Log inRegister

Fraud News

) • December 21, 2018     5 Minutes   

Fraud investigations are inherently complex, and the inputting of variables into case management systems is laborious. Robotic process automation can automate many labor-intensive tasks, freeing up fraud analysts to spend more time on value-added tasks, says Shirley Inscoe, senior analyst at Aite Group.

Inscoe predicts that in 2019, more banks will turn to RPA as concerns about fraud continue to grow.

"Financial institutions who are doing a good job managing fraud investigations and fraud overall are gaining a competitive advantage," Inscoe says in an interview with Information Security Media Group. "They're able to provide better customer service. Even if they are not able to always protect their customers against fraud, they provide better service in handing that situation as it arises."

In this interview (see audio link below photo), Inscoe discusses:

Examples of how RPA can provide efficiencies in fraud investigations; Where RPA fits into the artificial intelligence/maching learning taxonomy; Motivations for RPA adoption in 2019.

Inscoe is a senior analyst with Aite Group, covering fraud, data security, and consumer compliance issues. She brings to Aite Group 30 years of banking experience in enterprise fraud and payments issues. She has served as the chair of the BITS Fraud Reduction Steering Committee and the co-chair of Early Warning Services' Advisory Committee, and has been a member of ABA's deposit account fraud and payment systems committees.

) • December 21, 2018     15 Minutes   

User behavioral analytics can help better detect indicators of potential threats, both external and internal, says Carl Leonard, principal security analyst at Forcepoint.

"Much of what we're seeing from business leaders is that they want to try a new approach that is not threat-centric but instead looks at the behavior of ... malware and of insiders," he says in an interview with Information Security Media Group.

Leonard offers a vision of next-generation security: "Imagine a system where the behavioral analytics spots that something is unusual and malicious so we can adjust the protection mechanism policies in real time to protect the data. That's really the future of threat protection."

In this interview (see audio link below photo) Leonard discusses:

At Forcepoint, Leonard is responsible for enhancing threat protection and threat monitoring technologies in collaboration with the company's global security labs team. He advises customers on the state of the threat landscape and how to enhance their security posture.

) • December 21, 2018     10 Minutes   

Security operation centers are the hub for an organization's threat detection. But organizations can take a number of steps to improve SOC operations, says Kerry Matre of Palo Alto Networks.

"There are quite a few things I've seen in different SOCs that are not working well," Matre says in an interview with Information Security Media Group. "One of the easiest things to fix that I've seen going wrong most of the time is a lot of SOCs don't have a clear mission."

Matre says that those running SOCs need to learn exactly how they fit in the business as well as narrow their scope. SOCs that expand their mission into areas such as incident response, forensics and compliance risk losing their focus and begin missing threats, she contends.

"Write it [the mission] down," she says. "Make sure the rest of the business buys into it. Then those conflicts - those walls between the different groups of an organization - can start to be broken down. That's when the SOC can enable the business."

In this interview (see audio link below photo), Matre discusses:

Why SOCs should keep a narrow focus - investigate, mitigate and respond - to maintain optimal effectiveness; How to ensure tools are used to their full potential; How organizations can define metrics for SOCs that help both analysts and business executives.

Matre is a security operations strategist with Palo Alto Networks. She has assessed more than 150 SOCs, helping organizations with better processes to maintain a focus on threats. Before joining Palo Alto Networks, Matre was director of security portfolio marketing services at Hewlett-Packard Enterprise Security Products and director of product development at MD-IT.

Data Breach , General Data Protection Regulation (GDPR) , Governance

A Summary of the Best Predictions for Next Year(jeremy_kirk) • December 21, 2018    Looking Ahead to 2019: Breaches, Regulations and MorePhoto: Marco Verch, via Flickr/CC

What's ahead for the cybersecurity landscape in 2019? We've received many lists of predictions from vendors and analysts for next year, and we've picked out five of the most interesting ones.

See Also: Cybercrime 2.0: A New Era for the Identity and Authentication Challenge

Paul Barnes, senior director of product strategy, Webroot:

"There will be a state-sponsored service breach of critical infrastructure leading to loss of life and an extended time frame to return to normal operations."

