Keylogger injection campaign covered 2000 WordPress-sites
Keylogger injection campaign covered 2000 WordPress-sites
The experts found that after the closure of the malicious website cloudflare [.] Solutions, with which hackers downloaded the cryptomayer Coinhive and later Keylogger on hacked WordPress sites, hackers registered three new domain names.
According to PublicWWW, at the moment, ...
The Firefox browser will mark websites that were previously hacked
Firefox will get a useful feature
The developers of Firefox are working on a new feature that will warn you if you visit a site that has been attacked by hackers.
Information for notifications web browser will be taken from the ...
Announced new security features of Chrome, the engine ESET among them
Yesterday, Googleinfo-icon announced three new security features of the Chrome browser
The features which will help to detect and combat malicious extensions and programs.
First of all, Chrome will detect the addition of changes to the user’s default settings. These include ...
Security of Java applications at a low level
Veracode has released a report on the state of application security for the period from April 1, 2016 to March 31, 2017. The new statistics are based on the analysis of about 250 billion lines of code obtained during 400 ...
Google Play again found the malware that integrated infected devices into an advertising botnet
Experts at Symantec found in the applications from Google Play malware Sockbot
Experts at Symantec found in the applications from Google Play malware Sockbot, which combined infected devices into a botnet. As a result, in early October 2017, eight programs ...
Google started a reward program for finding a vulnerabilities in Play Store applications
A well-known proverb says: “better late than never”. This is exactly the case with GOOGL’s latest decision.
As you may know, a variety of malware and “problem” applications are found in the official directory of Google Play. Apparently, neither automated control ...
The Chrome Web Store removed the Adblock Plus clone
Before Google noticed an error, the extension was downloaded by about 37 thousand users
The extension, imitating a popular tool for blocking Adblock Plus ads, was posted on the Chrome Web Store. Before Google noticed the error, the extension was ...
LINUX KERNEL FIXES A TWO YEAR OLD VULNERABILITY
The problem allowed obtaining a superuser rights on the system
Linux kernel eliminates the dangerous privilege vulnerability found more than two years ago. The problem was discovered by a Google employee Michael Davidson in April 2015 and wad fixed in ...
The WordPress plugin “Display Widgets” distributes malware
The plug-in “Display Widgets”, numbering more than 200 thousand installations, was finally removed from the plug-ins directory to WordPress after a series of incidents, which resulted in the substitution of malicious code for new releases.
This code was a backdoor allowing ...
The Cerber cipher steals data from cryptocurrency wallets
Last spring, Malwarebytes researchers reported that the encryptor Cerber managed to capture the leadership in the black market, and this was largely due to the transition of the malware to the RaaS (Ransomware-as-a-Service) model and the regular appearance of new ...
During the hacking of OneLogin thousands of users were affected
OneLogin Hacked
The popular provider of single sign-on solutions, OneLogin, suffered a hacker attack. Then it was reported that unknown intruders managed to get unauthorized access to data on the American region.
Representatives of the company explained that the burglars ...
Researchers found a new vulnerability in the Open VPN, which was missed by two teams of auditors
Vulnerability in OpenVPN
Two independent audit teams completed the verification of one of the most popular VPN clients today – OpenVPN. The researchers did not find any serious problems in the OpenVPN, and all small defects found by them were ...
Found new a Malware that steals logins and passwords from Popular Browsers
The multifunctional Trojan.DownLoader23.60762
The multifunctional Trojan.DownLoader23.60762, which steals logins and passwords from popular browsers, was told in the anti-virus company Doctor Web.
A virus that infects Windows computers installs other applications on the device, and also steals account data from various ...
Google tightens the rules for using OAuth to fight fraudsters
In early May, 2017, unknown anonimus hackers launched a very unusual phishing campaign against Gmail users. The attackers exploited legitimate Google services and functions, masking their activity under links to Google Docs documents. Malicious emails using scammers to gain access ...
More than 300 fake phishing websites of British banks were found
Phishing websites of British banks were found
DomainTools has discovered more than 300 fake bank websites posing as official websites of the largest financial institutions of Great Britain, says the correspondent of Banki.ru in Brussels.
According to the company’s report, 110 ...