Ficker Stealer Malware tricks people into getting passwords

Ficker – An Info-Stealer Malware that tricks people to get their passwords

Credential stealer malware is the most prevalent types of malware used in cyber-attacks. We have seen a lot of new stealer malware in the wild. The main objective of all credential stealer malware is to collect all confidential and sensitive information like user credentials and financial information. Ficker Stealer is a family of information-stealing malware […]

Spear Phishing attacks siphon off Microsoft credentials

Spear Phishing targets Microsoft to amass large numbers of credentials

We observed a considerable uptick in Phishing Attacks during the COVID-19 pandemic. During our analysis, we came across a Spear Phishing Campaign targeting high-profile individuals for credential harvesting. The emails that we analysed link to fake login pages mimicking Office 365 logins for the victim organizations. Here is the technical analysis of a few of […]

CVE-2020-0796 – A “wormable” Remote Code Execution vulnerability in SMB v3

Since last two days, the Internet is rife with news around a critical remote code execution vulnerability in SMBv3.1.1 compression mechanism. Today, on 12th March 2020 Microsoft has released an emergency out-of-band patch to address this vulnerability. As per Microsoft release information, it’s a remote code execution vulnerability in the way that the Microsoft Server […]

LinkedIn phishing attacks, new ransomware and other IT security news

In this week’s IT security news, LinkedIn users are increasingly under threat of new phishing campaigns. A new form of ransomware has been discovered and several other interesting developments have taken place. Keep reading for some insights into these news stories. LinkedIn users under threat by new phishing campaign This campaign is designed to divert […]

eBay faces a major hack and other security news

In massive security news this last week, eBay was hacked on a large scale. This is the dominant story emanating from IT circles in the week gone by, and all else pales in comparison. During the hack, large databases of user passwords were also stolen and this is a rather alarming state of affairs. If […]

Dear Departed XP Still Getting Security Updates and Other IT Security News

Looks like XP is still the hot talk of the town, even after it was pulled out of support last month. In the wake of a nasty security bug in IE which could let hackers completely zombify a user’s machine, Microsoft released a quick security patch. But the interesting news here is, the security patch […]

Security News – Heartbleed Exposes Millions of Online Passwords

There has been a severe password outage this week thanks to the already famous ‘Heartbleed’ breakdown. Millions of passwords, credit card numbers and other sensitive data have been revealed so it is strongly advised that you change all your passwords immediately. Other security news updates pale in comparison to this threat, so you need to […]

Microsoft Extends Windows XP support for UK government – IT Security News

Looks like Microsoft hasn’t been completely truthful about pulling off support from Windows XP post April 8th, 2014. Scroll below to catch this and other interesting IT security stories of the week. Microsoft extending Windows XP support for the UK Government for a hefty £5.5 million The great hoo-ha about Windows XP going out of […]

Beware – Fake Google Apps Spotted Over Windows Phone Store!

Windows Phone has a worldwide market share of less than 5% in 2014, and this has led to its marketplace (known as the Windows Phone Store) being ignored by several app developers. The most prominent of these developers of course, is Google. Right now the only Google app that is available over the Windows Phone […]