This scenario has been creeping closer to reality. The attacks against Ukraine's power grid in 2015 and 2016 were among the first and most notable examples of how a targeted cyberattack could disrupt critical infrastructure. Those attacks, blamed on a suspected Russian-linked group nicknamed Sandworm, fortunately only resulted in a loss of power and not life. But industrial control systems remain a big concern for national governments. And there's a chance that even if attackers don't intend for their attack to have fatal consequences, fatalities result nonetheless. Fingers crossed (see: Power Grid Malware Platform Threatens Industrial Controls).

Morey Haber, chief technology officer, and Brian Chappell, senior director, enterprise and solutions architecture, BeyondTrust:

"Privileged attack vectors will continue to be the number one root cause of breaches for both consumer and business data. While Gartner has acknowledged that privileged access management is the top security priority for 2018, many organizations are still in denial of their privileged account risks, which frequently stem from poor password management hygiene. 2019 will see even more high-profile breaches. Organizations must discover and manage their privileged accounts because the attack vector is not going away anytime soon, and ugly newspaper headlines will continue to plague boardrooms."

We're written a lot of those ugly headlines this year. Our modest in-house prediction is that we're not going to have any problems finding plenty of those headlines to write in 2019. The risk of takeovers of privilege accounts is one of the greatest challenges facing organizations. Better password management should be a top priority, as well as regular reviews of access controls, deactivation of unused accounts and behavioral monitoring to detect if something strange is going on. But it's a mighty complicated task, and not everyone is going to get it right every time.

Bogdan Botezatu, senior e-threat analyst, BitDefender:

"Here's a positive prediction for a change: Thanks to the EU's renewed efforts to protect personally identifiable information - in the form of the General Data Protection Regulation that took effect in May this year - we should expect fewer 'credential leaks' to occur, or, at least the very least, make the headlines. Security incidents will be more thoroughly contained at an organizational level in an effort to avoid penalties that could forces a business into bankruptcy."

We hope GDPR is driving better account credential storage and security practices. But while larger companies were somewhat ready for GDPR when it went into effect in May, mid-size to smaller ones were still trying to understand and implement its requirements. Undoubtedly, GDPR is proving to be a big motivation to improve IT security, but we think this prediction may be too rosy - as much as we'd like to see fewer credential leaks. At minimum, organizations should use bcrypt for hashing passwords, because it makes it much more difficult for attackers to discover plain-text passwords (see: Fighting Credential Stuffing Attacks).

Tom Kellerman, chief cybersecurity officer, Carbon Black:

"For my semi-bold 2019 prediction, I'm saying that steganography (the practice of concealing a file, message, image or video within another file, message, image or video) makes a comeback."

Steganography is an ingenious practice that stretches back centuries. It involves the concealment of something - like a message or code - in a way that's only decipherable to those in the know. Steganography perfectly applies to software. A few years ago, a version of the notorious Zeus banking Trojan retrieved a crucial configuration file embedded in a jpeg photo. Placing malware components in what appear to be harmless files gives attackers another tool to conceal their activity. The key to keeping persistent access to organizations is staying under the radar, and steganography can help.

The analysts at Forrester:

"The California Consumer Privacy Act will spur other U.S. states to enact privacy laws. While not as comprehensive as the EU's General Data Protection Regulation, California's Consumer Privacy Act of 2018 does give residents some powerful privacy rights. ... Despite recent murmurs from the Senate Commerce Committee, federal government dysfunction means that there's virtually no chance of a comprehensive national privacy law in the next three years. We predict that, by the end of 2019, at least five additional states - including Massachusetts, New Jersey, New York, Vermont and Washington - will pass their own privacy laws, creating a patchwork of rules for firms to comply with. ..."

The freewheeling days of companies selling and sharing personal data with third parties may be coming to an end. In the wake of Facebook's data breaches, Google's problems with its social network and a raft of other personal data leaks this year, lawmakers and the public are increasingly calling for better security, transparency and accountability.

California's Consumer Privacy Act is the strongest among the 50 states. But a mix regulations across the states mean some consumers have more rights than others, which is a landscape that also makes compliance difficult. A federal privacy law that reflects the prevailing wisdom of privacy experts would give companies and consumers reassurance. As Forrester points out, however, that's not likely in the cards. President Donald Trump's administration has sought to reduce regulations, and a Republican-controlled Senate is unlikely to embrace what would be a complicated law that would invariably increase costs on companies (see: Analysis: California's Groundbreaking Privacy Law).

facebook-icon.jpg

A Polish security researcher has published today details and proof-of-concept code that could be used for creating a fully functional Facebook worm.

