#qakbot — Public Fediverse posts

#BKA nennt Identität des mutmaßlichen Chefs der #Trickbot-Bande | heise online https://www.heise.de/news/BKA-nennt-Identitaet-des-mutmasslichem-Chefs-der-Trickbot-Bande-10421263.html #Malware #Ransomware #CyberCrime #Qakbot

Operation Endgame 2: 15 Millionen E-Mail-Adressen und 43 Millionen Passwörter | Security https://www.heise.de/news/Operation-Endgame-2-15-Millionen-E-Mail-Adressen-und-43-Millionen-Passwoerter-10396199.html #HaveIBeenPwned #Malware #Ransomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus #OperationEndgame2

Operation Endgame 2.0: 20 Haftbefehle, Hunderte Server außer Gefecht gesetzt | Security https://www.heise.de/news/Operation-Endgame-2-0-20-Haftbefehle-Hunderte-Server-ausser-Gefecht-gesetzt-10394215.html #OperationEndgame #OperationEndgame2 #Malware #Ranswomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus

Operation Endgame Takes Down DanaBot Malware, Neutralizes 300 Servers https://hackread.com/operation-endgame-danabot-malware-neutralizes-servers/ #OperationEndgame #Cybersecurity #CyberCrime #Security #TrickBot #Malware #DanaBot #Europol #Botnet #Qakbot

Operation Endgame Takes Down DanaBot Malware, Neutralizes 300 Servers – Source:hackread.com https://ciso2ciso.com/operation-endgame-takes-down-danabot-malware-neutralizes-300-servers-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #OperationEndgame #cybersecurity #CyberCrime #Hackread #security #TrickBot #DanaBot #Europol #malware #botnet #Qakbot

🔥 Operation Endgame is BACK! This time targeting #BumbleBee, #Latrodectus, #DanaBot, #WarmCookie, #Qakbot and #Trickbot!

Once again this is a HUGE win, with a truly international effort! 💪

As with phase one of #OperationEndgame, Spamhaus are providing remediation support - those affected will be contacted in due course with steps to take.

For more information, read our write-up here:
👉 https://www.spamhaus.org/resource-hub/malware/botnets-disrupted-worldwide-operation-endgame-is-back/

International Operation Targets Qakbot Hacker, $24M in Crypto Seized https://thecyberexpress.com/doj-indicts-alleged-qakbot-malware/ #RustamRafailevichGallyamov #USJusticeDepartment #ransomwareattacks #CryptoCrackdown #maliciousemails #RansomwareNews #cryptocurrency #FirewallDaily #Qakbotmalware #BlackBasta #CyberNews #Gallyamov #Qakbot #REvil #FBI

#Malware: #Qakbot mit falschen #Captchas verteilt | Security https://www.heise.de/news/Malware-Qakbot-mit-falschen-Captchas-verteilt-10335589.html #FakeCaptcha #FakeCaptchas

Трендовые уязвимости мая: лингвистический лесоруб и таинственный файл на ломаном английском

Хабр, привет! Уже по традиции я, Александр Леонов, ведущий эксперт лаборатории PT Expert Security Center, рассказываю про трендовые уязвимости месяца. Всего их было четыре: 1️⃣ уязвимость, приводящая к удаленному выполнения кода в многоплатформенном опенсорсном инструменте для сбора и обработки журналов Fluent Bit (CVE-2024-4323); 2️⃣ уязвимость, приводящая к удаленному выполнения кода в корпоративной веб-вики Confluence (CVE-2024-21683); уязвимости Microsoft, связанные с 3️⃣ обходом функций безопасности в Windows MSHTML Platform (CVE-2024-30040) и 4️⃣ повышением привилегий в Windows DWM Core Library (CVE-2024-30051). Узнать самые опасные уязвимости мая

https://habr.com/ru/companies/pt/articles/820613/

#трендовые_уязвимости #cve #vulnerability_management #microsoft #эксплойт #confluence #dwm #qakbot #ole #патчи

📬 Malware-Gefahren im Jahr 2023: Qbot unangefochten auf Platz eins
#ITSicherheit #Malware #AgentTesla #CheckPointSoftware #DirectoryTraversal #log4j #NanoCore #Qakbot #RemoteCodeExecution #RemoteAccessTrojaner https://tarnkappe.info/artikel/it-sicherheit/malware/malware-gefahren-im-jahr-2023-qbot-unangefochten-auf-platz-eins-275138.html

Mentioned Malware Families: Ryuk, Bashlite, QakBot

Aliases for Ryuk: win.ryuk
Malpedia link for Ryuk: https://malpedia.caad.fkie.fraunhofer.de/details/win.ryuk
Aliases for Bashlite: elf.bashlite, gayfgt, Gafgyt, qbot, torlus, lizkebab
Malpedia link for Bashlite: https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
Aliases for QakBot: win.qakbot, Oakboat, Pinkslipbot, Qbot, Quakbot
Malpedia link for QakBot: https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot

#Ryuk #Bashlite #QakBot

Aliases provided by Malpedia.

Mentioned Malware Families: Ryuk, Bashlite, QakBot

Aliases for Ryuk: win.ryuk
Malpedia link for Ryuk: https://malpedia.caad.fkie.fraunhofer.de/details/win.ryuk
Aliases for Bashlite: elf.bashlite, gayfgt, Gafgyt, qbot, torlus, lizkebab
Malpedia link for Bashlite: https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite
Aliases for QakBot: win.qakbot, Oakboat, Pinkslipbot, Qbot, Quakbot
Malpedia link for QakBot: https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot

#Ryuk #Bashlite #QakBot

Aliases provided by Malpedia.

This week's wrap-up of infosec news is out, just in time for your morning commute: https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-4af

#Qakbot have gotten in on the #OneNote action - turns out so too has every other threat actor under the sun.

Iran's #OilRig/#APT34 has been caught in the act, abusing the legitimate Password Filters feature to siphon creds, and exfiltrating them via compromised mail channels.

Some interesting techniques were observed in a recent #SocGholish campaign, including passively enumerating usera through event logs and disabling Restricted Admin mode to enable the theft of creds from memory.

A series of vulnerabilities in the Fortran GoAnywhere MFT file transfer application, QNAP NAS appliances, and VMWare ESXi servers should be top of your list this morning - make sure you're not exposed!

All that and much more, to help you shake off the cobwebs this Monday morning: https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-4af

#infosec #CyberAttack #cyber #news #cybernews #infosec #infosecnews #informationsecurity #cybersecurity #hacking #security #technology #hacker #vulnerability #vulnerabilities #malware #ransomware #dfir #redteam #soc #threatintel #threatintelligence #vmware #poc