IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

Fake WhatApp Update for Android Dodges Google Play Vetting Process

November 9, 2017 By aatech

As much as Google has tried to prevent malware from being uploaded to its official Play mobile application store, the company has kept tripping up—with almost alarming regularity in recent months. The latest incident involves a fake version of the WhatsApp instant messenger for Android that was downloaded at least 1 million times over the […]

IT News

Advantech Patches Code Execution Flaws in SCADA Product

November 8, 2017 By aatech

An update released by Taiwan-based industrial automation company Advantech for its WebAccess product patches two remote code execution vulnerabilities, ICS-CERT reported on Thursday.Advantech WebAccess is a browser-based software package for human-machine interfaces (HMI) and supervisory control and data acquisition (SCADA) systems. According to ICS-CERT, WebAccess versions prior to 8.2_20170817 are affected by a stack-based buffer […]

IT News

‘unCAPTCHA’ Defeats Google CAPTCHA with 85% Accuracy

November 7, 2017 By aatech

unCAPTCHA, an artificial intelligence-based automated system designed at the University of Maryland, can break Google’s audio-based reCAPTCHA challenges with an accuracy of 85%. Google has been working on refining and strengthening reCAPTCHA for years, a Turing test-based methodology for proving that website users aren’t robots, and recently extended it to mobile websites for Android users. […]

IT News

Apple Patches KRACK Vulnerability in iOS 11.1

November 6, 2017 By aatech

Apple has patched iOS, macOS and other products to protect against the KRACK vulnerability recently disclosed in the WPA2 Wi-Fi security protocol.KRACK, short for key re-installation attack, allows an attacker within range of a victim’s Wi-Fi network to read encrypted traffic with varying degrees of difficulty. Many vendors had patched KRACK in their respective products […]

IT News

Backdoor Attacks From Windigo Operation Still Active

November 3, 2017 By aatech

Windigo, a malicious operation uncovered over three years ago, continues to be active despite a takedown attempt in 2014 and the sentencing of one conspirator in August 2017. At the core of Windigo was Linux/Ebury, an OpenSSH backdoor and credential stealer that was estimated to have infected over 25,000 servers worldwide during a two and […]

IT News

Mozilla Raises Concerns Over DigiCert Acquiring Symantec CA

November 2, 2017 By aatech

Mozilla has raised some concerns regarding DigiCert acquiring Symantec’s website security and related public key infrastructure (PKI) solutions after major web browser vendors announced that certificates issued by the security firm would no longer be trusted. Due to a series of incidents involving mississued TLS certificates, Mozilla and Google want Symantec and its partners to […]

IT News

VPN, Web Sessions Exposed to DUHK Crypto Attack

November 1, 2017 By aatech

A vulnerability in the outdated ANSI X9.31 random number generator (RNG) can allow attackers to recover encryption keys and read data passing through VPN connections and encrypted web browser sessions, researchers warned. The vulnerability has been dubbed DUHK (Don’t Use Hard-coded Keys) and it has been found to affect the products of at least a […]

IT News

‘Bad Rabbit’ Ransomware Attack Hits Russia, Ukraine

October 31, 2017 By aatech

Several major organizations in Russia and Ukraine were hit in the past few hours by a ransomware named “Bad Rabbit.” The incident reminds of the massive attack involving NotPetya malware, which ended up costing companies millions of dollars. Few details are known so far about the Bad Rabbit attack, which has the potential to cause […]

IT News

Personal Data of Millions of Malaysians, Sold for Bitcoins

October 30, 2017 By aatech

Last Thursday, Lowyat reported news of “one of the biggest data breaches ever in Malaysian history” – compromising millions of Malaysians’ privacy.The article was taken down temporarily, by request of MCMC, but it is now back up. MCMC has since released a press statement, announcing that an investigation is underway. According to a tip off […]

IT News

Locky Uses DDE Attack for Distribution

October 27, 2017 By aatech

While continuing to spread via spam emails sent by the Necurs botnet, the Locky ransomware has switched to new attack techniques in recent campaigns, in an attempt to evade detection and improve infection rate. One of the methods involves the use of the Dynamic Data Exchange (DDE) protocol, which has been designed to allow Windows […]