This code exploits a vulnerability in the Facebook platform that the researcher --who goes online under the pseudonym of Lasq-- has seen being abused in the wild by a Facebook spammer group.

The vulnerability resides in the mobile version of the Facebook sharing dialog/popup. The desktop version is not affected.

Lasq says that a clickjacking vulnerability exists in this mobile sharing dialog that an attacker can exploit through iframe elements. The spammer group who appears to have found this issue before Lasq has been (ab)using this vulnerability to post links on people's Facebook walls.

Lasq explains:

So, yesterday there was this very annoying SPAM campaign on Facebook, where a lot of my friends published a link to what seemed like a site hosted on AWS bucket. It was some link to a french site with funny comics, who wouldn't click it right?

After you clicked on the link, the site hosted on AWS bucket appeared. It asked you to verify if you are 16 or older (in French) in order to access the restricted content. After you clicked on the button, you were indeed redirected to a page with funny comic (and a lot of ads). However in the meantime the same link you just clicked appeared on your Facebook wall.

The researcher said he tracked down the issue at the heart of this problem to Facebook ignoring the "X-Frame-Options" security header for the mobile sharing dialog. According to the industry-approved MDN web docs, this header is used by sites to prevent their code from being loaded inside iframes, and is a primary protection against clickjacking attacks.

Lasq said he reported the issue to Facebook, but the company declined to patch it.

"As expected Facebook declined the issue, despite me trying to underline that this has security implications," he said. "They stated that for the clickjacking to be considered a security issue, it must allow attacker to somehow change the state of the account (so for example disable security options, or remove the account)."

"In my opinion they should fix this," the researcher added. "As you can see this 'feature' can be extremely easily abused by an attacker to trick Facebook users to unwillingly share something on their wall. I cannot stress enough how dangerous this is. This time it was only exploited to spread spam, but I can easily think of much more sophisticated usage of this technique."

The researcher argues that this technique allows threat actors to easily concoct self-propagating messages that spread malware or phishing sites.

Contacted by ZDNet, Facebook played down the issue, as they did with Lasq.

"We appreciate the researcher's report and the time he put into working on this," said a Facebook spokesperson. "We built the current ability for the mobile social plugin/share dialog to be iframed to enable people to have integrated Facebook sharing experiences on 3rd party websites."

"To help prevent abuse, we use clickjacking detection systems for any iframeable plugin product. We continuously improve these systems based on signals we observe," Facebook told us. "Independently of this report, earlier this week we made improvements to our clickjacking detections that mitigate the risks described in the researcher's report."

Side note: Lasq's code doesn't include the clickjacking part, the one that posts content on people's walls, but a simple internet search would provide any bad actor with the details and sample code to build that part and add it to the current PoC. Lasq's code only allows an attacker to load and run unauthorized code from an attacker on a Facebook user's account.

More cybersecurity coverage:

Account takeover is a rapidly growing arena for cybercriminals. How can organizations strengthen both authentication and authorization? Scott Olson of iovation, a TransUnion Company shares his insights.

According to Olson, account takeover fraud is growing as a result of significant, ongoing data breaches that have flooded the dark web with data of all types, not just traditional PII and card data.

"I think that the account takeover epidemic is a result of the fact that data breaches have shifted from personal information like government ID's, social security information and credit card data to account credentials," says Olson, a vice president at iovation. "That's the combination of user IDs and passwords for both existing accounts and potentially future accounts. That is getting into the hands of the fraudsters, it's being traded on the dark web and certainly it's one of the prime targets for attackers out there for even other types of attacks, whether it's phishing or other types of social engineering."

In an interview about account takeover, Olson discusses :

Why account takeover fraud is a growing and strengthening problem; How organizations can strengthen authentication and authorization; Why better authentication and authorization builds customer trust.

Olson is a vice president at iovation, a TransUnion Company. In this role, he leads efforts that focus on strategy, go to market and positioning of our product portfolio. Prior to joining iovation, he founded three businesses and served as vice president at two others that were successfully acquired by Cisco Systems, Symantec Corporation, and Trustwave Holdings.

Here at Motherboard, we are passionate about cybersecurity. We cover stories of hacking and information security every single day. Our goal is to tell you all the most important stories in the world of hackers. Unfortunately, we just can’t get to all the stories, and more often than not, other publications get to them before we do. And that’s OK! It’s how journalism works.

