Tag: malware

  • Hacker News: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab

    Source URL: https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ Source: Hacker News Title: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses alarming connections between a notorious bulletproof hosting provider, Prospero OOO, and Kaspersky Lab, a leading cybersecurity firm. The implications of this association raise serious security concerns, especially…

  • Unit 42: Uncovering .NET Malware Obfuscated by Encryption and Virtualization

    Source URL: https://unit42.paloaltonetworks.com/?p=138493 Source: Unit 42 Title: Uncovering .NET Malware Obfuscated by Encryption and Virtualization Feedly Summary: Malware authors use AES encryption and code virtualization to evade sandbox static analysis. We explore how this facilitates spread of Agent Tesla, XWorm and more. The post Uncovering .NET Malware Obfuscated by Encryption and Virtualization appeared first on…

  • Hacker News: Kaspersky exposes hidden malware on GitHub stealing personal data

    Source URL: https://www.kaspersky.com/about/press-releases/kaspersky-exposes-hidden-malware-on-github-stealing-personal-data-and-485000-in-bitcoin Source: Hacker News Title: Kaspersky exposes hidden malware on GitHub stealing personal data Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the discovery of a malicious campaign dubbed GitVenom by Kaspersky’s Global Research & Analysis Team, targeting gamers and crypto investors through compromised open-source repositories on GitHub. It…

  • Hacker News: The GitVenom campaign: cryptocurrency theft using GitHub

    Source URL: https://securelist.com/gitvenom-campaign/115694/ Source: Hacker News Title: The GitVenom campaign: cryptocurrency theft using GitHub Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the GitVenom campaign, which involves threat actors creating fake open-source projects on GitHub to distribute malicious code. These projects appear legitimate and lure unsuspecting users, emphasizing the need for…

  • Krebs on Security: Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab

    Source URL: https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ Source: Krebs on Security Title: Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab Feedly Summary: One of the most notorious providers of abuse-friendly “bulletproof" web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus and security firm Kaspersky Lab, KrebsOnSecurity has learned. AI Summary and…

  • Unit 42: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations

    Source URL: https://unit42.paloaltonetworks.com/?p=138415 Source: Unit 42 Title: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations Feedly Summary: We analyze the backdoor Squidoor, used by a suspected Chinese threat actor to steal sensitive information. This multi-platform backdoor is built for stealth. The post Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations appeared first on…

  • The Register: With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

    Source URL: https://www.theregister.com/2025/02/26/hibp_adds_giant_infostealer_trove/ Source: The Register Title: With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare Feedly Summary: 244M purloined passwords added to Have I Been Pwned thanks to govt tip-off A tip-off from a government agency has resulted in 284 million unique email addresses and plenty of passwords snarfed by…