MikroTik botnet relies on DNS misconfiguration to spread malware

Researchers discovered a 13,000-device MikroTik botnet exploiting DNS flaws to spoof 20,000 domains and deliver malware. Infoblox researchers discovered a botnet of 13,000 MikroTik devices that exploits DNS misconfigurations to bypass email protections, spoof approximately 20,000 domains, and deliver malware. In late November, the experts spotted a malspam campaign impersonating DHL which used emails about […]

Phishing Schemes Abuse .arpa TLD and IPv6 Tunnels to Evade Detection

itsecuritynews.info - 28/Feb 16:07

Cybersecurity researchers at Infoblox Threat Intel have uncovered a highly sophisticated phishing campaign that exploits the foundational plumbing of...

Phishing Schemes Abuse .arpa TLD and IPv6 Tunnels to Evade Detection

itsecuritynews.info - 28/Feb 16:07

Cybersecurity researchers at Infoblox Threat Intel have uncovered a highly sophisticated phishing campaign that exploits the foundational plumbing of...

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

bleepingcomputer.com - 16/Feb 00:29

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as...

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

itsecuritynews.info - 18/Feb 07:36

A sophisticated new malware campaign named ‘CRESCENTHARVEST’ has surfaced, strategically exploiting the geopolitical unrest in Iran to target...

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

itsecuritynews.info - 18/Feb 07:36

A sophisticated new malware campaign named ‘CRESCENTHARVEST’ has surfaced, strategically exploiting the geopolitical unrest in Iran to target...

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

itsecuritynews.info - 18/Feb 20:34

Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize...

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

itsecuritynews.info - 18/Feb 20:34

Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize...

Aeternum botnet hides commands in Polygon smart contracts

securityaffairs.co - 27/Feb 20:19

Aeternum botnet uses Polygon blockchain smart contracts for C&C, making its infrastructure harder to detect and disrupt. Qrator Labs researchers...

PromptSpy is the first known Android malware to use generative AI at runtime

bleepingcomputer.com - 19/Feb 22:36

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its...

PromptSpy is the first known Android malware to use generative AI at runtime

bleepingcomputer.com - 19/Feb 22:36

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its...

Rubriques :

MikroTik botnet relies on DNS misconfiguration to spread malware

Articles similaires

Phishing Schemes Abuse .arpa TLD and IPv6 Tunnels to Evade Detection

Phishing Schemes Abuse .arpa TLD and IPv6 Tunnels to Evade Detection

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

Aeternum botnet hides commands in Polygon smart contracts

PromptSpy is the first known Android malware to use generative AI at runtime

PromptSpy is the first known Android malware to use generative AI at runtime

Les derniers communiqués