IT News | Extol Corporation Sdn Bhd

IT News

DDoS Attacks Become More Frequent in Q3, with Linux Dominating

November 14, 2017 By aatech

The share of Linux botnets is continuing to grow—accounting for 70% of attacks in Q3, compared to 51% in Q2. According to Kaspersky Lab’s Q3 2017 DDoS Intelligence Report, experts have continued to see an increase in the number of countries where resources have been targeted, with 98 countries subjected to DDoS attacks in the […]

Latest Cybersecurity News from the World

IT News

Russian ‘Fancy Bear’ Hackers Abuse Blogspot for Phishing

November 13, 2017 By aatech

The cyber espionage group known as Fancy Bear, which is widely believed to be backed by the Russian government, has been abusing Google’s Blogspot service in recent phishing attacks. Threat intelligence firm ThreatConnect spotted the use of the blogging service while analyzing attacks aimed at Bellingcat, a group of investigative journalists that uses open source […]

IT News

Poisoned Google Search Results Lead to Banking Trojan

November 10, 2017 By aatech

A recently observed Zeus Panda banking Trojan attack used poisoned Google search results for specific banking related keywords to infect users, Cisco Talos researchers warn. As part of this attack, the actor behind Zeus Panda used Search Engine Optimization (SEO) to make their malicious links more prevalent in the search results. By targeting financial-related keyword […]

IT News

Fake WhatApp Update for Android Dodges Google Play Vetting Process

November 9, 2017 By aatech

As much as Google has tried to prevent malware from being uploaded to its official Play mobile application store, the company has kept tripping up—with almost alarming regularity in recent months. The latest incident involves a fake version of the WhatsApp instant messenger for Android that was downloaded at least 1 million times over the […]

IT News

Advantech Patches Code Execution Flaws in SCADA Product

November 8, 2017 By aatech

An update released by Taiwan-based industrial automation company Advantech for its WebAccess product patches two remote code execution vulnerabilities, ICS-CERT reported on Thursday.Advantech WebAccess is a browser-based software package for human-machine interfaces (HMI) and supervisory control and data acquisition (SCADA) systems. According to ICS-CERT, WebAccess versions prior to 8.2_20170817 are affected by a stack-based buffer […]

IT News

‘unCAPTCHA’ Defeats Google CAPTCHA with 85% Accuracy

November 7, 2017 By aatech

unCAPTCHA, an artificial intelligence-based automated system designed at the University of Maryland, can break Google’s audio-based reCAPTCHA challenges with an accuracy of 85%. Google has been working on refining and strengthening reCAPTCHA for years, a Turing test-based methodology for proving that website users aren’t robots, and recently extended it to mobile websites for Android users. […]

IT News

Apple Patches KRACK Vulnerability in iOS 11.1

November 6, 2017 By aatech

Apple has patched iOS, macOS and other products to protect against the KRACK vulnerability recently disclosed in the WPA2 Wi-Fi security protocol.KRACK, short for key re-installation attack, allows an attacker within range of a victim’s Wi-Fi network to read encrypted traffic with varying degrees of difficulty. Many vendors had patched KRACK in their respective products […]

IT News

Backdoor Attacks From Windigo Operation Still Active

November 3, 2017 By aatech

Windigo, a malicious operation uncovered over three years ago, continues to be active despite a takedown attempt in 2014 and the sentencing of one conspirator in August 2017. At the core of Windigo was Linux/Ebury, an OpenSSH backdoor and credential stealer that was estimated to have infected over 25,000 servers worldwide during a two and […]

IT News

Mozilla Raises Concerns Over DigiCert Acquiring Symantec CA

November 2, 2017 By aatech

Mozilla has raised some concerns regarding DigiCert acquiring Symantec’s website security and related public key infrastructure (PKI) solutions after major web browser vendors announced that certificates issued by the security firm would no longer be trusted. Due to a series of incidents involving mississued TLS certificates, Mozilla and Google want Symantec and its partners to […]

IT News

VPN, Web Sessions Exposed to DUHK Crypto Attack

November 1, 2017 By aatech

A vulnerability in the outdated ANSI X9.31 random number generator (RNG) can allow attackers to recover encryption keys and read data passing through VPN connections and encrypted web browser sessions, researchers warned. The vulnerability has been dubbed DUHK (Don’t Use Hard-coded Keys) and it has been found to affect the products of at least a […]