Page 19 - Web Security News Today : Breaking News, Live Updates & Top Stories | Vimarsana

minute read Share this article: Surveillance footage from companies such as Tesla as well as hospitals, prisons, police departments and schools was accessed in the hack. Hackers claim to have breached Silicon Valley startup Verkada to gain unauthorized access to live feeds of 150,000 security cameras. They claim, the hack gave them widespread access to surveillance footage within companies such as Tesla and Cloudflare, as well as hospitals, companies, law-enforcement departments, schools and prisons. The group provided video footage from cameras managed by San Mateo, Calif.-based...

minute read Share this article: Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike. The TA800 threat group is distributing a malware loader, which researchers call NimzaLoader, via ongoing, highly-targeted spear-phishing emails. While previous Twitter analysis identified this loader as a mere variant of TA800’s existing BazaLoader malware, new research cites evidence that NimzaLoader is a disparate strain — with its own separate string-decryption methods and hashing algorithm techniques. The malware loader...

minute read Share this article: The security hole in the Plus Addons for Elementor plugin was used in active zero-day attacks prior to a patch being issued. The Plus Addons for Elementor plugin for WordPress has a critical security vulnerability that attackers can exploit to quickly, easily and remotely take over a website. First reported as a zero-day bug, researchers said it’s being actively attacked in the wild. The plugin, which has more than 30,000 active installations according to its developer, allows site owners to create various user-facing widgets for their websites, ...

A hybrid Monero cryptominer and ransomware bug has hit 20,000 machines in 60 days. At its previous peak in February, the Monero Miner cryptocurrency ransominer was targeting more than 2,500 users a day, disguised as an antivirus installer. Now, the tricky hybrid malware is on the rise again, this time impersonating an ad blocker and OpenDNS service. In total, it has infected more than 20,000 users in less than two months, researchers at Kaspersky warned, in a report on Wednesday. Ransomining lets threat actors take over computing power to mine cryptocurrency — in this case Monero — and al...

minute read Share this article: A never-before-seen malware-dropper, Clast82, fetches the AlienBot and MRAT malware in a savvy Google Play campaign aimed at Android users. A malware dropper that paves the way for attackers to remotely steal data from Android phones has been spreading via nine malicious apps on the official Google Play store, according to researchers. The malware is part of a campaign aimed at lifting victims’ financial information, but which also allows eventual takeover of mobile phones, according to Check Point Research. The dropper, dubbed Clast82, was disgu...