-
New Linux malware – aka Drovorub (13th Aug 2020)
Preface: New Linux malware silently conducting the attack. The FBI and NSA issue joint security alert. Official announcement – https://media.defense.gov/2020/Aug/13/2002476465/-1/-1/0/CSA_DROVORUB_RUSSIAN_GRU_MALWARE_AUG_2020.PDF Remedy: To prevent attacks, the agency recommends that US organizations update any Linux system to a version running kernel version 3.7 or later, “in order to take full advantage of kernel signing enforcement,” a security…
-
NSA preemptive curb threats factor – an exploitation of exim design weakness – 29th May 2020
Preface: The severity depends on your configuration, said vendor. It depends on how close to the standard configuration your Exim runtime configuration is. Jun 2019 Headline news on 28th May 2020 – The National Security Agency (NSA) has released a cybersecurity advisory on Russian advanced persistent threat (APT) group Sandworm exploiting a vulnerability—CVE-2019-10149—in Exim Mail…
-
Is it a cyber attack or a design change? (Sunday, May 17, 2020 (EDT))
Preface: High-level state-backed APT groups wreak havoc on cyber world. Does this attack only in short time or it will become a constant activities? Security focus: Information technology professional will relies on DHS (US Homeland security) news update as a standard security alert indicator. For example, I am the follower. Found by tonight that the…
-
Little-Known Linux Exploits is being weaponize – 15th May 2020
Preface: The following information will continue the theme released yesterday. For review the details by yesterday, please follow this link – www.antihackingonline.com/cyber-war/high-level-state-backed-apt-groups-entrenched-in-plenty-of-servers-for-nearly-a-decade-using-little-known-linux-exploits-14th-may-2020/ About the theme: Sound can tell, according to statistic provided by Microsoft. Cyber security attack is rapidly growth especially in education area within past 30 days. Perhaps Healthcare and pharmaceuticals area cyber attack…
-
High-level state-backed APT groups entrenched in plenty of servers for nearly a decade Using Little-Known Linux Exploits – 14th May 2020
Preface: According to statistical data, most organizations store data in cloud platforms operating in Linux based environment. Statistics show that, compared with the Windows operating system, Linux coverage rate exceeds 75%. Background: Linux system commonly using drive by downloads on an infected website. For instance you install program on Linux sometimes require specify library file…
-
For Malicious Cyber Activity, US Homeland Security provides visibility to the world – 13th May 2020
Preface: It is impossible to rely on small group of expert to track malicious activities on the Internet. In fact, it needs strong financial support. This is reality, maybe this is a long-running game. Background: US Homeland Security issue an evaluation article on hostile country malware and phishing attacks motion. Perhaps you may ask? Can…
-
Apocalypse: Unknown secret plan – project citing Mirai malware and intend to exploit IoT design weakness triggers cyber attack (29th Mar 2020)
Preface: The Greece Myth – During the war against Cronus, the Cyclops gave Lightning Fire to Zeus as weapon. Meanwhile Poseidon received Trident, and Hades achieve Invisible Helmet. Background: The strategic outsourced concept of IT services not limited to commercial In-house IT team. It is also practiced in intelligence circles. The group claimed that it…
-
APT Group attack major focus: time window before release and patched (19th Feb 2020)
Preface: In normal circumstance, the remediation of vulnerabilities is time consumption. Even though Software-based vulnerabilities policy allow up to 90 days for the vendor to provide a patch. Background: It looks that existing period of time can be happen plenty of matters. So far APT Group have talented and knowledge to discover the defect of…
-
About Emotet malware (2019)
Preface: Emotet malware found in 2015. But he is still aggressive nowadays. It shown that it is a long life cyber attack product . Details: Australian Cyber Security Centre (ACSC) released an advisory that Emotet malware widespread in rapidly. The Emotet malware is distributed mostly by means of phishing email that contains either links to…
-
Oct 2019 – When hostile countries are prepared to take military action. They took cyber attacks as a 1st step.
Preface: Both ransomware and malware are powerful cyber attack tools. This is equivalent to the army entering a hostile country. Background: On yesterday 21st Oct 2019, NSA and NCSC release joint advisory on Turla Group Activities article. The attack target is the aspx shell. It appeared to use these ASPX shells to preparing 2nd round…