Tag: malware

LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group

September 28, 2018

ESET researchers have shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central and Eastern Europe. UEFI rootkits are widely viewed as extremely dangerous tools for implementing cyberattacks, as they are hard to detect and able to survive security … More LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group

Attackers crack Newegg’s defenses, grab customers’ credit card data

September 24, 2018

The skimmer, injected into the store’s payment page, harvested credit-card details from the store’s online customers for more than a month. The major electronics and computer hardware retailer Newegg has announced that attackers have compromised its online payments system, potentially scooping up buyers’ credit-card data over a period of more than a month. “Yesterday we … More Attackers crack Newegg’s defenses, grab customers’ credit card data

DanaBot shifts its targeting to Europe, adds new features

September 21, 2018

ESET researchers have discovered new DanaBot campaigns targeting a number of European countries. Recently, we have spotted a surge in activity of DanaBot, a stealthy banking Trojan discovered earlier this year. The malware, first observed in campaigns targeting Australia and later Poland, has apparently expanded further, with campaigns popping up in Italy, Germany, Austria, and … More DanaBot shifts its targeting to Europe, adds new features

Bristol airport takes flight screens offline after apparent ransomware attack

September 19, 2018

The screens in “key locations” are back up and running again, while the airport paid no ransom to return its systems to working order. Bristol Airport in South West England has been hit by an apparent ransomware attack that prompted the airport to take flight information screens offline in an effort to keep the attack … More Bristol airport takes flight screens offline after apparent ransomware attack

Kodi add-ons launch cryptomining campaign

September 13, 2018

ESET researchers have discovered several third-party add-ons for the popular open-source media player Kodi being used to distribute Linux and Windows cryptocurrency-mining malware. If you use Kodi, you may have noticed that a popular, Dutch repository for third-party add-ons, XvBMC, was recently shut down upon copyright-infringement warnings. Following the shutdown, we discovered that the repository was … More Kodi add-ons launch cryptomining campaign