Tag: malware
Tech Time Warp: Rootkit proves there’s a fine line between copy protection and malware
Twenty-one years ago this Halloween, some computer users found they had acquired some tricks along with their treat of a new Céline Dion CD. On Oct. 31, 2005, blogger Mark Russinovich published a post about discovering a rootkit — software...
Cybersecurity Threat Advisory: Trojanized PuTTY installers target IT admins
Threat actors are using malicious Google Search ads to distribute weaponized PuTTY installers that target IT administrators. These ads direct victims to fake websites that mimic legitimate PuTTY download pages. Once installed, the trojanized software deploys malware that enables remote...
Tech Time Warp: Duqu, the malware spy disguised as a Word doc
Fifteen years ago this month, reports of a new type of malware — Duqu — were opening the cybersecurity community’s eyes to the possibility of computer virus as tradecraft. Initially thought to target industrial control systems, Duqu was later discovered...
Cybersecurity Threat Advisory: Malicious Notepad++ plugins
CERT-UA has identified an ongoing campaign in which threat group UAC-0099 distributes trojanized Notepad++ bundles that install malware on Windows systems. The campaign primarily targets organizations in Ukraine and is linked to activity associated with APT44 (Sandworm). What is the...
Cybersecurity Threat Advisory: SilverFox deploys ValleyRAT rootkit
SilverFox threat actors are actively running a ValleyRAT campaign to bypass security controls, escalate privileges, and maintain deep system access while avoiding detection. Organizations should treat this as a high-priority threat. Continue reading this Cybersecurity Threat Advisory to protect against...
Tech Time Warp: Nine years since the NotPetya nightmare
With damages estimated at $10 billion worldwide, the NotPetya malware attack of late June 2017 was a nightmare scenario by any standard. But several aspects of the malware — the work of Russian military intelligence officers — were particularly fiendish:...
Cybersecurity Threat Advisory: AryStinger malware exploits legacy routers
AryStinger is a newly discovered malware family that takes over outdated home and small office (SOHO) routers. Researchers at QiAnXin XLab have identified at least 4,300 infected legacy Realtek-based routers. Read the Cybersecurity Threat Advisory to mitigate your clients’ risk...
Tech Time Warp: The legacy of Stuxnet
These days, USB drive security risks are clear — and cloud storage now serves as an alternative to portable storage. But 16 years ago, the humble USB drive was the carrier for what many still consider the most sophisticated malware...
Cybersecurity Threat Advisory: CPUID vulnerability
CPUID has confirmed a software supply chain attack that briefly compromised the official download infrastructure for its popular hardware monitoring tools, CPU‑Z and HWMonitor. During a limited exposure window, attackers manipulated download links on the CPUID website, causing users to...
Tech Time Warp: Chernobyl, the first malware known to damage computer hardware
This installment of Tech Time Warp looks back as the fast‑approaching 40th anniversary of the Chernobyl nuclear accident—along with a new report on damage to the defunct facility’s outer protective structure—calls to mind an anniversary in malware history. The fast-approaching...
