MikroTik botnet relies on DNS misconfiguration to spread malware

Researchers discovered a 13,000-device MikroTik botnet exploiting DNS flaws to spoof 20,000 domains and deliver malware. Infoblox researchers discovered a botnet of 13,000 MikroTik devices that exploits DNS misconfigurations to bypass email protections, spoof approximately 20,000 domains, and deliver malware. In late November, the experts spotted a malspam campaign impersonating DHL which used emails about […]

SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning

securityaffairs.co - 11/Feb 09:49

A new Linux botnet, SSHStalker, has infected about 7,000 systems using old 2009-era exploits, IRC bots, and mass-scanning malware. Flare researchers...

New Clickfix Exploit Tricks Users into Changing DNS Settings for Malware Installation

itsecuritynews.info - 14/Feb 18:34

A new evolution in the ClickFix social engineering campaign, which now employs a custom DNS hijacking technique to deliver malware. This attack method...

New Clickfix Exploit Tricks Users into Changing DNS Settings for Malware Installation

itsecuritynews.info - 14/Feb 18:34

A new evolution in the ClickFix social engineering campaign, which now employs a custom DNS hijacking technique to deliver malware. This attack method...

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

bleepingcomputer.com - 16/Feb 00:29

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as...

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

itsecuritynews.info - 18/Feb 07:36

A sophisticated new malware campaign named ‘CRESCENTHARVEST’ has surfaced, strategically exploiting the geopolitical unrest in Iran to target...

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

itsecuritynews.info - 18/Feb 07:36

A sophisticated new malware campaign named ‘CRESCENTHARVEST’ has surfaced, strategically exploiting the geopolitical unrest in Iran to target...

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

itsecuritynews.info - 18/Feb 20:34

Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize...

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

itsecuritynews.info - 18/Feb 20:34

Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize...

PromptSpy is the first known Android malware to use generative AI at runtime

bleepingcomputer.com - 19/Feb 22:36

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its...

PromptSpy is the first known Android malware to use generative AI at runtime

bleepingcomputer.com - 19/Feb 22:36

Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its...

Rubriques :

MikroTik botnet relies on DNS misconfiguration to spread malware

Articles similaires

SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning

New Clickfix Exploit Tricks Users into Changing DNS Settings for Malware Installation

New Clickfix Exploit Tricks Users into Changing DNS Settings for Malware Installation

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

PromptSpy is the first known Android malware to use generative AI at runtime

PromptSpy is the first known Android malware to use generative AI at runtime

Les derniers communiqués