Weekly #cybersecurity digest to your inbox

Email Server of Special Olympics of New York Hacked; Later Used To Launch a Phishing Campaign

Go to article at

15.5.2020

Phishing

New Linux Vulnerability Lets Attackers Hijack VPN Connections

Security researchers found a new vulnerability allowing potential attackers to hijack VPN connections on affected *NIX devices and inject arbitrary data payloads into IPv4 and IPv6 TCP streams. [...]

Go to article at

15.5.2020

Unpatched Vulnerabilities

Emotet Uses Coronavirus Scare to Infect Japanese Targets

A malspam campaign is actively distributing Emotet payloads via emails that warn the targets of Coronavirus infection reports in various prefectures from Japan, including Gifu, Osaka, and Tottori. [...]

Go to article at

15.5.2020

Malware

DOD contractor suffers ransomware infection

Virginia-based EWA has had systems infected with the Ryuk ransomware.

Go to article at

15.5.2020

Ransomware

Computer systems at University of Kentucky and UK HealthCare hobbled by massive, month-long cyber attack

Alex Acquisto reports: The University of Kentucky and UK HealthCare conducted a major reboot of their computer systems early...

Go to article at

15.5.2020

Malware

TrickBot Now Steals Windows Active Directory Credentials

A new module for the TrickBot trojan has been discovered that targets the Active Directory database stored on compromised Windows domain controllers. [...]

Go to article at

15.5.2020

Insider Attacks

Severe Auth Bypass and Priv-Esc Vulnerabilities Disclosed in OpenBSD

OpenBSD, an open-source operating system built with security in mind, has been found vulnerable to four new high-severity security vulnerabilities, one of which is an old-school type authentication bypass vulnerability in BSD Auth framework. Here's a brief explanation of all four security vulnerabilities in OpenBSD—a free and open-source BSD-based Unix-like operating system—along with their assigned CVE identifiers The authentication bypass vulnerability resides in the way OpenBSD's authentication framework parses the username supplied by a user while logging in through smtpd, ldapd, radiusd, su, or sshd services. Using this flaw, a remote attacker can successfully access vulnerable services with any password just by entering the username as "-schallenge" or "-schallenge: passwd," and it works because a hyphen (-) before username tricks OpenBSD into interpreting the value as a command-line option and not as a username.

Go to article at

15.5.2020

Unpatched Vulnerabilities

RDP and VPN use skyrocketed since coronavirus onset

The use of remote access technologies like RDP (Remote Desktop Protocol) and VPN (Virtual Private Network) has skyrocketed 41% and 33%, respectively, since the onset of the COVID-19 outbreak.

Go to article at

15.5.2020

Man-in-the-Middle Attacks

Fake Tech Support Company Dupes 40K Victims Out of $8 Million

A college drop-out has admitted using malware and a fake tech support company to con 40,000 victims out of millions of dollars.

Go to article at

15.5.2020

Phishing