Oktacron - Cyber Security RSS Feeds History

SolarWinds CEO Confirms Office 365 Email ‘Compromise’ Played Role In Broad-Based Attack

cyware Feb 06, 2021 Incident Response, Learnings

SolarWinds CEO Sudhakar Ramakrishna verified this week “suspicious activity” in its Office 365 environment allowed hackers to gain access to and exploit the SolarWinds Orion development environment.

Unpatched WordPress Plugin Code-Injection Bug Afflicts 50K Sites

cyware Feb 06, 2021 Malware and Vulnerabilities

A security vulnerability in the Contact Form 7 Style, a WordPress plugin installed on over 50,000 websites, could allow for malicious JavaScript injection on a victim website.

Google Firebase hosts Microsoft Office phishing attack

cyware Feb 06, 2021 Threat Intel & Info Sharing

A phishing attack recently uncovered by researchers pretends to share information about an EFT by offering up a link to download an HTML invoice that then loads to a page with Microsoft Office branding that’s hosted on Google Firebase.

Hackers post detailed patient medical records from two hospitals to the dark web

cyware Feb 06, 2021 Breaches and Incidents

Hackers have published extensive patient information from two U.S. hospital chains in an apparent attempt to extort them for money. The files also include at least tens of thousands of scanned diagnostic results and letters to insurers.

FBI leaned on Dutch cops' hacking in Emotet disruption

cyware Feb 06, 2021 Laws, Policy, Regulations

The U.S. and European law enforcement agencies last week conducted an extraordinary crackdown on Emotet, a botnet of infected computers that has defrauded victims of millions.

Google Chrome sync feature can be abused for C&C and data exfiltration

cyware Feb 06, 2021 Threat Intel & Info Sharing

Threat actors have discovered they can abuse the Google Chrome sync feature to send commands to infected browsers and steal data from infected systems, bypassing traditional firewalls and other network defenses.

Exploits in the Wild for WordPress File Manager RCE Vulnerability (CVE-2020-25213)

cyware Feb 06, 2021 Malware and Vulnerabilities

Successful exploitation of this vulnerability allows an attacker to upload an arbitrary file with arbitrary names and extensions, leading to Remote Code Execution (RCE) on the targeted web server.

Researchers find financial ties between notorious ransomware gangs

cyware Feb 06, 2021 Threat Actors

The number of ransomware strains that lock up systems throughout the global internet might suggest an immeasurable number of independent hackers are plundering victims’ data.

Webdev tutorials site SitePoint discloses data breach

cyware Feb 06, 2021 Breaches and Incidents

SitePoint, a website that provides access to a wealth of web development tutorials and books, has disclosed a security breach this week in emails sent to some of its users.

Microsoft Tailing Dynamically Generated Email Infrastructure

cyware Feb 06, 2021 Trends, Reports, Analysis

Microsoft digs into emerging email infrastructure, consisting of two segments named StrangeU and RandomU, that send over a million malware-laden emails each month.

Ransomware Attacks Now a Million Dollar Enterprise

cyware Feb 06, 2021 Trends, Reports, Analysis

Chainalysis tracked million worth of bitcoin transactions related to ransomware attacks and discovered that a sizable chunk usually ends up with actors at the top of the pyramid.

Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks

thehackernews Feb 06, 2021 Feed

A new distributed denial-of-service attack (DDoS) vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline. "Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it can be abused to generate reflection/amplification DDoS attacks," Netscout researchers said in a

WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware