Page 3 - Malware Removal News Today

GandCrab ransomware affiliate arrested for phishing attacks By 10:07 AM A suspected GandCrab Ransomware member was arrested in South Korea for using phishing emails to infect victims. The GandCrab ransomware operation started in January 2018 when it quickly became a malware empire threatening businesses worldwide. Operated as a Ransomware-as-a-Service (RaaS), the GandCrab developers teamed up with affiliates in a revenue share partnership, with affiliates earning between 70-80% of a ransom p...

More hacking groups join Microsoft Exchange attack frenzy By More state-sponsored hacking groups have joined the ongoing attacks targeting tens of thousands of on-premises Exchange servers impacted by severe vulnerabilities tracked as ProxyLogon. After Microsofts initial report that the vulnerabilities were actively exploited by a Chinese APT group named Hafnium, Slovak internet security firm ESET shared info on at least three other Chinese-backed hacking groups abusing the ProxyLogon fl...

Ryuk ransomware hits 700 Spanish government labor agency offices By 08:35 AM The systems of SEPE, the Spanish government agency for labor, were taken down following a ransomware attack that hit more than 700 agency offices across Spain. "Currently, work is being done with the objective of restoring priority services as soon as possible, among which is the portal of the State Public Employment Service and then gradually other services to citizens, companies, benefit and employment offices," an ...

Windows 10 crashes when printing due to Microsoft March updates By The Windows 10 KB5000802 and KB5000808 cumulative updates released yesterday are causing Blue Screen of Death crashes when printing to network printers. Since then, there has been a constant stream of complaints that printing is causing Windows 10 to crash with an "APC_INDEX_MISMATCH for win32kfull.sys" blue screen of death crash. Example APC_INDEX_MISMATCH for win32kfull.sys crash According to posts by system administrators on...

Norways parliament, the Storting, has suffered another cyberattack after threat actors stole data using the recently disclosed Microsoft Exchange vulnerabilities.

Google Chrome to block port 554 to stop NAT Slipstreaming attacks By 01:21 PM Google Chrome will block the browsers access to TCP port 554 to protect against attacks using the NAT Slipstreaming 2.0 vulnerability. Last year, security researchers disclosed a new version of the NAT Slipstreaming vulnerability that allows malicious scripts to bypass a website visitors NAT firewall and access any TCP/UDP port on the visitors internal network. Illustration of the NAT Slipstreaming 2.0 attack As ...

Ransomware gang plans to call victims business partners about attacks By 12:47 PM The REvil ransomware operation announced this week that they are using DDoS attacks and voice calls to journalists and victims business partners to generate ransom payments. The REvil ransomware operation, also known as Sodinokibi, is a ransomware-as-a-service (RaaS) where the ransomware operators develop the malware and payment site, and affiliates (adverts) compromise corporate networks to deploy the ransomware...

SolarWinds reports $3.5 million in expenses from supply-chain attack By SolarWinds has reported expenses of $3.5 million from last years supply-chain attack, including costs related to incident investigation and remediation. Further expenses were recorded by SolarWinds after paying for legal, consulting, and other professional services related to the December hack and provided to customers for free. Additional costs expected While $3.5 million doesnt seem too much compared to the aftermath of ...

Cash App phishing kit deployed in the wild, courtesy of 16Shop By 03:29 AM The developer of the 16Shop phishing platform has added a new component that targets users of the popular Cash App mobile payment service. Deployment of the new 16Shop product started as soon as it became available, luring potential victims into providing sensitive details that would give fraudsters access to the account and the associated payment information. 16Shop is a complex phishing kit from a developer known as D...

Business email compromise (BEC) scammers are utilizing a new type of attack targeting investors that could leverage payouts seven times greater than average.