October 1, 2021

QNAP Fixes Bug That Let Attackers Run Malicious Commands Remotely Taiwan-based network-attached storage (NAS) maker QNAP has released security patches for multiple vulnerabilities that could allow attackers to inject and execute malicious code and commands remotely on vulnerable NAS devices. Three of the security flaws fixed today by QNAP are Read more…

Fake Amnesty International Pegasus Scanner Used To Infect Windows Threat actors are trying to capitalize on the recent revelations on Pegasus spyware from Amnesty International to drop a less-known remote access tool called Sarwent. The malware looks and acts the part of a legitimate antivirus solution specially created to scan Read more…

GhostEmperor Hackers Use New Windows 10 Rootkit In Attacks Chinese-speaking cyberspies have targeted Southeast Asian governmental entities and telecommunication companies for more than a year, backdooring systems running the latest Windows 10 versions with a newly discovered rootkit. The hacking group, dubbed GhostEmperor by Kaspersky researchers who spotted it, use the Demodex rootkit, which Read more…

JVCKenwood Hit by Conti Ransomware Claiming Theft of 1.5TB Data JVCKenwood has suffered a Conti ransomware attack where the threat actors claim to have stolen 1.7 TB of data and are demanding a $7 million ransom. JVCKenwood is a multinational electronics company based out of Japan that employs 16,956 people and has Read more…

WireX DDoS Botnet Admin Charged For Attacking Hotel Chain The US Department of Justice charged the admin of the WireX Android botnet for targeting an American multinational hotel chain in a distributed denial-of-service (DDoS) attack. Izzet Mert Ozek, the defendant, used the botnet which consisted of tens of thousands of Read more…

RansomEXX Ransomware Linux Encryptor May Damage Victims’ Files ​Cybersecurity firm Profero has discovered that the RansomExx gang does not correctly lock Linux files during encryption, leading to potentially corrupted files. In a new report by Profero, Senior Incident Responder Brenton Morris says the RansomEXX decryptor was failing on various files Read more…

US Congress Asks FBI To Explain Delay In Helping Kaseya Attack Victims The House Committee on Oversight and Reform has requested a briefing to understand the rationale behind the FBI’s decision to delay providing the victims of the Kaseya REvil ransomware with a universal decryption key for three weeks. “To Read more…