-
AA18-337A: SamSam Ransomware
Original release date: December 03, 2018 Summary The Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) and the Federal Bureau of Investigation (FBI) are issuing this activity alert to inform computer network defenders about SamSam...- News
- Thread
- access control backup brute force cybersecurity data security dhs exploit kit fbi incident response malware multi-factor authentication network security ransomware rdp remote desktop samsam suspicious activity system update tor vulnerability
- Replies: 1
- Forum: Security Alerts
-
TA18-331A: 3ve – Major Online Ad Fraud Operation
Original release date: November 27, 2018 Systems Affected Microsoft Windows Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). DHS and FBI are releasing this TA to...- News
- Thread
- 3ve ad fraud boaxxe cybercrime dhs fbi kovter malware network security windows
- Replies: 0
- Forum: Security Alerts
-
TA18-275A: HIDDEN COBRA – FASTCash Campaign
Original release date: October 02, 2018 Systems Affected Retail Payment Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS), the Department of the Treasury (Treasury), and the Federal Bureau of Investigation...- News
- Thread
- atm banking cyber threats cybersecurity dhs fastcash fbi fraud hidden cobra incident response iso 8583 malicious software malware network defense payment methods risk mitigation spyware technical alert treasury vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA18-149A: HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm
Original release date: May 29, 2018 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS and FBI...- News
- Thread
- brambul brute force cybersecurity dhs fbi hidden cobra indicators of compromise intrusion detection ip address joanap malware mitigation network defense network security remote access security trojan worm
- Replies: 0
- Forum: Security Alerts
-
TA18-145A: Cyber Actors Target Home and Office Routers and Networked Devices Worldwide
Original release date: May 25, 2018 Systems Affected Small office/home office (SOHO) routers Networked devices Network-attached storage (NAS) devices Overview Cybersecurity researchers have identified that foreign cyber actors have compromised hundreds of thousands of home and office...- News
- Thread
- blackenergy cyber actors cybersecurity data loss dhs exploit fbi firmware intelligence malware network devices network security network traffic reboot router soho threats vpnfilter
- Replies: 0
- Forum: Security Alerts
-
***Important FBI warns to restart your router immediately !***
Ars Technica just posted a article about the FBI stating for people & businesses to restart their routers, modems, etc. immediately to avoid a ongoing Russia hack. Article link : FBI tells router users to reboot now to kill malware infecting 500k devices- brkkab
- Thread
- alert ars technica awareness cyber devices fbi hacking incident information malware modem network protection reboot restart router russia safeguard security users
- Replies: 9
- Forum: Windows Security
-
TA18-106A: Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices
Original release date: April 16, 2018 Systems Affected Generic Routing Encapsulation (GRE) Enabled Devices Cisco Smart Install (SMI) Enabled Devices Simple Network Management Protocol (SNMP) Enabled Network Devices Overview This joint Technical Alert (TA) is the result of analytic efforts...- News
- Thread
- command and control critical infrastructure cybersecurity dhs espionage exploitation fbi hacking indicators of compromise infrastructure international security legacy protocols malware mitigation network devices russian actors smart install snmp telnet tftp
- Replies: 0
- Forum: Security Alerts
-
TA18-086A: Brute Force Attacks Conducted by Cyber Actors
Original release date: March 27, 2018 Systems Affected Networked systems Overview According to information derived from FBI investigations, malicious cyber actors are increasingly using a style of brute force attack known as password spraying against organizations in the United States and...- News
- Thread
- attack indicators brute force cloud solutions cyber threats cybersecurity data exfiltration dhs email security fbi federated authentication malicious actors multi-factor authentication network intrusion nist standards security policies single sign-on tactics threat mitigation victim environment
- Replies: 0
- Forum: Security Alerts
-
TA18-074A: Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors
Original release date: March 15, 2018 Systems Affected Domain Controllers File Servers Email Servers Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- critical infrastructure cyber kill chain cybersecurity dhs email security energy sector fbi incident response indicators of compromise industrial control systems intrusion detection malicious software malware network security remote access russian politics spear phishing technical alert threat actors watering hole attack
- Replies: 0
- Forum: Security Alerts
-
TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip address malicious software malware mitigation network defense network security north korea spear phishing trojan user agent volgmer
- Replies: 0
- Forum: Security Alerts
-
TA17-318A: HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- command and control cyber threat reporting cybersecurity dhs fallchill fbi hidden cobra incident response indicators of compromise ip address malware mitigation network defense network security north korea remote administration tool system information tls
- Replies: 0
- Forum: Security Alerts
-
TA17-293A: Advanced Persistent Threat Activity Targeting Energy and Other Critical...
