||||The.Fischerman.CH

In our latest research, we can see the attackers behind Hancitor have been timing their attacks to happen during the busiest time of the global working week, the middle of the week. And we’ve seen that in adapting their attacks to better evade detection, they’ve specialized their operations around the globe.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

13 Festnahmen in sechs Ländern und insgesamt 36 Angeklagte aus 18 Ländern: Die Strafverfolger haben einen transnationalen Ring von Kriminellen ausgehoben, der über die Plattform Infraud Betrügereien und Identitätsdiebstahl organisierte.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye. But options to add your custom targets and host lists have been included as well. The available Metasploit modules have been selected to facilitate Remote Code Execution and to attempt to gain Reverse TCP Shells and/or Meterpreter sessions. Workspace, local host and local port for MSF facilitated back connections are configured by filling out the dialog that comes up before the exploit component is started

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Palo Alto Networks Unit 42 has observed a large-scale cryptocurrency mining operation that has been active for over 4 months. The operation attempts to mine the Monero cryptocurrency using the open-source XMRig utility.
Based on publicly available telemetry data via bitly, we are able to estimate that the number of victims affected by this operation is roughly around 15 million people worldwide. This same telemetry provides insights into the most heavily targeted areas involving this campaign, which impacts southeast Asia, northern Africa, and South America the most.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Security researchers have discovered a nasty pair of Chrome and FireFox extensions that can hijack browsers, spy on users’ browsing activities and are nearly impossible to get rid of manually. According to researchers at Malwarebytes, the new malicious extension called “Tiempo en colombia en vivo” was found lurking in both the popular browsers.

Source ->

— the.Fischerman.ch
(@FischermanCH)