This year, we thought it’d be good to highlight some of those stories. We took inspiration from Bloomberg BusinessWeek Jealousy list, where the magazine highlights other people’s great work.

Call it Motherboard’s Cyber Jealousy list. A humble hat tip to our favorite stories from our fierce competitors. It’s a tribute to the journalists and the stories that gave us a bit of envy, pushed us to be better, and best served the public interest.

Without further ado, here’s a very incomplete list of our favorite stories about hacking and information security that we loved, and that we wish we had done ourselves.

Kaspersky's 'Slingshot' Report Burned An Isis-focused Intelligence Operation (Cyberscoop)

What is a cybersecurity firm’s responsibility around not exposing certain hacking operations? Here, Cyberscoop showed that sometimes companies do decide to unmask campaigns targeting arguably legitimate threats, such as terrorists. We also explored this dilemma in our feature on Kaspersky Lab a few weeks after Chis Bing and Patrick O’Neill’s scoop.

The CIA's Communications Suffered A Catastrophic Compromise. It Started In Iran. (Yahoo News)

The US government and its intelligence apparatus suffered a deadly blow in China in 2011 and 2012, when more than two dozen CIA sources and informants were killed. But it all started in Iran in 2009, when hackers broke into a CIA “internet-based covert communications system,” as revealed in this bombshell report by Zach Dorfman and Jenna McLaughlin.

How Persian Gulf Rivals Turned US Media Into Their Battleground (BuzzFeed News)

Sometimes the best weapon a hacker can use is not an exploit or phishing kit, but the media. If you can discredit your enemy through the relatively cheap method of enticing a journalist with a scoop, you’re onto a winning strategy. Just look at how Guccifier 2.0—a persona allegedly created by the Russian government—distributed the hacked Democrats material too.

Mysterious $15,000 'GrayKey' Promises To Unlock iPhone X For The Feds (Forbes)

This story broke open an entire avenue of reporting for us and others: finally, someone was selling relatively cheap tools for unlocking iPhones, which led to widespread proliferation of the tech not just among the three-letter intelligence agencies of the world, but also among state- and local law enforcement. This has ramifications for all sorts of things in the so-called Going Dark debate, and kicked off a new game of security cat-and-mouse between Apple and Grayshift.

FBI Repeatedly Overstated Encryption Threat Figures To Congress, Public (The Washington Post)

The FBI has been complaining about encryption...well, pretty much since the 1990s. And in the last few years, particularly after Apple refused to help unlock an alleged terrorist’s iPhone, the battle has intensified. This Washington Post scoop showed that the numbers trotted out by FBI officials when talking about how damaging strong encryption is during investigations were overstated and sometimes incorrect. In other words, encryption isn’t as much of an hurdle as the FBI would like us to believe.

Google Plans to Launch Censored Search Engine in China, Leaked Documents Reveal (The Intercept)

Ryan Gallagher not only broke the news that Google was developing a search engine for China, one that would censor terms around human rights and protests, but he’s also remained on top of the story. His reporting sparked widespread protests both internally at Google and among human rights organizations, questions at a Congressional hearing, and, just this week, he reported that Google has hit a major roadblock with the project as disputes have grown internally. This story reminded us—once again—that companies that have a good track record for caring about human rights don’t always stay that way, and that a handful of employees speaking up can change the course of a multi-billion company.

Google Is Helping the Pentagon Build AI for Drones (Gizmodo)

Speaking of Google employees standing up against a controversial program, this story about the internet giant’s secret Pentagon contract broke long before Googlers organized marches to protest their own company. Kate Conger’s relentless reporting on the story led to Google shutting down the program and was one of the original stories that helped kick off a new wave of protests by Silicon Valley employees against their own companies.

Facebook Is Giving Advertisers Access to Your Shadow Contact Information (Gizmodo)

It wasn’t a great year for Facebook’s bosses either. Cambridge Analytica, a constant struggle to moderate content, and some embarrassing breaches affecting millions of people, among a slew of seemingly endless scandals. You may have missed or forgotten this story, but it’s worth your time. Kashmir Hill, with the help of a team of smart researchers, proved how Facebook mines your cell phone’s contact data to suggest new friends on the social network, and to serve you better targeted ads.

Your Apps Know Where You Were Last Night, and They’re Not Keeping It Secret (The New York Times)

Speaking of apps that know too much...there are only a few outlets with the resources, reach, and dedication to take a story and present it in such a way that the general public can really understand a security issue. This is one of those stories—the sharing of location data lifted by apps may not be a new phenomenon, but the Times team produced the definitive piece tangibly explaining what this means for the privacy of everyone with a smartphone.

