Malwarebytes Labs - The Security Blog From Malwarebytes

Spear-phishing now targets employees outside the finance and executive teams, report says

July 30, 2021 - Employees in "low profile roles," such as IT and sales, are now favorite targets of spear phishing attacks, says a new report from Barracuda.

Exploits and vulnerabilities

Microsoft provides more mitigation instructions for the PetitPotam attack

July 29, 2021 - Almost a week after the release of a PoC for PetitPotam, Microsoft has revised the mitigation details to thwart the attack.

Threat Intelligence

Crimea “manifesto” deploys VBA Rat using double attack vectors

July 29, 2021 - A Crimean "manifesto" hides an attack that infects victims with a VBA Rat, which we also found being deployed through a separate exploit.

Ransomware

BlackMatter, a new ransomware group, claims link to DarkSide, REvil

July 28, 2021 - BlackMatter is only one of a handful of new ransomware variants that started its operations not long ago.

Hacking

The Olympics: a timeline of scams, hacks, and malware

July 28, 2021 - We look at a history of malware, hacks, phishes, bogus mobile apps, and more targeting the Olympic Games going back to 1996

Exploits and vulnerabilities

UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root

July 28, 2021 - Researchers found 11 vulnerabilities in IP camera firmware, but the vendor refused to work with them. As a result users are left wondering whether their camera's can be taken over remotely.

Exploits and vulnerabilities

Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach

July 27, 2021 - Kaseya Unitrends, another service offered by Kaseya, includes a newly-discovered vulnerability. It's not as bad as Kaseya VSA's flaws.