A naukri.com initiative
Malware News
Pymnts
2w
374
Image Credit: Pymnts
UnitedHealth Still ‘Trying to Dig Through’ Cause of Cyberattack
- UnitedHealth's CEO, Andrew Witty, stated that the company is still investigating the security failure that led to a massive cyberattack.
- The breach occurred when intruders accessed a server without multifactor authentication.
- UnitedHealth is facing accusations of failing to establish basic security protocols and recover from the breach.
- The cyberattack could cost UnitedHealth up to $1.6 billion, and a bill has been introduced to incentivize minimum cybersecurity standards in the healthcare industry.
Read Full Article
22 Likes
Gbhackers
2w
47
Millions of Malicious “Imageless” Docker Hub Repositories Drop Malware
- Nearly 20% of Docker Hub repositories have been identified as conduits for malware and phishing scams.
- Attackers have created almost three million malicious repositories on Docker Hub over the span of three years.
- These malicious entities leveraged Docker Hub's trusted platform to distribute phishing and malware schemes.
- JFrog's security research team collaborated with Docker to identify and remove the malicious repositories.
Read Full Article
2 Likes
Cybersecurity-Insiders
2w
4
Image Credit: Cybersecurity-Insiders
Crafting an Airtight Security Posture Against Ransomware Threats
- Ransomware attacks pose a significant threat to individuals and organizations.
- Implement multi-layered security measures, including firewalls and antivirus software.
- Regularly update software and systems, and educate employees on cybersecurity best practices.
- Backup data regularly, monitor and respond to threats, and engage with security experts.
Read Full Article
Like
Medium
2w
237
Image Credit: Medium
Understanding Ransomware As a Service (RaaS)
- Ransomware as a Service (RaaS) is a part of the SaaS business model.
- RaaS operators develop and sell malicious programs to cybercriminals who lack the time or knowledge to create their own ransomware.
- RaaS kits offer features like user guides, customer support, user reviews, and forums.
- RaaS revenue models include affiliate programs, one-time licenses, and pure profit sharing.
Read Full Article
14 Likes
Arstechnica
2w
306
Image Credit: Arstechnica
Health care giant comes clean about recent hack and paid ransom
- Health care giant, Change Healthcare, revealed that the recent ransomware attack on their systems was due to a compromised account that lacked multifactor authentication.
- The attack, carried out by a ransomware group named ALPHV or BlackCat, caused a nationwide network outage, disrupting the US prescription market for two weeks.
- As a result of the attack, personal health information for a significant portion of the US population was obtained by the hackers.
- The breach occurred on February 12 when the hackers obtained an account password for a portal allowing remote access, which did not have multifactor authentication in place.
Read Full Article
18 Likes
Cybersecurity-Insiders
2w
401
Image Credit: Cybersecurity-Insiders
Commvault projects Cleanroom Recovery for ransomware thwarting customers
- Commvault's Cleanroom Recovery leverages Microsoft Azure cloud infrastructure to provide customers with a secure space for immutable data backups.
- Cleanroom Recovery doubles as a testing environment for companies seeking to fortify their ransomware recovery strategies.
- Customers gain access to a flexible and scalable infrastructure for testing data recovery plans across diverse IT environments.
- Cleanroom Recovery facilitates seamless conversion of virtual machines from any hypervisor to Azure VMs.
Read Full Article
24 Likes
Gbhackers
2w
99
Redline Malware Using Lua Bytecode to Challenge the SOC/TI Team to Detect
- Redline Stealer malware variant discovered using Lua bytecode to obfuscate its code
- Malware found on GitHub, exploiting its popularity and trust to distribute malicious files
- Redline Stealer communicates with C2 server over HTTP and steals victim information
- Malware leverages Lua's FFI to bypass monitored channels and evade detection
Read Full Article
5 Likes
Medium
2w
69
Image Credit: Medium
A Deep Dive into Ransomware in 2024
- Ransomware attacks have increased by 22% in the first half of 2024 compared to last year.
- Average ransom payments have surged to $3 million in Q2 of 2024, up from $1.8 million in 2023.
