Home - Latest Computer Security News, Tips, and Advice

Spring4Shell: Zero-Day vulnerability CVE-2022-22965 in Spring Framework

Shiv Mohan / 4 years
0
2 min read

A Zero-day Remote Code Execution Vulnerability with critical severity has been identified as CVE-2022-22965 aka Spring4Shell or SpringShell in Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 & older. The Spring Framework is an open-source, popular, feature-rich application framework used for building modern & enterprise Java web applications. Publicly available exploits in this widely […]

Stay Alert of Facebook Credential Stealer Applications Stealing User’s Credentials.

Digvijay Mane / 4 years
0
6 min read

Social media credentials are always a lucrative thing for threat actors. They use various techniques to get them. Some use overlays with fake user interfaces, some use key-logging, and some use simple social engineering to trap users. Another way threat actors have been used in the recent past is JavaScript code injection in WebView to […]

Coronavirus-themed Campaign delivers Agent Tesla Malware

Aniruddha Dolas / 4 years
0
7 min read

Summary: While the whole world fights against the COVID-19 pandemic, cybercriminals are busy exploiting the situation and attacking vulnerable users & businesses. In the last few weeks, there has been a rise in coronavirus-themed mail spams, which are being used to deliver a variety of malware. At Quick Heal Security Labs, we have observed […]

CVE-2021-44228: New Apache Log4j ‘Log4Shell’ Zero-Day Being Exploited in the Wild

Quickheal / 4 years
0
4 min read

A critical zero-day vulnerability (CVE-2021-44228) recently discovered Apache Log4J, the popular java open source logging library used in countless worldwide applications. The maximum severity vulnerability has been identified as ‘Log4Shell‘, which, if exploited, could permit a remote attacker to take control of vulnerable systems and execute arbitrary code remotely. According to some security researchers, the […]

Anydesk Software Exploited to Spread Babuk Ransomware

Preksha Saxena / 4 years
0
10 min read

We generally see that ransomware attacks are deployed through exploits, unsolicited malicious emails (malspam), or malicious Microsoft Office documents. Attackers trick the unsuspecting users into enabling macros, etc. Apart from these usual attack techniques, we came across a new way of using Anydesk software fake websites to spread Babuk ransomware. Anydesk is a remote-control tool […]

Quick Heal Supports Windows 10 November 2021 Update (version 21H2)

Quickheal / 4 years
0
2 min read

Microsoft has recently developed a new update for Windows 10 PCs, called Windows 10 November 2021 update, version 21H2. Here we’ll list down some of the highlights of this update and see how Quick Heal is compatible with this OS. Few Highlights of the Windows 10 November 2021 update are: Wi-Fi security is enhanced due to […]

Stay Alert – Malware Authors Deploy ELF as Windows Loaders to Exploit WSL feature

Rutuja Mane / 4 years
0
5 min read

What is WSL? The Windows Subsystem for Linux (WSL) is a resource inside the Windows operating system that allows users to execute Linux command lines on a machine running Windows operating system. The Windows Subsystem for Linux uses an application known as Bash.exe, which launches a Linux dialogue box within the Windows operating system interface. […]

Multi-Staged JSOutProx RAT Targets Indian Co-operative Banks and Finance Companies

Sameer Patil / 4 years
0
10 min read

Quick Heal Security Labs has been monitoring various attack campaigns using JSOutProx RAT against different SMBs in the BFSI sector since January 2021. We have found multiple payloads being dropped at different stages of its operations. Although the RAT campaigns have also been previously reported on other countries, those targeting Indian companies are operated […]

CetaRAT APT Group – Targeting the Government Agencies

Prashant Tilekar / 4 years
0
4 min read

CetaRAT was seen for the first time in the Operation SideCopy APT. Now it is continuously expanding its activity since then. We have been tracking this RAT for a long time and observed an increase in targeting the Indian government agencies. The CetaRAT infection chain starts with a Spear phishing mail with a malicious mail […]

What is Phishing? A Deep Dive into the Phishing Attack Mechanisms with Tips

Amruta Wagh / 4 years
0
6 min read

Phishing is a technique used to steal credentials, personal information & financial details of a user. The attacker sends email or text to spoof the target, luring them to open malicious links or attachments. The most prevalent ways attackers attempt phishing attack are through social networking sites, SMS, and email notifications. We see a sudden […]

Cyber Security Awareness 2026:...

Snapchat Scams You Should...

Pig Butchering Scams: Inside...

AI Security: Quick Heal’s...

Polymorphic Viruses: Why They’re...

Instagram Scams: Parental Guide...