malware – Page 13 – SSL and internet security news

The Future of Ransomware

May 23, 2017 infossl

backups, extortion, internetofthings, malware, nsa, patching, ransomware, Security technology

Ransomware isn’t new, but it’s increasingly popular and profitable. The concept is simple: Your computer gets infected with a virus that encrypts your files until you pay a ransom. It’s extortion taken to its networked extreme. The criminals provide step-by-step instructions on how to pay, sometimes even offering a help line for victims unsure how … Read More “The Future of Ransomware” »

Did North Korea Write WannaCry?

May 16, 2017 infossl

malware, northkorea, nsa, ransomware, Security technology

The New York Times is reporting that evidence is pointing to North Korea as the author of the WannaCry ransomware. Note that there is no proof at this time, although it would not surprise me if the NSA knows the origins of this malware attack. Powered by WPeMatico

Jumping Airgaps with a Laser and a Scanner

April 28, 2017 infossl

academicpapers, airgaps, drones, malware, Security technology

Researchers have configured two computers to talk to each other using a laser and a scanner. Scanners work by detecting reflected light on their glass pane. The light creates a charge that the scanner translates into binary, which gets converted into an image. But scanners are sensitive to any changes of light in a room … Read More “Jumping Airgaps with a Laser and a Scanner” »

The DEA Is Buying Cyberweapons from Hacking Team

April 20, 2017 infossl

cyberweapons, dea, foia, hacking, malware, Security technology, zeroday

The US Drug Enforcement Agency has purchased zero-day exploits from the cyberweapons arms manufacturer Hacking Team. BoingBoing post. Powered by WPeMatico

Research on Tech-Support Scams

April 12, 2017 infossl

academicpapers, malware, scams, Security technology

Interesting paper: “Dial One for Scam: A Large-Scale Analysis of Technical Support Scams“: Abstract: In technical support scams, cybercriminals attempt to convince users that their machines are infected with malware and are in need of their technical support. In this process, the victims are asked to provide scammers with remote access to their machines, who … Read More “Research on Tech-Support Scams” »

New Destructive Malware Bricks IoT Devices

April 11, 2017 infossl

denialofservice, internetofthings, malware, Security technology

There’s a new malware called BrickerBot that permanently disables vulnerable IoT devices by corrupting their storage capability and reconfiguring kernel parameters. Right now, it targets devices with open Telnet ports, but we should assume that future versions will have other infection mechanisms. Slashdot thread. Powered by WPeMatico

APT10 and Cloud Hopper

April 5, 2017 infossl

china, cyberespionage, espionage, malware, Security technology

There’s a new report of a nation-state attack, presumed to be from China, on a series of managed ISPs. From the executive summary: Since late 2016, PwC UK and BAE Systems have been assisting victims of a new cyber espionage campaign conducted by a China-based threat actor. We assess this threat actor to almost certainly … Read More “APT10 and Cloud Hopper” »

Using Intel's SGX to Attack Itself

March 16, 2017 infossl

academicpapers, cryptography, intel, keys, malware, Security technology

Researchers have demonstrated using Intel’s Software Guard Extensions to hide malware and steal cryptographic keys from inside SGX’s protected enclave: Malware Guard Extension: Using SGX to Conceal Cache Attacks Abstract:In modern computer systems, user processes are isolated from each other by the operating system and the hardware. Additionally, in a cloud scenario it is crucial … Read More “Using Intel's SGX to Attack Itself” »

The CIA's “Development Tradecraft DOs and DON'Ts”

March 13, 2017 infossl

cia, cryptography, encryption, hacking, malware, Security technology, tradecraft

Useful best practices for malware writers, courtesy of the CIA. Seems like a lot of good advice. General: DO obfuscate or encrypt all strings and configuration data that directly relate to tool functionality. Consideration should be made to also only de-obfuscating strings in-memory at the moment the data is needed. When a previously de-obfuscated value … Read More “The CIA's “Development Tradecraft DOs and DON'Ts”” »

Category: malware