Security

Last week, we took a look at a malware-campaign called FakeUpdates, methods to use secure instant messaging, the inner workings of a decryption tool, and some Facebook spam campaigns. We also published our first quarterly Malwarebytes Labs CTNT report of 2018. Other news A security researcher discovered a flaw in P.F.Changs Rewards website. (Source: [email protected]) Security Consultant Xavier Mertens described a suspicious use of certutil.exe. (Source: InfoSec Handlers Diary Blog) A significant number of Cisco devices belonging to organizations in Russia and Iran were hacked by a group calling itself JHT. (Source: The Hacker News) Facebook CEO Mark Zuckerberg spoke at a joint hearing of the US Senate judiciary and commerce committees in Washington, DC. (Source: siliconrepublic) A vulnerability in Microsoft Outlook allowed hackers to steal a user’s Windows password. (Source: ThreatPost) A malware gang is going for identity theft and phony tax refunds by targeting CPAs. (Sour..

Last week, we took a look at a malware-campaign called FakeUpdates, methods to use secure instant messaging, the inner workings of a decryption tool, and some Facebook spam campaigns. We also published our first quarterly Malwarebytes Labs CTNT report of 2018. Other news A security researcher discovered a flaw in P.F.Changs Rewards website. (Source: [email protected]) Security Consultant Xavier Mertens described a suspicious use of certutil.exe. (Source: InfoSec Handlers Diary Blog) A significant number of Cisco devices belonging to organizations in Russia and Iran were hacked by a group calling itself JHT. (Source: The Hacker News) Facebook CEO Mark Zuckerberg spoke at a joint hearing of the US Senate judiciary and commerce committees in Washington, DC. (Source: siliconrepublic) A vulnerability in Microsoft Outlook allowed hackers to steal a user’s Windows password. (Source: ThreatPost) A malware gang is going for identity theft and phony tax refunds by targeting CPAs. (Sour..

Last week, we took a look at fake Whatsapp antics, dubious gaming extensions, and a huge Panera bread breach. There was also LockCrypt ransomware to contend with, we had a poke around Linkedin, and we published another Physician, protect thyself blog. Other news Compromised cash register systems (source: Fin7) Drone buyer data leaked (source: The Register) Data scraping problems for Facebook (source: Help Net Security) Office 365 and ransomware protection (source: Microsoft) Charities potentially vulnerable to CEO fraud (source: gov.uk) Mirai financial sector attack detailed (source: SCMag) Erroneous Equifax breach letters (source: CNBC) Chat system hacked (source: The Register) Fighting back against mobile phish attacks (source: CSO magazine) 3 million scam letters caught in 18 months (source: Which? magazine) Stay safe, everyone! The post A week in security (April 02 – April 08) appeared first on Malwarebytes Labs.