RedLine/Vidar Abuses EV Certificates, Shifts to Ransomware

Credit to Author: Hitomi Kimura| Date: Wed, 13 Sep 2023 00:00:00 +0000

In this blog, we investigate how threat actors used information-stealing malware with EV code signing certificates and later delivered ransomware payloads to its victims via the same delivery method.

Read more

Update Chrome now! Google patches critical vulnerability being exploited in the wild

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Chrome

Tags: CVE-2023-4863

Tags: WebP

Tags: buffer overflow

Tags: 116.0.5845.187/.188

Chrome users are being urged to patch a critical vulnerability for which an exploit is available.

(Read more…)

The post Update Chrome now! Google patches critical vulnerability being exploited in the wild appeared first on Malwarebytes Labs.

Read more

Microsoft Teams used to deliver DarkGate Loader malware

Categories: Business

Categories: News

Tags: Microsoft Teams

Tags: DarkGate

Tags: Loader

Tags: Trojan

Tags: Sharepoint

Tags: AutoIt

Researchers have found a new distribution method for the DarkGate Loader which circumvents the security features in Microsoft Teams.

(Read more…)

The post Microsoft Teams used to deliver DarkGate Loader malware appeared first on Malwarebytes Labs.

Read more

Two Apple issues added by CISA to its catalog of known exploited vulnerabilities

Categories: Exploits and vulnerabilities

Categories: News

Tags: Blastpass

Tags: citizenlab

Tags: pegasus

Tags: nso

Tags: cisa

Tags: apple

Tags: cve-2023-41064

Tags: cve-2023-41061

Tags: buffer overflow

CISA has added two recently discovered Apple vulnerabilities to its catalog of known exploited vulnerabilities.

(Read more…)

The post Two Apple issues added by CISA to its catalog of known exploited vulnerabilities appeared first on Malwarebytes Labs.

Read more

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Credit to Author: BrianKrebs| Date: Tue, 12 Sep 2023 22:36:01 +0000

Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their own zero-day patching to do.

Read more