Cyber World News

Romanian police forces have arrested two individuals this week, for allegedly running two malware crypting services like CyberSeal and DataProtector to escape antivirus software detection. These services were purchased by quite 1560 criminals and used for crypting several different types of malware, including Remote Access Trojans, Information stealers, and Ransomware. The pair used the Cyberscan service also which allowed their clients to test their malware against antivirus tools. How do Criminals Bypass Antivirus Software? Generally, hackers bypass antivirus detection through the utilization of crypters that encrypt or hide the primary code in a piece of software, usually malware to pretend to be something harmless until it gets installed on the victim’s device. In this case, the services provided by these two suspects fall into a similar category and are offered for sale in the underground criminal market since 2010. Their clients paid between US$40 to US$300 for these crypting ser...

  The source code for Microsoft’s Windows XP operating system (and other versions) has been leaked online!  Published as a torrent file on bulletin board website 4chan, the 43GB data dump is said to have been compiled over the course of the last few months by the leaker. The collection also includes source code for Windows 2000 and multiple versions of Windows CE, MS DOS, Windows Embedded and Windows NT - but all of which have a smaller modern install base than XP. The individual responsible for the leak also appears to bear Bill Gates a distinct grudge, dedicating a whole section of the torrent file to videos slandering the Microsoft founder.  The legitimacy of the leaked code has not yet been confirmed, but Microsoft has been made aware of the issue. Although support for Windows XP lapsed in 2014 - meaning the OS has not received security updates for a number of years - a surprising number of users remain loyal to the outdated operating system. As of last month, 1.26% o...

WhatsApp disclosed 6 security bugs through their dedicated security advisory site that allows attackers to execute remote code. WhatsApp is a messaging app used by more than two billion users around the world. All the vulnerabilities are disclosed in dedicated security advisory site aimed to provide more transparent details about vulnerabilities for users and security professionals. “We take the security of our users very seriously and we provide industry-leading protection for our users around the world. Our security team at WhatsApp works with experts around the world to stay ahead of potential threats,” reads the blog post. 6 Security WhatsApp Bugs CVE-2020-1894 – A stack write overflow Bug in WhatsApp Business for Android CVE-2020-1891 -A user controlled parameter used in video call in WhatsApp for Android CVE-2020-1890 – A URL validation issue in WhatsApp for Android CVE-2020-1889 – security feature bypass issue in WhatsApp Desktop versions CVE-2020-1886 – A buffer overflow in Wha...

Cisco warned users that the hackers actively exploited a bug in carrier-grade-routers, and it was a zero-day vulnerability affecting the Internetwork Operating System (IOS) that boats with its networking devices.  The security experts termed the vulnerability as CVE-2020-3566, and it affects the Distance Vector Multicast Routing Protocol (DVMRP) feature of its operating system. Cisco’s IOS XR Network OS is disposed of various router programs, which include NCS 540 & 560, NCS 5500, 8000, and ASR 9000 series routers. And till now, Cisco hasn’t issued any software update for this vulnerability. Flaw Details Advisory ID: cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz First issued: 2020 August 29 Last updated: 2020 August 31 Version 2.0: Interim Workarounds: No workarounds  CVE IDs: CVE-2020-3566, CVE-2020-3569 Cisco Bug IDs: CSCvr86414, CSCvv54838 CWE ID: CWE-400 CVSS Score: Base 8.6 Affected Products These vulnerabilities attack any Cisco device that is operating any release of Cisco I...

US hard liquor giant Brown-Forman is the latest high-profile victim of ransomware criminals. Even if the company’s name doesn’t ring a bell, some of its products are well-known to spirits drinkers worldwide: Brown-Forman is a multi-billion dollar business that owns Jack Daniel’s whiskey, Finlandia vodka, and other global brands. It’s a multi-billion dollar business, headquartered in Louisville, Kentucky – a US state that’s famous for American whiskey, better known as bourbon – and you can see why today’s big-money ransomware crooks might go after a company of that size and sort. According to the business media site Bloomberg, which claims to have received an anonymous tip-off from the crooks behind the attacks, the ransomware crooks involved are the infamous REvil or Sodinokibi gang. The REVil crew make up one of what you might call a “new wave” of ransomware operators who practice three-stage attacks that end in double-barrelled blackmail: First, they break into a victim’s network and...

  BREAKING: Massive hack hits Reddit. A massive hack has hit Reddit today after tens of Reddit channels have been hacked and defaced to show messages in support of Donald Trump's reelection campaign. The hacks are still ongoing at the time of writing, but we were told Reddit's security team is aware of the issue and has already begun restoring defaced channels. A partial list of impacted channels (subreddits) is available below. This includes Reddit channels for the NFL, many TV shows, The Pirate Bay, Disneyland, Disney's Avengers, several city channels, and more. Combined, the channels have tens of millions of subscribers. r/NFL r/CFB  (US College Football) r/TPB (The Pirate Bay's Reddit channel) r/BlackMirror  (TV show) /r/Buffy  (TV show) r/Avengers  (Movie franchise) r/Vancouver (city) r/Dallas (city) r/Plano (city) r/Japan r/Gorillaz  (music band) r/Podcasts /r/Disneyland r/49ers  (NFL team) /r/BostonCeltics  (NBA team) r/Leafs (Toronto Mappl...

Recently, the US and UK cybersecurity agencies have issued a joint security alert about an ongoing malware attack. The QSnatch malware is actively targeting QNAP devices and has infected thousands of them already.   Users must ensure updating their devices with security fixes to avoid exploitation. US UK Cybersec Warn Of QSnatch Malware In a joint alert from the United States Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC) have warned of active QSnatch malware attacks. Briefly, they presented their findings regarding a new strain of QSnatch malware. While the malware vector remains unknown, the firms believe that it attacks a vulnerable device as the malicious code runs with it. The malware affects the device firmware whilst allowing the attacker to connect with the C&C by using a domain generation algorithm (DGA).  It keeps generating different domain names to communicate with the C&C. QSnatch exhi...

The 'Happy Independence Day' message was shown on the channel in Pakistan around 3:30 pm. A leading Pakistan TV news channel, Dawn, has reportedly been hacked, several photos and videos surfacing online showed. While an advertisement was running on the news channel, the Indian flag appeared over it with a message saying 'Happy Independence Day'. This was spotted by many Twitter users. The message was shown on the channel in Pakistan around 3:30 pm. News Jockey @jockey_news Dawn news channels of Pakistan hacked by Hackers https:// twitter.com/doctoralihamid /status/1289884543084834816/video/1 … 6:46 PM · Aug 2, 2020 56 22 people are Tweeting about  Meanwhile, Dawn News put out a tweet in Urdu saying "The Dawn administration has ordered an immediate investigation into the matter." Issuing a statement, Dawn News said that it was broadcasting as usual when the Indian tricolour and the Independence Day wish appeared over the commercial suddenly, remained on the sc...