Security News

MyEtherWallet users robbed after successful DNS hijacking attack
2018-04-25 20:00

Unknown attackers have managed to steal approximately $150,000 in Ethereum from a number of MyEtherWallet (MEW) users, after having successfully redirected them to a phishing site posing as...

Android Trojan Spreads via DNS Hijacking
2018-04-17 13:03

An Android Trojan masquerading as popular mobile applications is propagating via smartphones roaming between Wi-Fi networks, Kaspersky Lab warns. read more

Hijacking Emergency Sirens
2018-04-17 11:29

Turns out it's easy to hijack emergency sirens with a radio transmitter....

Hijacking Computers for Cryptocurrency Mining
2018-03-21 11:27

Interesting paper "A first look at browser-based cryptojacking": Abstract: In this paper, we examine the recent trend towards in-browser mining of cryptocurrencies; in particular, the mining of...

GitLab Patches Domain Hijacking Vulnerability
2018-02-23 12:30

Open source Git repository management system GitLab has addressed a security hole that could have been exploited to hijack users’ custom domains and point them to malicious content. GitLab Pages...

Warning: New Undetectable DNS Hijacking Malware Targeting Apple macOS Users
2018-01-12 17:48

A security researcher has revealed details of a new piece of undetectable malware targeting Apple's Mac computers—reportedly first macOS malware of 2018. Dubbed OSX/MaMi, an unsigned Mach-O 64-bit...

Free Tool Detects, Exploits DLL Hijacking Vulnerabilities
2017-10-04 16:05

DLL hijacking is not a new attack vector. It's been around for 20 years or more. It's not easy, but it's very effective. Once achieved it provides stealth and persistence -- precisely those...

Session Hijacking Bug Exposed GitLab Users Private Tokens (Threatpost)
2017-08-31 21:00

GitLab, the popular web-based Git repository manager, fixed a vulnerability recently that could have opened its users up to session hijacking attacks.

Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks (Threatpost)
2017-08-30 17:11

Siemens fixed a session hijacking vulnerability in its LOGO! logic module Wednesday but says a second issue, one that could help facilitate a man-in-the-middle attack, has no fix currently.

Signed Mughthesec Adware Hijacking Macs for Profit (Threatpost)
2017-08-09 18:25

Mughthesec, a variant of the OperatorMac adware, has been turning hijacked Macs into revenue-generating machines for the authors.