Network Security Research Lab News Today

The threat actor behind the Fodcha distributed denial-of-service (DDoS) botnet has resurfaced with new capabilities, researchers reveal.

Major security bugs are a long-term threat: Here's why and what's next - SiliconANGLE

A recently discovered botnet is infecting thousands of AT&T internet subscribers in the U.S., using a critical-severity blind command injection flaw first reported

A recently discovered botnet is infecting thousands of AT&T internet subscribers in the U.S., using a critical-severity blind command injection flaw first reported

10 March 2021, 3:23 am EST By Crypto mining malware continue their attack on the Network-Attached Storage (NAS) NAS are products of QNAP, a popular Taiwanese storage manufacturer. It is similar to an external storage device that can be expandable up to 16 Terabytes. The researchers first discovered the malware at Qihoo 360s Network Security Research Lab (360 Netlab). The attack happens in two segments. The attacker gains control of the QNAP device and runs arbitrary commands. 360 Netlab report...

Z0Miner struck last year when Tencent Security tracked the malware exploiting two WebLogic pre-auth RCE bugs tracked as CVE-2020-14882 and CVE-2020-14883. At the time, the team of security analysts estimated the miner compromised around 5,000 servers by sending "carefully constructed data packets" to the vulnerable systems. The malware also moved laterally via SSH.  Before that, Oracle had already issued a security bulletin warning of vulnerabilities in WebLogic components. At the time, resea...