-
February 21, 2019
We Are In The Wrong Business. Cyber Extortionists Make $360K A Year.
Extortion scams capitalize on compromised credentials, sensitive data, and technical vulnerabilities on Internet-facing applications to pressure victims to pay up.
Read Post -
February 21, 2019
The lazy person’s guide to cybersecurity: minimum effort for maximum protection
Are you tired of that acquaintance who keeps bugging you with computer questions? Do you avoid visiting certain people because you know you will spend most of the evening cleaning…
Read Post -
February 21, 2019
How does macOS protect against malware?
Mac users often are told that “Macs don’t get viruses.” This is not really true, of course. Macs can and do get infected. However, it is true that macOS provides…
Read Post -
February 20, 2019
Sophisticated phishing: a roundup of noteworthy campaigns
Phishing is a problem nearly as old as the Internet. Yet, criminals continue to reach into their bag of phishing tricks in 2019 because, in a nutshell, it just works….
Read Post -
February 20, 2019
Good bots, bad bots: friend or foe?
One of the most talked about technologies online today is the ubiquitous bot. Simultaneously elusive yet also responsible for all of civilisation’s woes, bots are a hot topic of contention….
Read Post -
February 18, 2019
A week in security (February 11 – 17)
Last week on Malwarebytes Labs we discussed the return of the Sextortion Bitcoin scams, we gave you an early overview of the exploit kits in the winter of 2019, we…
Read Post -
February 18, 2019
Crack hunting: not all it’s cracked up to be
People sometimes ask us in the forums if a keygen or software crack is safe to use. Sometimes, these programs do what they say on the tin. Other times, they’re…
Read Post -
February 18, 2019
A Deep Dive on the Recent Widespread DNS Hijacking Attacks
The U.S. government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to…
Read Post -
February 17, 2019
8-Character Windows NTLM Passwords Can Be Cracked In Under 2.5 Hours
BeauHD posted in Slashdot: “HashCat, an open-source password recovery tool, can now crack an eight-character Windows NTLM password hash in less than 2.5 hours.
“Current password cracking benchmarks show that the minimum eight character password, no matter how complex, can be cracked in less than 2.5 hours” using a hardware rig that utilizes eight Nvidia GTX 2080Ti GPUs, explained a hacker who goes by the pseudonym Tinker on Twitter in a DM conversation with The Register. “The eight character password is dead.” From the report: It’s dead at least in the context of hacking attacks on organizations that rely on Windows and Active Directory.
Read Post -
February 15, 2019
Iran indictments show even U.S. intelligence officials are vulnerable to basic phishing schemes
As the story broke about the charges against former U.S. Air Force intelligence specialist who defected to Iran and support targeted hacking against some of her former colleagues, one clear takeaway stood out: even U.S. intelligence officers can fall victim to basic, directed hacking campaigns.
Read Post -
February 15, 2019
Tackling the shortage in skilled IT staff: whole team security
Is your IT department understaffed, overworked, and are you looking for reinforcements in vain? Maybe these hard-to-hire reinforcements can be hired from within, rather than having to outsource or hire…
Read Post -
February 14, 2019
Should you delete yourself from social media?
You’re feeling like you’ve had enough. All the recent news—from Facebook’s Cambridge Analytica snafu to various abuses of Twitter vulnerabilities—has you wondering: Should I delete myself from social media? Social…
Read Post -
February 14, 2019
Hacker destroys VFEmail service, wipes backups
An email service called VFEmail was essentially put out of business after a hack intended to delete everything in (and out of) sight. “Yes, @VFEmail is effectively gone. It will likely…
Read Post -
February 13, 2019
Bomb Threat Hoaxer Exposed by Hacked Gaming Site
Federal authorities this week arrested a North Carolina man who allegedly ran with a group of online hooligans that attacked Web sites (including this one), took requests on Twitter to…
Read Post -
February 13, 2019
New York State Education Department Proposes New Regulations to Strengthen PII Security
The new proposed amendments seek to protect the personally identifiable information for students and school personnel accessible by both educational agencies and contractors.
Read Post
