MalwareBytes – Page 214 – PossibleThreat Articles

Business in the front, party in the back: backdoors in elastic servers expose private data

January 17, 2020 0 Comments AWS, aws buckets, cloud database, cloud databases, cloud infrastructure, elastic databases, elastic servers, insecure cloud, pacs, personally identifiable information, port 9200, Threat spotlight

Credit to Author: Vasilios Hioureas| Date: Fri, 17 Jan 2020 18:58:47 +0000

It’s all too easy to discover data leaks online, especially in cloud services. We take a look at misconfigurations in elastic servers that lead to exposed data on the Internet.

Categories:

Threat spotlight

Tags: aws AWS buckets cloud database cloud databases cloud infrastructure elastic databases elastic servers insecure cloud pacs personally identifiable information port 9200

MalwareBytes Security

Rules on deepfakes take hold in the US

January 15, 2020 0 Comments Artificial intelligence, barack obama, boris johnson, cheapfake, deepfake, deepfakes, department of defense, director of national intelligence, dni, gavin newsom, governor gavin newsom, jeremy corbyn, nancy pelosi, national defense authorization act, ndaa, people's republic of china, president obama, reddit, russian federation

Credit to Author: David Ruiz| Date: Wed, 15 Jan 2020 16:59:33 +0000

Rather than creating new policies or crimes for deepfakes—like making it illegal to use them to deceive—the NDAA seeks a better understanding to the burgeoning technology.

Categories:

Artificial Intelligence

Tags: Barack Obama Boris Johnson cheapfake deepfake deepfakes Department of Defense Director of National Intelligence DNI Gavin Newsom Governor Gavin Newsom Jeremy Corbyn Nancy Pelosi National Defense Authorization Act NDAA People’s Republic of China President Obama reddit Russian Federation

(Read more…)

The post Rules on deepfakes take hold in the US appeared first on Malwarebytes Labs.

MalwareBytes Security

How to prevent a rootkit attack

January 14, 2020 0 Comments application rootkits, bootloader, firmware rootkits, hardware rootkits, how-tos, kernel rootkits, phishing, rootkit, rootkit attacks, Social engineering, virtualized rootkits

Credit to Author: Gilad Maayan| Date: Tue, 14 Jan 2020 17:31:55 +0000

Rootkit attacks are considered one of the most dangerous cyberthreats today. Learn what they are, how they infect systems, and how to protect against them.

Categories:

How-tos

Tags: application rootkits bootloader firmware rootkits hardware rootkits kernel rootkits phishing rootkit rootkit attacks Social Engineering virtualized rootkits

(Read more…)

The post How to prevent a rootkit attack appeared first on Malwarebytes Labs.

MalwareBytes Security

A week in security (January 6 – 12)

January 13, 2020 0 Comments A week in security, ces, ces 2020, consumer electronics show, education cybersecurity, Google, Phobos, phobos ransomware, pre-installed mobile malware, Ransomware, retail industry, ring, search industry, TikTok

Credit to Author: Malwarebytes Labs| Date: Mon, 13 Jan 2020 16:29:59 +0000

A cybersecurity news roundup from January 6–12, with a look at Phobos ransomware and a discovery of pre-installed malware on government-funded phones.

Categories:

A week in security

Tags: CES CES 2020 Consumer Electronics Show education cybersecurity Google Phobos Phobos ransomware pre-installed mobile malware ransomware retail industry Ring search industry tiktok

(Read more…)

The post A week in security (January 6 – 12) appeared first on Malwarebytes Labs.

MalwareBytes Security

Threat spotlight: Phobos ransomware lives up to its name

January 10, 2020 0 Comments brute force, coveware, crysis, crysis ransomware, dharma, dharma ransomware, disorganised crime, MFA, multi-factor authorization, Phobos, phobos nextgen, phobos notdharma, phobos ransomware, raas, Ransomware, Ransomware as a Service, RDP, remote desktop protocol, server message block, smb, Sodinokibi, Threat spotlight, virtual private networks, vpn

Credit to Author: Jovi Umawing| Date: Fri, 10 Jan 2020 18:04:44 +0000

Phobos, which many believe was named after the Greek god of fear, isn’t as widespread as it was before nor is it more novel than your average ransomware. Yet, it remains a threat to consumers and businesses alike. We dive into Phobos ransomware and show users how to face their fears and protect against it.

Categories:

Threat spotlight

Tags: brute force coveware crysis crysis ransomware dharma Dharma ransomware disorganised crime mfa Multi-Factor Authorization Phobos Phobos NextGen Phobos NotDharma Phobos ransomware raas ransomware Ransomware as a Service rdp remote desktop protocol Server Message Block SMB Sodinokibi virtual private networks vpn

MalwareBytes Security

United States government-funded phones come pre-installed with unremovable malware

January 9, 2020 0 Comments Android, android malware, android/trojan.dropper.agent.umx, android/trojan.hiddenads, china, Mobile, mobile malware, pre-installed mobile malware, pre-installed software, trojan

Credit to Author: Nathan Collier| Date: Thu, 09 Jan 2020 16:00:00 +0000

A US-funded government assistance program is selling budget-friendly mobile phones that come pre-installed with unremovable malicious apps. Malwarebytes Labs investigates the malware’s origins.

Categories:

Android

Tags: android malware Android/Trojan.Dropper.Agent.UMX Android/Trojan.HiddenAds china Mobile mobile malware pre-installed mobile malware pre-installed software trojan

MalwareBytes Security

6 ways hackers are targeting retail businesses

January 8, 2020 0 Comments credential stuffing, emv technology, Magecart, near field communication, nfc technology, online retail, online retailers, online scams, QR code, QR codes, ram scraping, retail scams, Social engineering, web skimmer, web skimmers, web skimming, Web threats

Credit to Author: Kayla Matthews| Date: Wed, 08 Jan 2020 18:04:10 +0000

Whether it’s a high-volume shopping season or not, retail businesses are at risk from cybercriminals in a number of ways. Learn how hackers target retailers and shoppers alike.

Categories:

Web threats

Tags: credential stuffing EMV technology Magecart near field communication nfc technology online retail online retailers online scams QR code QR codes ram scraping retail scams Social Engineering web skimmer web skimmers web skimming web threats

(Read more…)

The post 6 ways hackers are targeting retail businesses appeared first on Malwarebytes Labs.

MalwareBytes Security

Dubious downloads: How to check if a website and its files are malicious

January 7, 2020 0 Comments certificate, checksum, download, how-tos, padlock, scan, trusted

Credit to Author: Pieter Arntz| Date: Tue, 07 Jan 2020 17:45:08 +0000

Users often search the web for downloads when companies no longer support software, and what they find is dubious. How can they tell if the files are safe? We tell how to spot the difference.

Categories:

How-tos

Tags: certificate checksum download padlock scan trusted

MalwareBytes Security

Billion-dollar search engine industry attracts vultures, shady advertisers, and cybercriminals

January 6, 2020 0 Comments adfraud, advertisements, adware, extensions, hijackers, potentially unwanted programs, PUPs, results, search, search engine, search engine optimization, search engines, seo, seo poisoning, sponsored

Credit to Author: Pieter Arntz| Date: Mon, 06 Jan 2020 20:04:21 +0000

We look at the ways in which criminals and vultures use less-than-honest tactics to fleece the search engine industry for a piece of its billion-dollar pie.

Categories:

PUPs

Tags: adfraud advertisements adware extensions hijackers potentially unwanted programs PUPs results search search engine search engine optimization search engines SEO seo poisoning sponsored