walk4cyer

A malicious Windows EXE file can even infect your Mac computer as well. Yes, you heard me right — a .exe malware on macOS. Security researchers at antivirus firm Trend Micro have discovered a novel way hackers are using in the wild to bypass Apple's macOS security protection and infect Mac computers by deploying malicious EXE files that normally run only on Windows computers. Researchers found several samples of malicious macOS application (.dmg) masquerading as installers for popular software on a torrent site that includes an EXE application compiled with Mono framework to make it compatible with macOS. Mono is an open source implementation of Microsoft's .NET Framework that allows developers to create cross-platform .NET applications, which work across all supported platforms, including Linux, Windows and Mac OS X. Usually, running any Windows executable results in error on macOS systems, and its built-in protection mechanisms such as G...

Security researcher Lukas Stefanko from ESET discovered the first Android cryptocurrency clipboard hijacker impersonating MetaMask on the official Google Play store. The rogue  MetaMask  app is a Clipboard  Hikacker  that monitors a device’s clipboard for Bitcoin and Ethereum addresses and replaces them with addresses of wallets under the control of the attacker. Using this trick the attackers can transfers funds to their wallets. “This dangerous form of malware first made its rounds in 2017 on the Windows platform and was spotted in shady Android app stores in the summer of 2018. In February 2019, we discovered a malicious clipper on Google Play, the official Android app store.” reads the  post  published by ESET. The Clipboard Hikacker poses itself as a mobile version of the legitimate service MetaMask.io  which is designed to run Ethereum decentralized apps in a browser, without having to run a full Ethereum node. ...

The man, who stole 500 000 UAH (18 350 USD) from the crypto-wallets of clients of the online cryptocurrency exchange, was detained in the Kiev region. The Ukrainian cyber police stated that the 35-year-old man provided technical support to the British stock exchange with online cryptocurrency exchange and had access to personal data of customers. He used them to steal from Bitcoin and various Altcoin accounts. Thus, he stole 500 000 UAH for several months. Theft of cryptocurrency occurred in several stages. At first, the attacker was looking for accounts of clients who for a long time did not open their accounts and did not have a complex authentication system. After that, the Ukrainian made a substitution of backup e-mail boxes or added them to accounts where they were not specified. Thus, he restored the passwords to the wallets and initiated the debiting of electronic money. Conversion and withdrawal of money took place through an online exchange. At the moment the amount of dama...

Blockchain technology can improve how researchers access medical data. PIXABAY. This distributed ledger technology can improve security, efficiency, and the coordination of health care systems as an answer to aging legacy infrastructures. Health care systems are cornerstones of all modern societies since they provide vital services. As they grow, however, many become less efficient and secure, which can make health care services more expensive and less accessible to the general public. Beyond being the buzzword of 2017, blockchain opens the door to solutions in an increasing global healthcare expenditure that is expected to increase to  USD $10.059 trillion by 2022 . Healthcare Today While the digitization of healthcare has paved the way for modern infrastructure, current privacy laws, software, and databases have slowly taken the power from the patient. Our existing software faces a few key problems that have both short-term and long-term implications—affecting b...

Introduction In the last days, a huge attack campaign hit several organizations across the Italian cyberspace, as stated on bulletin  N020219  the attack waves tried to impersonate legit communication from a known Express Courier. However, a deeper analysis by  Cybaze -Yoroi ZLAB revealed interesting hidden aspects, spotting a connection between the  AZORult  toolkit and a particular  Gootkit payload. Technical analysis Stage 1 – The Attached Javascript Most of the infection attempts started with a particular email attachment: a compressed archive containing stealthy JavaScript code, most of the times able to avoid antivirus detection during the initial stages of the attack campaigns. Hash 12791e14ba82d36d434e7c7c0b81c7975ce802a430724f134b7e0cce5a7bb185 Threat malicious js Desc Obfuscated malicious JS. This download first component and keep communication with C2 server. Table 1:  Generic information about malicious js file This J...