Original release date: October 20, 2017 Systems Affected Domain Controllers File Servers Email Servers Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- apt credential harvesting cyber espionage cybersecurity dhs energy sector fbi ics incident response indicators of compromise industrial control systems malicious software malware network security scada spear phishing staging targets technical alert threat detection watering hole attack
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- botnet cyber threats cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip address lazarus malware mitigation network security north korea patch management security advisory threat intelligence vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA17-132A: Indicators Associated With WannaCry Ransomware
Original release date: May 12, 2017 | Last revised: May 19, 2017 Systems Affected Microsoft Windows operating systems Overview According to numerous open-source reports, a widespread ransomware campaign is affecting various organizations with reports of tens of thousands of infections in...- News
- Thread
- backup bitcoin cybersecurity dhs exploitation extended security updates fbi iocs malicious software malware microsoft ms17-010 network security phishing prevention ransomware threat response vulnerability wannacry windows
- Replies: 0
- Forum: Security Alerts
-
TA16-336A: Avalanche (crimeware-as-a-service infrastructure)
Original release date: December 01, 2016 | Last revised: December 14, 2016 Systems Affected Microsoft Windows Overview “Avalanche” refers to a large global network hosting infrastructure used by cyber criminals to conduct phishing and malware distribution campaigns and money mule schemes...- News
- Thread
- antivirus avalanche botnet cybercrime data theft denial of service dhs fast flux fbi financial institutions impact malware os upgrade password change personal data phishing ransomware remediation security windows
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security best practices threat detection vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA17-132A: Indicators Associated With WannaCry Ransomware
Original release date: May 12, 2017 | Last revised: May 13, 2017 Systems Affected Microsoft Windows operating systems Overview According to numerous open-source reports, a widespread ransomware campaign is affecting various organizations with reports of tens of thousands of infections in as...- News
- Thread
- backup cybersecurity data loss dhs encryption fbi incident response malware ms17-010 patch phishing prevention ransomware remediation smb threats vulnerability wannacry windows windows 10
- Replies: 0
- Forum: Security Alerts
-
TA16-336A: Avalanche (crimeware-as-a-service infrastructure)
Original release date: December 01, 2016 Systems Affected Microsoft Windows Overview “Avalanche” refers to a large global network hosting infrastructure used by cyber criminals to conduct phishing and malware distribution campaigns and money mule schemes. The United States Department of...- News
- Thread
- antivirus avalanche botnet crimeware cybersecurity data theft denial of service dhs fast flux fbi fraud malicious software malware phishing ransomware remediation security updates sensitive data user safety windows
- Replies: 0
- Forum: Security Alerts
-
AAEH Malware: Overview, Impact, and Mitigation Strategies for Multiple Windows Systems
Original release date: April 09, 2015 Systems Affected Microsoft Windows 95, 98, Me, 2000, XP, Vista, 7, and 8 Microsoft Server 2003, Server 2008, Server 2008 R2, and Server 2012 Overview AAEH is a family of polymorphic downloaders created with the primary purpose of downloading other...- News
- Thread
- aaeh antivirus beebone credential theft cybersecurity dhs downloader fbi impact malware mitigation network security password polymorphic prevention ransomware rar files removal tool systems affected zip files
- Replies: 0
- Forum: Security Alerts
-
Windows 8 ***SOLVED*** Here's another one against Microsoft
I just came across a interesting must read article about Microsoft and encryption. It's a must read. Here's the link.http://www.howtogeek.com/199171/heres-why-windows-8.1s-encryption-doesnt-seem-to-scare-the-fbi/- brkkab
- Thread
- article encryption fbi microsoft security windows 8.1
- Replies: 6
- Forum: Windows Security