Malwarebytes Labs - The Security Blog From Malwarebytes

Emotet is back: botnet springs back to life with new spam campaign

September 16, 2019 - After months of laying dormant, the notorious Emotet is back, with its botnet spewing spam globally.

A week in security

A week in security (September 9 – 15)

September 16, 2019 - A roundup of the security news from September 9–15, including locking down AWS, mobile malware, phishing threats, and more.

Researcher's corner

Hacking with AWS: incorporating leaky buckets into your OSINT workflow

September 13, 2019 - When penetration testing for an organization, what OSINT tactics can researchers employ? We discuss how hacking with AWS buckets can provide more recon data and uncover any leaks.

$YouTube ordered to cough up $170M settlement over COPPA infraction - Last week, the FTC announced its settlement with Google over YouTube’s COPPA violations, including requirements for better protecting children's data. But is it enough?$

Privacy

YouTube ordered to cough up $170M settlement over COPPA infraction

September 12, 2019 - Last week, the FTC announced its settlement with Google over YouTube’s COPPA violations, including requirements for better protecting children's data. But is it enough?

Exploits and vulnerabilities

Five years later, Heartbleed vulnerability still unpatched

September 12, 2019 - The Heartbleed vulnerability was discovered and fixed in 2014, yet today—five years later—there are still unpatched systems.

Vital infrastructure

Vital infrastructure: emergency services

September 11, 2019 - We all depend on emergency services to come to the rescue in case of serious problems. How does malware hinder them?

Privacy

300 shades of gray: a look into free mobile VPN apps

September 10, 2019 - Mobile VPN apps are one of the best tools for protecting user privacy. Unfortunately, a notable number of are deemed unsafe. Read on to find out how to assess the best mobile VPN for you.

A week in security

A week in security (September 2 – 8)

September 9, 2019 - A roundup of the latest cybersecurity news for the week of September 2 – 8, including TrickBot’s new trick, a social engineering toolkit, and how to keep remote workers safe.

Business

When corporate communications look like a phish

September 9, 2019 - Before organizations engage in gnashing of teeth over the "ignorant user" and the cost of training, think about how much email users encounter and whether corporate communications look like phishes themselves.