article thumbnail

Lazarus APT Targeting Cryptocurrency, CISA Warns

SecureWorld News

The threat actors use social engineering to encourage individuals to download trojanized cryptocurrency applications on Windows or macOS operating systems. They use the apps to gain access to the victim's computer and install malware across the network environment, stealing private keys and exploiting other security gaps.

Malware 77
article thumbnail

Ransomware Detection at Chip Level? Yes, Says Intel

SecureWorld News

This technique also helps verify that the operating system and its virtual environment are running directly on Intel hardware, as opposed to malware that is spoofing the hardware. Providing operating system visibility into the BIOS- and firmware-protection methods used at boot time. Intel's 11th gen core vPro processors.

Intel 53