Share ESET researchers release new findings about malware linked to the Ke3chang APT group, including details about Okrum, a previously unreported backdoor ESET researchers release new findings about malware linked to the elusive Ke3chang APT group, including details about a previously unreported backdoor that they named Okrum. There are still over 800,000 internet-facing systems that […]
With FaceApp in the spotlight, new scams emerge
ESET researchers discover fraudulent schemes piggybacking on the popularity of the face-modifying tool FaceApp, using a fake “Pro” version of the application as a lure The latest hype around the FaceApp application has attracted scammers who want to make a quick profit. The FaceApp application, which offers various face-modifying filters, is available for both Android […]
A new Equation Editor exploit goes commercial, as maldoc attacks using it spike
There is a distinct point of maturation in the life cycle of an Office exploit: the point where it becomes generally available for the crimeware groups. Before that point the exploit has affected only a few selected victims of targeted attacks. From that point on it becomes widespread and threatens the general user population. CVE-2018-0798, […]
Okrum: Ke3chang group targets diplomatic missions
Tracking the malicious activities of the elusive Ke3chang APT group, ESET researchers have discovered new versions of malware families linked to the group, and a previously unreported backdoor In this blogpost, we will sum up the findings published in full in our white paper “Okrum and Ketrican: An overview of recent Ke3chang group activity“. The […]
BlueKeep patching isn’t progressing fast enough
Keeping up with BlueKeep; or how many internet-facing systems, and in which countries and industries, remain ripe for exploitation? As of early July, more than 805,000 internet-facing systems remained susceptible to the BlueKeep security vulnerability, the news of which spooked the internet two months ago and prompted a flurry of alerts urging users and organizations […]
How your Instagram account could have been hijacked
A researcher found that it was possible to subvert the platform’s password recovery mechanism and take control of user accounts The post How your Instagram account could have been hijacked appeared first on WeLiveSecurity