Thermostats, Locks and Lights: Digital Tools of Domestic Abuse (The New York Times)

We’ve extensively covered how malware is used in cases of domestic violence, stalking, and abuse. This Times piece looked at the next step in that use of technology at home: the Internet of Things. Definitely worth a read if you are concerned with how technology can impact the lives of ordinary, non-technical people. And if you don’t, why are you reading a post about cyber articles?

Russian Troll Farm Hijacked American Teen Girls’ Computers for Likes (The Daily Beast)

As a hacker, Kevin Poulsen brings some of the coolest technological approaches into journalism. Here, Poulsen found a dodgy browser extension belonging to Russia’s controversial troll army, the Internet Research Agency. He then bought the domain linked to it, letting him see what sort of data it was collecting, and from where. He found the IRA’s software on computers all over the place. A great reminder to think how can journalists approach a story from a different, technological angle.

A Quebecer Spoke Out Against The Saudis—Then Learned He Had Spyware On His iPhone (CBC)

What’s the point of writing about malware, spyware, and hacking if you can’t show readers how the technology affects real people? Every great infosec story should have a human angle. This is a great example of that. Former Motherboard editor Matt Braga visited one of the latest victims of government-sponsored hacking, a growing problem that’s putting regular people all over the world in danger.

Gray Hat—Marcus Hutchins’ Profile (New York Magazine)

The security researcher better known as MalwareTech helped stop WannaCry, one of the most virally infectious malware outbreaks ever. Months later, the FBI arrested him for a crime he’s accused to have committed when he was a teen. This in-depth profile tries to answer a universal question in the world of cybersecurity: does a hacker hero always have to have a past? And if so, what should authorities do with them?

Service Meant to Monitor Inmates’ Calls Could Track You, Too (The New York Times)

File this under “companies you probably never heard of doing sketchy things that can affect us all.” The Times scored another huge scoop revealing that Securus Technologies, a firm that provides and monitors inmates phone calls, was letting pretty much anyone track people’s cell phones for a fee. Thanks to Securus, anyone “can find the whereabouts of almost any cell phone in the country within seconds,” according to the investigation. As we found out later, and rather unsurprisingly, Securus wasn’t securing this data at all.

The Crisis of Election Security (The New York Times)

You’ve heard about election hacking for years. Everyone is worried about it, but seemingly no one is doing anything to prevent it. Veteran infosec reporter (and Motherboard contributor) Kim Zetter goes deep into the history and crisis of election security, writing perhaps the definitive piece about the subject. A must-read for anyone who cares about democracy and the integrity of the elections.

The Untold Story Of NotPetya, The Most Devastating Cyberattack In History (Wired)

The outbreak of destructive malware NotPetya never got the attention it deserved, perhaps because it came a few weeks after the headline-grabbing WannaCry ransomware outbreak. Andy Greenberg makes it justice in this thrilling tale, part of his upcoming book, on how NotPetya crippled the largest shipping company in the world. The only downside of this story is that it will make you want to read more, but you’ll have to wait until the book comes out.

In Leaked Chats, Wikileaks Discusses Preference For Gop Over Clinton, Russia, Trolling, And Feminists They Don’t Like (The Intercept)

WikiLeaks and Julian Assange’s fall from grace has been documented over the last few years, but this report built on a treasure trove of leaked chat logs, felt like the nail in the coffin. The Intercept revealed how the secret-spilling organization candidly talked about their preference for the Republican party to win the 2016 election, their thoughts on the “bright, well connected, sadistic sociopath” Hillary Clinton, and some unsavory comments about feminist activists.

Israeli Cyber Firm Negotiated Advanced Attack Capabilities Sale With Saudis, Haaretz Reveals (Haaretz)

The controversial and successful spyware vendor NSO Group has been in the headlines for a couple of years, after researchers caught government hackers using sophisticated hacking tools developed by the company to hack a Dubai-based human rights activist. This investigation by Israeli newspaper Haaretz exposed the behind the scenes story of how Saudi Arabia bought iPhone malware from NSO for more than $200 million.

