🚀 Medial just raised $500k in Pre-Series A. Tap to read the announcement. 🎉
Login

News on Medial

Researchers spot cryptojacking attack that disables endpoint protections

ArstechnicaArstechnica · 7m
Researchers spot cryptojacking attack that disables endpoint protections

Researchers have identified sophisticated malware that disables antivirus protections, removes evidence of infection, and permanently installs cryptocurrency-mining software on machines. The malware, named GhostEngine, targets endpoint security solutions and hides any sign of a breach by disabling Windows event logs. Once active, GhostEngine scans for endpoint protection software and uses known vulnerabilities to gain access to the core of the operating system, eventually installing cryptocurrency-mining software that deposits the coins into an attacker-controlled wallet. The malware also establishes persistent access and can act as a backdoor, allowing remote command execution on the infected machine.

2
View Source

Comments

More Like this

SSH protects the world’s most sensitive networks. It just got a lot weaker.

SSH protects the world’s most sensitive networks. It just got a lot weaker.

GPUs from all major suppliers are vulnerable to new pixel-stealing attack

GPUs from all major suppliers are vulnerable to new pixel-stealing attack

Sneaky SSH-Snake malware steals SSH keys - putting your whole network at risk

Sneaky SSH-Snake malware steals SSH keys - putting your whole network at risk

Novel attack against virtually all VPN apps neuters their entire purpose

Novel attack against virtually all VPN apps neuters their entire purpose

Hackers can read private AI assistant chats even though they’re encrypted

Hackers can read private AI assistant chats even though they’re encrypted

Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it

Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

AMD’s trusted execution environment blown wide open by new BadRAM attack

AMD’s trusted execution environment blown wide open by new BadRAM attack

GitHub under attack — millions of malicious cloud repositories bombard website

GitHub under attack — millions of malicious cloud repositories bombard website

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

Download the medial app to read full posts, comements and news.