A ransomware attack hit Cleveland Hopkins International Airport disabling information screens displaying in-airport flight arrivals, departures and baggage claims. The City of Cleveland calls this attack as an isolated technical issue that has impacted a limited number of systems. What is the issue – On April 22, 2019, a ransomware attack hit Cleveland Hopkins Internation Airport disabling information screens that display ...

The malware variant is tracked as Trojan.W97M.POWLOAD and spreads via phishing emails. The email contains a malicious ZIP file, which if opened, results in the download of the malware. A new variant of Emotet trojan that leverages a new POST-infection traffic technique has been discovered recently. The malware variant is tracked as Trojan.W97M.POWLOAD and spreads via phishing emails. How does ...

  The malware has been created with a purpose to help academicians in their research. The source code of the malware is neither weaponized for cybercrime nor released on GitHub. Two leaked NSA exploit kits have been used to create a malware named SMBdoor. The malware’s characteristics are similar to that of DoublePulsar and DarkPulsar. What’s the matter – SMBdoor is ...

A context-aware phishing email that includes a link to an online document is sent to the target. The phishing emails are disguised as delivery emails which are replies to existing email threads. What is the issue – A phishing campaign disguised as delivery emails which are replies to existing email threads, delivers the Qbot trojan. The big picture JASK SpecOps security ...

The malware is used against victims who speak Portuguese or English. The attack begins with victims receiving phishing emails about a hotel reservation or confirmation. Cybercriminals are deploying a banking trojan using the file cabinet template built into the Google Sites platform. The malware, dubbed as LoadPCBanker, is used against victims who speak Portuguese or English. How is the trojan ...

The malware is delivered via an Excel document that contains malicious macros. The spear phishing messages are sent to the specific targets chosen by the threat actor group. Researchers at Cisco Talos detected a DNSpionage malware campaign in late 2018. It is believed that the same threat actor group has changed its tactics over time to improve the efficacy of ...

FireEye researchers detected two RAR archives uploaded on the VirusTotal malware scanning portal that contained Carbanak’s source code, builders, and other tools. Carbanak source code was 20MB in size and consisted of 755 files, 39 binaries, and over 100,000 lines of code. Security researchers from FireEye have uncovered the source code of the ‘Carbanak’ backdoor trojan that has been available ...

The security lapse allowed anyone to access the database and steal other customers’ Wi-Fi network passwords. It is believed that tens of thousands of exposed Wi-Fi passwords are for networks in the US. ‘Wi-Fi Finder’, a popular hotspot finder app, has exposed nearly 2 million network passwords due to an unprotected database. The security lapse allowed anyone to sneak into ...

Motive remains unclear though financial theft appears to be one possibility, Check Point Research says. A recent cyberattack campaign employed a weaponized version of TeamViewer and malware disguised as a top secret US government document to target officials in several embassies in Europe. The malware, phishing documents, and other artifacts used in the attacks appear to all be the work ...

The incident occurred after the hacker managed to compromise a vulnerable server belonging to the embassy. More than 4,800 sensitive documents were compromised from the Mexican Embassy. A hacker who goes by the online handle ‘@0x55Taylor’, stole and posted online thousands of sensitive documents from Mexico’s embassy in Guatemala. The incident occurred after the hacker managed to compromise a vulnerable ...