Show Navigation

Public
- Public
- Network
- Groups
- Popular
- People

Notices tagged with malware

lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 20-May-2023 12:43:01 EDT lnxw48a1

https://nu.federati.net/url/290474 [www bleepingcomputer com]

#Malware found on #NodeJS #NPM registry
In conversation Saturday, 20-May-2023 12:43:01 EDT from nu.federati.net permalink
Attachments
1. npm packages hide TurkoRAT malware in what looks like a NodeJS EXE
  
  from BleepingComputer
  
  Researchers have discovered multiple npm packages named after NodeJS libraries that even pack a Windows executable that resembles NodeJS but instead drops a sinister trojan.
lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 20-May-2023 12:03:22 EDT lnxw48a1

Yax filing site #efile.com was serving #malware #JavaScript and #PHP files in early April. No information on how the attackers gained access. https://nu.federati.net/url/290472 [www bleepingcomputer com]
In conversation Saturday, 20-May-2023 12:03:22 EDT from nu.federati.net permalink
Attachments
1. IRS-authorized eFile.com tax return software caught serving JS malware
  
  from BleepingComputer
  
  eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware.
lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 17-Dec-2022 13:44:16 EST lnxw48a1
in reply to
- lnxw48a1
Speaking of that, the 2022-December Windows updates include some developer certificate revocations. They were being used to sign malicious drivers. If you have not updated yet, it is #time_to_update.

> "In these attacks, the attacker had already gained administrative privileges on compromised systems prior to use of the drivers," Microsoft wrote, adding that its "investigation revealed that several developer accounts for the Microsoft Partner Center were engaged in submitting malicious drivers to obtain a Microsoft signature."

> The IT giant stressed there had been no compromise of its own network and systems; this was a case of rogue developers submitting bad drivers, and waiting for Microsoft to wrongly OK them, and then use the code in the wild against victims, we're told.

#Win10 #Win11 #Windows_Update #malware #patch_tuesday

In conversation Saturday, 17-Dec-2022 13:44:16 EST from nu.federati.net permalink
lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 11-Jun-2022 16:57:15 EDT lnxw48a1
- GeniusMusing
https://nu.federati.net/url/286651 [arstechnica com]

> Researchers have unearthed a discovery that doesn’t occur all that often in the realm of malware: a mature, never-before-seen Linux backdoor that uses novel evasion techniques to conceal its presence on infected servers, in some cases even with a forensic investigation.

> On Thursday, researchers from Intezer and The BlackBerry Threat Research & Intelligence Team said that the previously undetected backdoor combines high levels of access with the ability to scrub any sign of infection from the file system, system processes, and network traffic. Dubbed Symbiote, it targets financial institutions in Brazil and was first detected in November.

/via @geniusmusing

#security #linux #backdoor #malware
In conversation Saturday, 11-Jun-2022 16:57:15 EDT from nu.federati.net permalink
Attachments
1. New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
  
  from Ars Technica
  
  Symbiote gives remote access to any account. Normal methods don't detect it.
lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Sunday, 22-May-2022 12:35:22 EDT lnxw48a1

Embedding #MSOffice #OOXML documents into #PDFs to carry #malware https://nu.federati.net/url/286454 [www bleepingcomputer com]
In conversation Sunday, 22-May-2022 12:35:22 EDT from nu.federati.net permalink
Attachments
1. PDF smuggles Microsoft Word doc to drop Snake Keylogger malware
  
  from BleepingComputer
  
  Threat analysts have discovered a recent malware distribution campaign using PDF attachments to smuggle malicious Word documents that infect users with malware.
lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 14-Nov-2020 02:27:13 EST lnxw48a1

