Kryptos Logic News Today

Security researchers warn of rising attacks targeting the 'ubiquitous' Log4j vulnerability.

A zero-day vulnerability detected in the Java logging library Apache Log4j can result in full server takeover, and leaves countless applications vulnerable,

A zero-day vulnerability detected in the Java logging library Apache Log4j can result in full server takeover, and leaves countless applications vulnerable,

minute read Share this article: Public proof-of-concept (PoC) exploits for ProxyLogon could be fanning a feeding frenzy of attacks even as patching makes progress. As dangerous attacks accelerate against Microsoft Exchange Servers in the wake of the disclosure around the ProxyLogon group of security bugs, a public proof-of-concept (PoC) whirlwind has started up. It’s all leading to a feeding frenzy of cyber-activity. The good news, however, is that Microsoft has issued a one-clic...

12 March 2021, 8:13 pm EST By Microsoft Exchange Hack Sparks Chaos for Users with Unpatched Servers  ( Screenshot From Pxhere Official Website ) Microsoft has recently issued an alert that hackers are using a certain strain of ransomware known as the DearCry and are now targeting those users with unpatched Microsoft Exchange servers. The target as of the moment is th...

Tens of thousands of vulnerable Exchange servers remain at risk.

Get Permission The operators behind the Trickbot malware are deploying a new reconnaissance tool dubbed "Masrv" to exfiltrate additional data from targeted networks, according to a Kryptos Logic report released this week. The report notes that the Masrv tool incorporates an open-source network scanner called Masscan that can probe networks to target Microsoft Windows operating systems. The botnet operators then deploy two backdoors that can be used for additional data exfiltration and to maint...

Named  masrv, the component incorporates a copy of the Masscan open-source utility in order to scan local networks for other systems with open ports that can be attacked at a later stage. The idea behind masrv is to drop the component on newly infected devices, send a series of Masscan commands, let the component scan the local network, and upload the scan results to a Trickbot command and control server. If the scan finds systems with sensitive or management ports left open inside an intern...