Top 10 Stories

The same hackers who turned out the lights at Ukrainian utilities last December have been running attacks against the same country’s banks over recent months. Security firm ESET reports that the gang slinging the TeleBots malware against Ukrainian banks shares a number of similarities with the BlackEnergy group, which conducted attacks against the energy industry in Ukraine in December, 2015 and January, 2016. ESET thinks that the BlackEnergy crew has evolved into what it calls the TeleBots...

Fallen web giant Yahoo! has been branded negligent for failing to tackle the prodigious challenge of upgrading its MD5 password security before someone billion accounts were stolen. The security-battered organisation revealed today that attackers had stolen more than a billion accounts in August 2013 in history's biggest breach. Hackers stole names, addresses, phone numbers, and MD5 hashed passwords in a coup for social engineers who could use the information to compromise the very identity of users. View full...

Well this is just peachy – cybercriminals are actively using a malvertising campaign that infects routers and even Android devices. If the router is pwned, then every device connected to that router is pwned. Proofpoint researchers warned that cyber thugs are using a new and improved version of the DNSChanger exploit kit (EK) for this malvertising campaign. View full story ORIGINAL SOURCE: Computerworld

Russian security company Dr. Web, who also makes a PC antivirus solution bearing the same name, warns that it discovered a total of 26 smartphone models running Android and infected with malware that’s injected in the stock firmware they are shipped with. View full story ORIGINAL SOURCE: Softpedia

A variety of Netgear router models are vulnerable to a simple hack that allows attackers to take almost complete control of the devices, security experts warned over the weekend. The critical bug allows remote attackers to inject highly privileged commands whenever anyone connected to the local Netgear network clicks on a malicious Web link, a researcher who uses the online handle Acew0rm reported on Friday. The link, which can be disguised to appear innocuous, then...

A single typo from a Clinton campaign aide gave Russian hackers access to a decade's worth of emails, some 60,000 in total, owned by Clinton campaign chairman John Podesta. Clinton campaign aide Charles Delavan wrote in an email to one of Podesta's aides. later published by Wikileaks, that Podesta must "immediately" change his password after the exhausted chairman clicked on a phishing email requesting he change his Gmail password. Delavan then urged Podesta's aide to ensure two...

Around two months ago, a hacker called Anna-senpai published the source code of a piece of malware designed to automatically scan the internet and infect easy-to-hack devices to turn them into zombie computers to be used in cyberattacks. That, in theory, gave every hacker in the world an easy chance to build a botnet of hacked Internet of Things ready to be enlisted in massive Distributed Denial of Service (DDoS) attacks. And, in fact, unknown hackers launched a turf war to control the...

Security patches for Windows, macOS, iOS and other Apple firmware, and a host of Adobe products, were emitted this week. The final scheduled patch dump of the year sees Microsoft deliver fixes for multiple products, while Apple has security updates for iOS, macOS, Safari, and iTunes, and Adobe patches nine products including Flash Player and InDesign. View full story ORIGINAL SOURCE: The Register

Fake emails purporting to be from Amazon have been sent to thousands of Christmas shoppers around the world. The mass email scam targets Christmas shoppers in an attempt to steal their bank card details. The email tries to trick Amazon users by claiming that there has been a problem with a recent order. To resolve the problem, the email asks customers to confirm ‘certain information’, or  they will not be able to access their Amazon...

Google Chrome is one of the most used Internet browsers but lately, it is being used by cybercriminals and scammers to infect users with adware, malware and other malicious programs due to the low level of scrutiny on its web store. Recently, an Internet security firm Cyren discovered a malicious Chrome extension spreading nude celebrity PDFs all over the Internet including on Facebook. You might be thinking what’s the big deal about spreading PDFs? Well, that’s just a beginning of...