Security News > 2020

xHelper: The Russian Nesting Doll of Android Malware
2020-04-07 17:06

The "Undeletable" xHelper malware - which ultimately results in the installation of the Triada trojan - has become a virulent scourge for Android devices this year, according to researcher analysis - bringing with it a hallmark of being virtually indestructible for the common user. According to analysis by Kaspersky, the latest sample of xHelper uses a Russian nesting-doll type architecture to worm its way into the heart of Android devices.

FIN6 and TrickBot Combine Forces in ‘Anchor’ Attacks
2020-04-07 16:57

Researchers say, two cybercriminal groups, FIN6 and the operators of the TrickBot malware, have paired up together to target several organizations with TrickBot's malware framework called "Anchor." "That said, this development places more enterprises at risk of an attack from ITG08, particularly those processing credit card data, by enabling the group to access networks infected by the TrickBot Trojan. The attacks are likely initiated through malicious spam campaigns, which is how TrickBot is typically delivered. Once an enterprise is infected with the TrickBot Trojan, we expect that access, along with use of the Anchor and PowerTrick malware, are then sold to ITG08, which will then take over the intrusion into the victim network."

How Has the Coronavirus Pandemic Impacted Cybersecurity Professionals?
2020-04-07 16:27

Increased phishing attacks have been widely reported throughout the media, but it seems from this survey that more than half of all IT/security professionals have experienced them at first hand. In recent separate research, Check Point found that new coronavirus-themed domains are 50% more likely to be malicious than other domains; and that in the early days of the pandemic there was a huge surge in the number of new domain registrations - almost 10 times the number in earlier weeks.

How to install and configure WireGuard VPN on Linux
2020-04-07 15:37

Sudo apt-get install wireguard -y. Once the VPN service is installed, you're ready to configure it. Interface] Address = SERVER IP SaveConfig = true ListenPort = 51820 PrivateKey = SERVER PRIVATE KEY [Peer] PublicKey = CLIENT PUBLIC KEY AllowedIPs = CLIENT IP. Where SERVER PRIVATE KEY is the string of characters you copied to your clipboard from the server, SERVER IP is the IP address of the hosting server, CLIENT PUBLIC KEY is the client public key, and CLIENT IP is the IP address of the client.

WhatsApp Tightens Sharing Limits to Curb Virus Misinformation
2020-04-07 15:35

WhatsApp on Tuesday placed new limits on message forwarding as part of an effort to curb the spread of misinformation about the coronavirus pandemic. The new policy limits users to forwarding certain messages to one "Chat" at a time, aiming to limit the rapid propagation of content which is provocative but likely to be false.

Cybersecurity During COVID-19
2020-04-07 15:00

One, employees are working from their home networks and sometimes from their home computers. Employees working from home are going to save data on their own computers, where they aren't protected by the organization's security systems.

Russian Telco Hijacked Internet Traffic of Major Networks - Accident or Malicious Action?
2020-04-07 14:58

A huge BGP hijack by Russian state telecommunications provider Rostelecom diverted the traffic from more than 200 networks - including Google, Amazon, Facebook and Cloudflare - to Russian servers on April 1. Internet traffic routes are managed by the Border Gateway Protocol, which controls the way in which internet traffic moves from one autonomous system network to the next on its way to its destination.

Cyberattacks on the rise since the start of the coronavirus outbreak
2020-04-07 14:41

Among the 411 IT and security professionals surveyed by Check Point and Dimensional Research, 71% said they've seen an increase in security threats or attacks since the start of the COVID-19 outbreak. Some 56% pointed to the task of securing remote access as the top challenge, 55% mentioned the need for remote access scalable solutions, and 47% pointed to remote workers finding and using untested tools and services.

Official Government COVID-19 Apps Hide a Raft of Threats
2020-04-07 13:55

A rash of COVID-19 Android mobile apps have emerged that are aimed at helping citizens in Iran, Italy and Colombia track symptoms and virus infections. Researchers analyzed dozens of COVID-19 apps - which continue to emerge with the spread of the coronavirus, paving the way for related security threats across the globe.

Healthcare Cybersecurity Firm CyberMDX Raises $20 Million
2020-04-07 13:48

New York-based healthcare cybersecurity firm CyberMDX on Tuesday announced that it has raised $20 million in a growth round, which brings the total raised by the company to date to $30 million. The funding round was led by Sham, which is Europe's biggest insurance and risk management services provider for healthcare.