Sean Hulbert

Avast researchers recently uncovered GuptiMiner, an aged malware. It leverages the eScan antivirus update system to surreptitiously implant backdoors and cryptocurrency mining software into users’ computers and extensive corporate networks. This discovery underscores cybercriminals’ efforts to circumvent contemporary security protocols. Let’s delve deeper into this development. GUPTIMINER EXPLOITS Avast experts examined GuptiMiner, a malware active since 2018, targeting corporate networks with backdoors and concealed cryptomining. Employing a multi-stage infection process, the malware initiates by intercepting antivirus updates via man-in-the-middle (MitM) assaults, enabling attackers to replace authentic updates with malicious ones. ~First Hackers News To continue reading this article, click on this link>>>https://lnkd.in/gKsBdmxK #Guptiminer #Malware #escanAntivirus #backdoors #cybercriminals #Securityprotocols #Cryptomining #cyberattacks #cybersecurity #informationsecurity #FHN #Firsthackersnews #latestnews

OCSS, OJSS, and ezSupervision Users - Do you have tech grant dollars ready to spend? Check out how your department can level up its existing system! 🤓🖥️ Questions? [email protected] (419)-755-6700 or message us! #ezSupervision #OCSS #OJSS #CourtTech #TechGrant #CaseManagement

Trustwave puts the Lapsus$ threat group under the microscope for a detailed analysis of their tactics, techniques, and procedures. The group is notorious for targeting #MFA or exploiting insider threats for high-profile attacks on tech giants. Dive into Trustwave's coverage for key insights to defend your org:

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware: A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug (CVE-2024-36401, CVSS score: 9.8) that could allow malicious actors to take over susceptible instances. In https://lnkd.in/g_CE2fWa

Cybersecurity experts have uncovered sophisticated Android spyware, LianSpy, targeting users to steal sensitive data. It uses advanced evasion techniques, posing a significant threat to Android users globally. All about LianSpy Spyware LianSpy starts by checking if it runs as a system app for automatic permissions. If not, it requests permissions for screen overlay, notifications, background activity, contacts, and call logs. Once granted, it ensures it’s not in a debugging environment. According to SecureList, LianSpy stores its configuration locally using SharedPreferences, which persists across reboots. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/gDS5JF27 #android #spyware #lianspy #sensitive #threat #debugging #securelist #configuration #reboot #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestupdates

This is the future of Level1 SOC analysis and triage, but it should not be rushed. It's essential to get the rate of false negatives and positives dialed in correctly and escalate the true positives to a human (for now). https://lnkd.in/eHGH5FHM