- Healthcare organizations have seen a 35% increase in ransomware attacks in 2024.
- Modern ransomware attacks incorporate 'double extortion' tactics and target third-party vendors.
Read Full Article
4 Likes
Medium
2w
306
Image Credit: Medium
Unveiling the Threat: How Malware Propagates & Defensive Strategies
- Malware spreads through phishing, software downloads, infected websites, and removable media.
- Phishing involves deceiving victims through persuasive language and stealing personal data.
- Software downloads can trick users into installing malware disguised as legitimate software.
- Infected websites and drive-by downloads exploit vulnerabilities in browsers and systems.
- Removable media like flash drives can transfer malware to other systems.
- Tips for protection include checking for phishing indicators, avoiding untrustworthy software downloads, using updated browsers, and scanning external media for threats.
Read Full Article
18 Likes
Securityintelligence
2w
43
Image Credit: Securityintelligence
AI cybersecurity solutions detect ransomware in under 60 seconds
- AI cybersecurity solutions have emerged that can detect ransomware in less than 60 seconds.
- IBM has announced new AI-enhanced versions of its FlashCore Module technology and Storage Defender software to help detect and respond to cyberattacks.
- Traditional storage arrays are being replaced by systems like IBM FlashSystem, which leverage machine learning to monitor data patterns and detect cyber threats.
- AI-enhanced attacks are evolving rapidly, making AI-powered cybersecurity solutions crucial for combating ransomware and other threats.
Read Full Article
2 Likes
Medium
2w
337
Image Credit: Medium
Change Healthcare’s Alleged Authentication Blunder
- Change Healthcare's alleged authentication blunder led to financial losses and security breaches.
- The incident highlights the need for stricter regulations in cybersecurity, especially in sensitive sectors like healthcare.
- A proactive approach incorporating rigorous security protocols is crucial for safeguarding data and privacy.
- The role of cybersecurity professionals is essential in shaping the future of digital security.
Read Full Article
20 Likes
Gbhackers
2w
302
LightSpy Malware Actively Targeting MacOS Devices
- Huntress researchers have discovered a macOS variant of the LightSpy malware, contradicting earlier reports of it being an iOS malware.
- The macOS variant targets Intel or Apple Silicon with Rosetta 2-enabled devices.
- The researchers provided detection rules for further investigation.
- The macOS version of LightSpy exhibits more advanced features and a more organized development process compared to the iOS version.
Read Full Article
18 Likes
Gbhackers
2w
220
New Android Malware Mimic As Social Media Apps Steals Sensitive Data
- A new RAT malware has been discovered to be targeting Android devices.
- The malware disguises itself as legitimate social media apps like Snapchat, Instagram, WhatsApp, Twitter, and Google to steal sensitive data.
- The malware utilizes HTML files to create fraudulent login pages and harvest credentials from users.
- It also gains control over the infected device and executes various malicious actions.
Read Full Article
13 Likes
Gbhackers
2w
315
Meet the New Exclusive AI Malware Analyst: Gemini 1.5 Pro
- Gemini 1.5 Pro is the latest version of the Gemini AI malware analysis platform, transforming the cybersecurity industry.
- It enables security teams to detect, investigate, and respond to malware threats efficiently and accurately.
- Gemini 1.5 Pro leverages advanced AI and machine learning to revolutionize malware detection and analysis.
- The platform offers comprehensive malware analysis, automation, and seamless integration with existing security infrastructure.
Read Full Article
18 Likes
Securityaffairs
2w
465
Image Credit: Securityaffairs
Google prevented 2.28 million policy-violating apps from being published on Google Play in 2023
- Google prevented 2.28 million policy-violating apps from being published on Google Play in 2023.
- The result was achieved through enhanced security features, policy updates, and advanced machine learning and app review processes.
- 333,000 accounts were banned for confirmed malware and severe policy breaches.
- Google rejected or remediated around 200K app submissions and worked with SDK providers to protect users' privacy.
Read Full Article
Like
For uninterrupted reading, download the app