2020-11-11: #Google Play identified as main distribution channel for #Android #malware https://nu.federati.net/url/277913 [www zdnet com]
In conversation Saturday, 14-Nov-2020 02:27:13 EST from nu.federati.net permalink
Attachments
1. Play Store identified as main distribution vector for most Android malware | ZDNet
  
  from ZDNet
  
  Mammoth research project using Symantec (now NortonLifeLock) telemetry confirms what everyone suspected.
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Thursday, 27-Aug-2020 03:53:18 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#Microsoft #Windows TCO: #CyberScoop #ProprietarySoftware ☞ Weeks after #malware disruption, New York hospital is getting back online https://www.cyberscoop.com/samaritan-medical-center-new-york-malware-recovery/
In conversation Thursday, 27-Aug-2020 03:53:18 EDT from pleroma.site permalink
Attachments
1. Weeks after malware disruption, New York hospital is getting back online
  
  By Sean Lyngaas from CyberScoop
  
  Weeks after malware disruption, New York hospital is getting back online
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Monday, 24-Aug-2020 05:58:17 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
Well, technically #windows is #malware "The problem was difficult to diagnose under Windows 10. Neither Windows Event logger nor the drive’s self-monitoring, analysis, and reporting technology (SMART) report indicated any problem." https://www.ctrl.blog/entry/m2-performance-fretting.html
In conversation Monday, 24-Aug-2020 05:58:17 EDT from pleroma.site permalink
Attachments
1. Fretted M.2 connector cause difficult-to-diagnose performance slowdown
  
  from Ctrl blog
  
  A fretted PCIe M.2 connector between the mainboard and an M.2 SATA SSD drive caused intermittent and difficult-to-diagnose Windows 10 performance problems.
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Thursday, 20-Aug-2020 04:09:46 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
● NEWS ● #SecurityWeek #ProprietarySoftware ☞ Ongoing Campaign Uses #Javascript Smuggling for #Malware Delivery https://www.securityweek.com/ongoing-campaign-uses-html-smuggling-malware-deliver

In conversation Thursday, 20-Aug-2020 04:09:46 EDT from pleroma.site permalink
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Friday, 14-Aug-2020 07:12:15 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#ArsTechnica , #ZDNet and #BleepingComputer Still Misreporting to Blame #Linux for #Malware One Can Merely Add to Linux (Distracting From Systems With Back Doors, Such as Windows) http://techrights.org/2020/08/14/distracting-back-doors/
In conversation Friday, 14-Aug-2020 07:12:15 EDT from pleroma.site permalink
Attachments
1. Ars Technica, ZDNet and Bleeping Nonsense Still Misreporting to Blame 'Linux' for Malware One Can Merely Add to Linux (Distracting From Systems With Back Doors, Such as Windows)
  
  from Techrights
  
  A revised (spun) 'report' that we alluded to last night is spreading to more sites today or overnight; but it's totally distorting the situation to make "Linux" seem a lot more dangerous than it really is
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Tuesday, 11-Aug-2020 17:54:16 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#Odyssey preloading with #malware now https://www.notebookcheck.net/Odyssey-Blue-A-powerful-x86-and-Arduino-machine-that-supports-Windows-10-and-Linux.485011.0.html #vista10 #microsoft
In conversation Tuesday, 11-Aug-2020 17:54:16 EDT from pleroma.site permalink
Attachments
1. Odyssey Blue: A powerful x86 and Arduino machine that supports Windows 10 and Linux
  
  from Notebookcheck
  
  The Odyssey Blue is a mini-PC that Seeedstudio has based on the ODYSSEY-X86J4105800. The device is equipped with an Intel Celeron processor and an Arduino-compatible coprocessor for added flexibility.
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Tuesday, 28-Jul-2020 10:35:05 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#Linux #malware could soon be a thing of the past http://www.tuxmachines.org/node/140192#comment-25951 #security #REMnux

In conversation Tuesday, 28-Jul-2020 10:35:05 EDT from pleroma.site permalink
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Tuesday, 21-Jul-2020 16:46:04 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#deleteChrome https://www.business-standard.com/article/technology/update-your-google-chrome-browser-now-to-avoid-hackers-says-cert-in-120072100333_1.html it's #malware anyway. #google #spyware #proprietarySoftware
In conversation Tuesday, 21-Jul-2020 16:46:04 EDT from pleroma.site permalink
Attachments
1. Update your Google Chrome browser now to avoid hackers, says CERT-In
  
