An inspired writer and content manager who has been with SensorsTechForum since the project started. A professional with 10+ years of experience in creating engaging content. Focused on user privacy and malware development, she strongly believes in a world where cybersecurity plays a central role. If common sense makes no sense, she will be there to take notes. Those notes may later turn into articles! Follow Milena @Milenyim
Mega (data) breaches are a major public problem, even though the public may not be too interested in the subject. If you’re a user of popular social media such as LinkedIn, Myspace, Tumblr, and dating websites like BeautifulPeople, you shouldn’t…
Aleksandar Nikolic, a researcher at Cisco Talos, has discovered a vulnerability in PDFium, the default PDF reader in Google Chrome. The flaw is an arbitrary code execution one, and is outlined as CVE-2016-1681. The vulnerability can be exploited when a…
LinkedIn users in Europe should be extra careful, as a highly personalized malicious campaign has been started. The campaign’s payload is banking malware. Specific people have received tailored malicious emails in different languages. The users’ credentials that were offered for…
Rapid7, a security firm, has just released a vast report (“National Exposure Index: Inferring Internet Security Posture by Country through Port Scanning“) focused on the nations mostly exposed to risks of Internet-based attacks. Researchers found that wealthier and more developed…
Image Source: https://blog.checkpoint.com Facebook is far from invincible. In fact, it may be way too easy for attackers to exploit vulnerabilities, especially when it comes to its standard chat function and its separate Messenger app. This is exactly what CheckPoint…
Mega data breaches affect all kinds of users, even famous ones like Mark Zuckerberg. Apparently, a hacker from a group dubbed OurMine Team succeeded to take over Zuckerberg’s Twitter and Pinterest accounts, using credentials leaked during the major LinkedIn incident,…
In general, ransomware like CryptXXX/UltraCrypter sneaks into the victim’s computer and encrypts their files, appending an extension (.cryp1 in the case of UltraCrypter) and demanding payments in exchange for the files’ decryption. However, things can get more unfortunate, as ransomware…
If you’re running an outdated WordPress, Drupal or some other CMS, you are in high danger of hacking. What is worse is that Mossack Fonseca, the law firm associated with the Panama Papers breach, already became a victim in such…
How Much Would You Pay for a Windows 0-Day? Author: Diana Stoykova An attacker, going by the name BuggiCorp, claims to have found a way to exploit a serious, yet undocumented, vulnerability in every version of Windows from Windows 2000…
Ransomware is not the only online extortion that a victim can be put through. The FBI’s Crime Complaint Center (IC3) has just released a public alert concerning an increase in post-breach extortion attempts. The attacks are aimed at US citizens…
Our research indicates that there are at least three identical ransomware viruses currently infecting victims under different names. Ecovector and Vegclass ransomware “share” the same desktop wallpapers, and act in a very similar way. We also suspect that these two…
Cryp1, CryptXXX 3.0 or UltraCrypter ransomware – it doesn’t matter how you name it. This ransomware is currently one of the most active crypto viruses, targeting users in Germany, Spain, Italy, and other “developed” European countries. Users in the US…
Tor Browser 6.0 has just been released, and it’s now based on Firefox 45-ESR (Extended Support Release) and accordingly a better support for HTML5 is available. This release can be downloaded from Tor Project’s official page and also from their…
Do you remember the hacker going by the nickname Peace who recently offered for sale 117 million Linkedin credentials? The hacker is now doing the same with 65,469,298 million hashed and salted passwords, along with the email addresses, of Tumblr…
Ransomware doesn’t sleep. Another crypto virus, Green_Ray ransomware, has been “introduced” to users, encrypting their files and demanding a payment for their decryption. Green_Ray has been reported to use asymmetric encryption (a public and a private key). The ransomware appends…
On the left – original Sberbank of Russia app, on the right – fake app; Image Source: TrendMicro Fanta SDK is one of the latest malicious threats aimed at Android users. This particular malware is pretty good at protecting itself…
We are in the midst of multiple data breaches and passwords being dumped on the Dark Web, as more popular websites become victims to such incidents. It’s only good when a company decides to take things in their own hands…
A rather strong wave of old malware is resurfacing the Web. In this article we will analyze the Bayrob Trojan (Win32/Bayrob, Trojan.Bayrob!gen8, Trojan.Bayrob) which hasn’t been active for at least 9 years. The threat has been updated and set on…
Have you heard of the lawsuit between Google and Oracle? Filed several years ago, the lawsuit Oracle America, Inc. v. Google, Inc. has now been resolved, in Google’s favor. A jury in California’s Northern District federal court just declared that…
If you’re an Android user, you should be extra careful since another dangerous malware, a banking Trojan, is currently targeting the operating system. McAfee researchers have called the threat SpyLocker. SpyLocker displays phishing pop-up windows with credential prompts addressed at…
