Security researchers discover malware that infected 90,000 computers worldwide

Agencies
October 8,2019

Security researchers have discovered that the Smominru malware infected 90,000 machines worldwide during the month of August, with an infection rate of up to 4,700 computers per day.

In its post-infection phase, it steals victim credentials, installs a Trojan module and a cryptominer and propagates inside the network, according to researchers from Guardicore, a data centre and cloud security company.

The botnet uses several methods to propagate, but primarily it infects a system in one of two ways -- either by brute-forcing weak credentials for different Windows services, or more commonly by relying on the infamous EternalBlue exploit, cybersecurity firm Kaspersky said in a blog post last week.

Even though Microsoft patched the vulnerability EternalBlue exploits, which made the WannaCry and NotPetya outbreaks possible, many companies are simply ignoring updates, Kaspersky said.

China, Taiwan, Russia, Brazil and the US have seen the most attacks, but that doesn't mean other countries are out of its scope. For example, the largest network Smominru targeted was in Italy, with 65 hosts infected.

The criminals involved are not too particular about their targets, which range from universities to healthcare providers.

However, one detail is very consistent. About 85 per cent of infections occur on Windows 7 and Windows Server 2008 systems. The rest include Windows Server 2012, Windows XP and Windows Server 2003.

After compromising the system, Smominru creates a new user, called admin$, with admin privileges on the system and starts to download a whole bunch of malicious payloads.

The most obvious objective is to silently use infected computers for mining cryptocurrency (namely, Monero) at the victim's expense.

The malware also downloads a set of modules used for spying, data exfiltration, and credential theft.

On top of that, once Smominru gains a foothold, it tries to propagate further within the network to infect as many systems as possible.

To protect their network, computers, and data from Smominru, users need to update operating systems and other software regularly, Kaspersky said.

It is also important for users to use strong passwords. A reliable password manager that helps you create, manage, and automatically retrieve and enter passwords may help protect you against brute-force attacks.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.

India’s cybersecurity agency warns people of credit card skimming via e-commerce sites

Agencies
July 18,2020

New Delhi, Jul 18: India's national cybersecurity agency CERT-in, has warned people of credit card skimming spreading across the world through e-commerce platforms.

Attackers are typically targeting e-commerce sites because of their wide presence, popularity and the environment LAMP (Linux, Apache, MySQL, and PHP), the Computer Emergency Response Team (CERT-In) said in a notice on Thursday.

Recently, attackers targeted sites which were hosted on Microsoft's IIS server running with the ASP.NET web application framework, it said.

Some of the sites affected by the attack were found to be running ASP.NET version 4.0.30319, which is no longer officially supported by Microsoft and may contain multiple vulnerabilities, CERT-In said.

The notice also included a list of best practices for website developers including the use of the latest version of ASP.NET web framework, IIS web server and database server.

The advisory is based on research by Malwarebytes which found that this skimming campaign likely began sometime in April this year.

Credit card skimming has become a popular activity for cybercriminals over the past few years, and the increase in online shopping during the pandemic means additional business for them, too, Malwarebytes said in a blog post, adding that attackers do not need to limit themselves to the most popular e-commerce platforms.

Researchers from global cybersecurity and anti-virus brand Kaspersky had warned in December last year that more cybercriminal groups will target online payment processing systems in 2020. 

It said that over the past couple of years, so-called JS-skimming (the method of stealing of payment card data from online stores), has gained immense popularity among attackers. 

Kaspersky researchers in their report said they are currently aware of at least 10 different actors involved in these type of attacks.

Their number will continue to grow during the next year, the report said, adding that the most dangerous attacks will be on companies that provide services such as e-commerce as-a-service, which will lead to the compromise of thousands of companies.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.

Market movement to hinge on corporate earnings, COVID-19 trend: Analysts

Agencies
July 19,2020

New Delhi, Jul 19: Indian equities will be driven by a host of factors like corporate earnings, coronavirus cases trend and geo-political developments this week, according to analysts.

Market participants will also keenly watch the progress of monsoon, with experts saying that the farm sector revival will play a key role in lifting the coronavirus-hit economy.

"With no major event, the ongoing earnings season and global cues will continue to dictate the market trend. Besides, the progress of monsoon will also be closely watched," Ajit Mishra, VP - Research, Religare Broking, said.

Globally, the rising coronavirus infections and geo-political tensions have created uncertainty on the economic recovery front.

With India's COVID-19 cases fast approaching the 11 lakh mark, the third-highest behind the US and Brazil, and the death toll nearing 27,000, participants are expected to tread cautiously going forward.

At global level, confirmed COVID-19 cases have crossed 1.4 crore and deaths totalled about 6 lakh.

Markets globally will closely follow developments on the trade and political level between the US and China, according to analysts.

"We would continue witnessing stock-specific action as the earnings season unfold. Though the near-term momentum looks positive, we would advise traders to be cautious, given flaring US-China trade relations, persistent rise in virus cases and implementation of fresh lockdowns in parts of the country," said Siddhartha Khemka, Head - Retail Research, Motilal Oswal Financial Services Ltd.

HDFC Bank will remain in focus on Monday after having announced its June quarter earnings on Saturday.

The lender reported 19.6 per cent rise in its standalone net profit at Rs 6,658.62 crore for April-June 2020; while its income rose to Rs 34,453.28 crore during the quarter.

Other major companies to announce their quarterly results this week are Axis Bank, Bajaj Finance, Hindustan Unilever Limited, Bajaj Auto and ITC.

"Going ahead market participants will closely track the development related to covid vaccine, the rising infection of coronavirus, development on economic activities, corporate earnings and US-China relationship," said Sumeet Bagadia, Executive Director, Choice Broking.

On weekly basis, the Sensex gathered 425.81 points or 1.16 per cent, and the Nifty gained 133.65 points or 1.24 per cent.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.

IndiGo to raise funds worth Rs 4000 crore by issuing equity shares

Agencies
August 11,2020

InterGlobe Aviation, which operates airline major IndiGo, has decided to raise funds worth Rs 4,000 crore. Accordingly, the company will issue equity shares by way of a qualified institutions placement to raise the funds.

The decision was taken by the company's board in its meeting held on Monday.

"We hereby inform you that the Board of Directors of lnterGlobe Aviation limited, at its meeting held today, i.e., August 10, 2020, has considered and approved the raising of funds for an aggregate amount not exceeding INR 4,000 crore through an issue of equity shares by way of a qualified institutions placement, in accordance with the relevant provisions of applicable law and subject to approval of the Company's shareholders and receipt of applicable regulatory approvals," the company said in a regulatory filing.

The decision comes days after the company posted its highest ever quarterly net loss at Rs 2,844.3 crore for the first quarter of 2020-21.

It had posted a profit of Rs 1,203.1 crore in the like period of the previous fiscal.

"IndiGo had a total cash balance of Rs 184,498 million comprising Rs 75,276 million of free cash and Rs 109,222 million of restricted cash. The capitalised operating lease liability was Rs 211,779 million. The total debt (including the capitalised operating lease liability) was Rs 235,516 million," the company had said in a statement last month.

In its outlook, the company said it expects the Q2 fiscal 2021 to be around 40% of Q2 FY20.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.