  The government's cybersecurity agency has warned Google Chrome users in the country to immediately upgrade to the new Chrome browser version to avoid remote hackers from intruding into their machines
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Friday, 17-Jul-2020 01:37:04 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
● NEWS ● #Bloomberg #NSOGroup ☞ #Facebook Beats NSO’s Attempt to Crush #WhatsApp #Malware Suit https://www.bloomberg.com/news/articles/2020-07-17/facebook-beats-nso-s-attempt-to-crush-whatsapp-malware-hack-suit
In conversation Friday, 17-Jul-2020 01:37:04 EDT from pleroma.site permalink
Attachments
1. Facebook Beats NSO’s Attempt to Crush WhatsApp Malware Suit
  
  from Bloomberg.com
  
  WhatsApp and its parent Facebook Inc. can press ahead with a lawsuit accusing Israeli spyware maker NSO Group of creating accounts to send malware to mobile phones of 1,400 people to snoop on them.
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Tuesday, 14-Jul-2020 04:15:07 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#Germany bill provides network traffic redirection to install state trojans http://www.tuxmachines.org/node/139846 #de #gnu #linux #malware

In conversation Tuesday, 14-Jul-2020 04:15:07 EDT from pleroma.site permalink
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Monday, 13-Jul-2020 04:23:55 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#deleteFacebook #malware https://www.theregister.com/2020/07/10/facebook_sdk_login_problems/ #facebook IS #malware
In conversation Monday, 13-Jul-2020 04:23:55 EDT from pleroma.site permalink
Attachments
1. So Darned Kind of you, Facebook: SDK bug sends popular iOS apps crashing earthwards
  
  You're unlikely to hear someone inflicting their iOS Spotify playlist on the bus today
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Thursday, 09-Jul-2020 08:50:14 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
Dual-booting two piece of #malware https://beebom.com/dual-boot-chrome-os-windows-10/
In conversation Thursday, 09-Jul-2020 08:50:14 EDT from pleroma.site permalink
Attachments
1. How to Dual Boot Chrome OS and Windows 10 (Supports Play Store)
  
  By Arjun Sha from Beebom
  
  How to Dual Boot Chrome OS and Windows 10 (Supports Play Store)
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Tuesday, 23-Jun-2020 15:49:26 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#deleteWindows #vista10 #keylogger #malware #criminalEnterprise https://reddit.com/r/Windows10/comments/hct0mj
In conversation Tuesday, 23-Jun-2020 15:49:26 EDT from pleroma.site permalink
Attachments
1. File without filename could not get a thumbnail source.
  
  r/Windows10 - Are we going to get treated to spam popups advertising Edge and having it duplicate our data from Firefox without asking every time Microsoft decides to update it from now on?
  
  from reddit
  
  290 votes and 150 comments so far on Reddit
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Thursday, 18-Jun-2020 18:34:27 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
Hey, #intel , will this detect your #minix -derived #malware that's an #nsa back door? https://www.networkworld.com/article/3562365/intel-tiger-lake-server-processors-to-feature-built-in-malware-protection.html

In conversation Thursday, 18-Jun-2020 18:34:27 EDT from pleroma.site permalink
Dr. Roy Schestowitz (罗伊) (schestowitz@pleroma.site)'s status on Wednesday, 17-Jun-2020 20:11:23 EDT Dr. Roy Schestowitz (罗伊)
- Dr. Roy Schestowitz (罗伊)
#microsoft is #googlebombing the word "LINUX" again to promote #malware ... #vista10 ... and you can see who's playing along with this agenda

In conversation Wednesday, 17-Jun-2020 20:11:23 EDT from pleroma.site permalink

Before

Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.

All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.

Switch to desktop site layout.