The self-propagating malware's attack chain is complex, using former NSA cyberweapons, and ultimately drops cryptominers on targeted machines. [...]

Kerry Matre, senior director at Mandiant, discusses the appropriate metrics to use to measure SOC and analyst performance, and how MTTR leads to bad behavior. [...]

Threat actors may have been duking it out for control of the compromised devices, first using a 2018 RCE, then password-protecting a new vulnerability. [...]

Enlarge Microsoft gave its digital imprimatur to a rootkit that decrypted encrypted communications and sent them to attacker-controlled servers, the company and outside researchers said. The blunder allowed the malware to be installed on Windows machines without users receiving a security warning or needing to take additional steps. For …

The return to offices, coupled with uninformed users (including IT pros) has teed up an unprecedented risk of enterprise attack. [...]

The legit security tool has shown up 161 percent more, year-over-year, in cyberattacks, having “gone fully mainstream in the crimeware world.” [...]

American IT companies and government have been targeted by the Nobelium state-sponsored group. [...]

The driver, called "Netfilter," is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers' geo-locations to cheat the system and play from anywhere, Microsoft said. [...]

Controversial antivirus software pioneer who entered US politics and became a fugitive from justice As the inventor of the antivirus software that bears his name, John McAfee, who has died aged 75 after apparently taking his own life in a Spanish prison, turned paranoia into a fortune. He was …

One of the Carbanak cybergang's highest-level hackers is destined to serve seven years while making $2.5 million in restitution payments. [...]

Threat actors have so far made about $2 million from Crackonosh, which secretly mines Monero cryptocurrency from affected devices. [...]

The primarily IcedID-flavored banking trojan spam campaigns were coming in at a fever pitch: Spikes hit more than 100 detections a day. [...]

The infamous ransomware group hit two big-name companies within hours of each other. [...]

Akamai's 2020 gaming report shows that cyberattacks on the video game industry skyrocketed, shooting up 340 percent in 2020. [...]

The LV ransomware operators likely used a hex editor to repurpose a REvil binary almost wholesale, for their own nefarious purposes. [...]

Enlarge (credit: Getty Images) Counterfeit packages downloaded roughly 5,000 times from the official Python repository contained secret code that installed cryptomining software on infected machines, a security researcher has found. The malicious packages, which were available on the PyPI repository, in many cases used names that mimicked those …

Wired is reporting on a company called Mollitiam Industries: Marketing materials left exposed online by a third-party claim Mollitiam’s interception products, dubbed “Invisible Man” and “Night Crawler,” are capable of remotely accessing a target’s files, location, and covertly turning on a device’s camera and microphone. Its …

These code bombs lurk in the PyPI package repository, waiting to be inadvertently baked into software developers' applications. [...]

Approximately 38,000 of RBA's customers had their embryology data stolen by a ransomware gang. [...]

What's the low-hanging fruit for ransomware attackers? What steps could help to fend them off, and what’s stopping organizations from implementing those steps? [...]

Rather than steal credentials or hold data for ransom, a recent campaign observed by Sophos prevents people from visiting sites that offer illegal downloads. [...]

Enlarge (credit: Getty Images ) A researcher has uncovered one of the more unusual finds in the annals of malware: booby-trapped files that rat out downloaders and try to prevent unauthorized downloading in the future. The files are available on sites frequented by software pirates. Vigilante, as SophosLabs Principal Researcher …

Cops arrest six, seize cars and cash in splashy raid, and experts are applauding. [...]

Meanwhile, in a separate survey, 80 percent of organizations that paid the ransom said they were hit by a second attack. [...]

Meanwhile, in a separate survey, 80 percent of organizations that paid the ransom said they were hit by a second attack. [...]