Russian Hackers Posed As ISIS To Threaten Military Wives (Associated Press)

The threat of ISIS hackers has often been unjustifiably hyped up. But in this deeply reported story, people like Angela Ricketts show that the threat was real enough for some people. The AP’s Raphael Satter talked to several people targeted by ISIS sympathizers, putting a face to the victims of a scary online campaign. We need more stories that focus on the victims of hacking, this was a great example of that. And Satter and his colleagues at the AP have produced several more in the last few months that are also worth your time.

Living with Depression in Tech (Jonathan Zdziarski's personal blog)

Apple security researcher and forensic expert Jonathan Zdziarski here opened up about an incredibly important and often overlooked topic: mental health in tech. Zdziarski powerfully details his own struggle with depression, and at the same time offers a hopeful tale of overcoming it with a lot of hard work, introspection, and learning.

We look forward to more stories like these next year—not just on our own site, but on those of the competition. We’ll also try to have some of these reporters on CYBER, our new infosec podcast, to talk about their biggest stories.

Listen to CYBER, Motherboard’s new weekly podcast about hacking and cybersecurity.

thinkphp.png

Over 45,000 Chinese websites have been under a barrage of attacks from miscreants looking to gain access to web servers, ZDNet has learned.

The attacks have targeted websites built with ThinkPHP, a Chinese-made PHP framework that is very popular among the local web development scene.

All attacks started after Chinese cyber-security firm VulnSpy posted a proof-of-concept exploit for ThinkPHP on ExploitDB, a website popular for hosting free exploit code.

The proof-of-concept code exploits a vulnerability in the framework's invokeFunction method to execute malicious code on the underlying server. The vulnerability is remotely exploitable, as most vulnerabilities in web-based apps tend to be, and can allow an attacker to gain control over the server.

Attacks started within a day

"The PoC was published on December 11, and we saw internet-wide scans less than 24 hours later," Troy Mursch, co-founder of Bad Packets LLC told ZDNet today.

Four other security firms --F5 Labs, GreyNoise, NewSky Security, and Trend Micro-- have also reported similar scans, which have grown in intensity in the following days.

The number of organized threat groups exploiting the new ThinkPHP vulnerability has also grown as well. There are now the original attackers, another group that security experts named "D3c3mb3r," and a group that's using the ThinkPHP vulnerability to infect servers with the Miori IoT malware.

This last group, detected by Trend Micro, also suggests that the ThinkPHP framework might have been used to build control panels of some home routers and IoT devices, as Miori wouldn't be able to function properly on actual Linux servers.

Furthermore, NewSky Security has also detected a fourth group scanning for ThinkPHP-based sites and attempting to run Microsoft Powershell commands.

"The Powershell one is bizarre," Ankit Anubhav, Principal Security Researcher for NewSky Security told ZDNet. "They actually have some code that checks for OS type and runs different exploit code for Linux, but they also run Powershell just to try their luck."

But the biggest of all groups exploiting this ThinkPHP vulnerability is the group they call D3c3mb3r. This group isn't particularly focused on ThinkPHP sites only. This group scans for everything PHP.

"They are very loud on PHP," Anubhav told us. "Mostly looking for web servers and not IoT devices."

But this group, for now, isn't doing anything special. They don't infect servers with cryptocurrency miners or any malware. They simply scan for vulnerable hosts, run a basic "echo hello d3c3mb3r" command, and that's it.

"I am not sure about their motive," Anubhav said.

Over 45,000 vulnerable hosts

According to a Shodan search, there are currently over 45,800 servers running a ThinkPHP-based web app that are reachable online. Over 40,000 of these are hosted on Chinese IP addresses, which makes sense since ThinkPHP's documentation is only available in Chinese, and most likely not used outside the country.

This also explains why most of the attackers looking for ThinkPHP sites are also mostly Chinese.

"So far the only hosts we've seen scanning for ThinkPHP installations have come from China or Russia," Mursch told ZDNet after consulting data in regards to the origin of most these scans.

But you don't need to be Chinese to exploit a vulnerability in Chinese software. As more threat groups will learn about this new easy way to hack into web servers, attacks on Chinese sites will intensify.

F5 Labs has also published a technical analysis of the ThinkPHP vulnerability and how the exploit code works, here.

More cybersecurity coverage:

  1. The Secret World Of Teenagers Hacking Fortnite
  2. Another State Announces a HIPAA Breach Settlement
  3. 2 Chinese Nationals Indicted for Cyber Espionage
  4. Facebook Sued in U.S. Over Cambridge Analytica

Page 330 of 354