Security

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from its first resurgence in the fall until now. In active malware, we discussed how the RIG malvertising campaign uses cryptocurrency themes as a decoy, how an old virus made its way onto a Chinese DDoS bot, and how a massive DDoS attack washed over GitHub. We also drew your attention to our own Chris Boyd appearing in Jenny Radcliffe’s Human Factor Podcast. Other news Does your endpoint solution stop fileless attacks? They are gaining traction, says a Ponemon Institute study. (Source: Bricata) Feedless is an iOS content blocker that takes the media out of social media. (Source: The Verge) A serious remote code execution vulnerability in both the ‘μTorrent desktop app for Windows and the newly ..

Last week on Malwarebytes Labs, we gave readers a primer on encryption, took a stab at that Deepfakes tool Internet users seem to be interested in, and started a new series that talks about GDPR. We also looked at a drive-by download campaign that starts in booby-trapped Chinese websites that drop malware via different exploits. This malware is a DDoS bot called Avzhan, which we then studied in detail. Other news Hackers targeted Russian and Indian banks by attempting to abuse the SWIFT global banking network. (Source: Security Week) Are you an independent writer who sells books via Amazon’s Createspace? You may want to check if someone is impersonating you for fraud. (Source: KrebsOnSecurity) Akamai spotted an uptick in credential abuse in the last quarter of 2017. (Source: Computer Weekly) Let’s read about that new Google Chrome “adblocker” that is actually not an adblocker at all. (Source: Sophos’ Naked Security Blog) Should “security” and “social” be in the same sentence together..