Page 6 - Malware Removal News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Google Chrome to block port 554 to stop NAT Slipstreaming attacks By 01:21 PM Google Chrome will block the browser's access to TCP port 554 to protect against attacks using the NAT Slipstreaming 2.0 vulnerability. Last year, security researchers disclosed a new version of the NAT Slipstreaming vulnerability that allows malicious scripts to bypass a website visitor's NAT firewall and access any TCP/UDP port on the visitor's internal network. Illustration of the NAT Slipstreaming 2.0 attack As this vulnerability only works on specific ports monitored by a router's Application Level Gateway...

Ransomware gang plans to call victim's business partners about attacks By 12:47 PM The REvil ransomware operation announced this week that they are using DDoS attacks and voice calls to journalists and victim's business partners to generate ransom payments. The REvil ransomware operation, also known as Sodinokibi, is a ransomware-as-a-service (RaaS) where the ransomware operators develop the malware and payment site, and affiliates (adverts) compromise corporate networks to deploy the ransomware. As part of this deal, the REvil developers earn between 20-30% of ransom payments, and the affil...

SolarWinds reports $3.5 million in expenses from supply-chain attack By SolarWinds has reported expenses of $3.5 million from last year's supply-chain attack, including costs related to incident investigation and remediation. Further expenses were recorded by SolarWinds after paying for legal, consulting, and other professional services related to the December hack and provided to customers for free. Additional costs expected While $3.5 million doesn't seem too much compared to the aftermath of the SolarWinds supply-chain attack, the incurred expenses reported so far were recorded through De...

Cash App phishing kit deployed in the wild, courtesy of 16Shop By 03:29 AM The developer of the 16Shop phishing platform has added a new component that targets users of the popular Cash App mobile payment service. Deployment of the new 16Shop product started as soon as it became available, luring potential victims into providing sensitive details that would give fraudsters access to the account and the associated payment information. 16Shop is a complex phishing kit from a developer known as DevilScream, who set up a protection mechanism against unlicensed use and research activity. The kit ...

Business email compromise (BEC) scammers are utilizing a new type of attack targeting investors that could leverage payouts seven times greater than average.