Category: Internet of Things

IT threat evolution Q3 2020. Non-mobile statistics

November 20, 2020by Black Hat Sec

These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Quarterly figures According to Kaspersky Security Network, in Q3: Kaspersky solutions blocked 1,416,295,227 attacks launched from online resources across the globe. 456,573,467 unique URLs were recognized as malicious by Web Anti-Virus components. Attempts to run malware for stealing money from online bank accounts were stopped on the computers of 146,761 unique users. Ransomware attacks were defeated on the computers of 121,579 unique users. Our File…

Security Feeds ⁄ Botnets ⁄ Internet of Things ⁄ Featured ⁄ Cybercrime ⁄ DDoS reports ⁄ DDoS-attacks

DDoS attacks in Q3 2020

October 28, 2020by Black Hat Sec

News overview Q3 was relatively calm from a DDoS perspective. There were no headline innovations, although cybercriminals did continue to master techniques and develop malware already familiar to us from the last reporting period. For example, another DDoS botnet joined in the assault on Docker environments. The perpetrators infiltrated the target server, created an infected container, and placed in it the Kaiten bot (also known as Tsunami), paired with a cryptominer. The Lucifer botnet, which first appeared on researchers’ radar last quarter, and knows…

Security Feeds ⁄ Industrial threats ⁄ Internet of Things ⁄ Featured ⁄ Targeted Attacks ⁄ Digital Forensics ⁄ Security conference

SAS@Home is back this fall

September 30, 2020by Black Hat Sec

The world during the pandemic prepares many surprises for us. Most of them are certainly unpleasant: health risks, inability to travel or meet old friends. One of these unpleasant surprises awaited us in the early spring, when the organizing team of the beloved SAS conference were forced to announce that the event would be postponed to the fall. Later, another difficult but correct decision was made: to cancel the SAS conference altogether this year. At the same time, it was the pandemic that gave…

Security Feeds ⁄ Internet of Things

Looking for sophisticated malware in IoT devices

September 23, 2020by D4RkN

One of the motivations for this post is to encourage other researchers who are interested in this topic to join in, to share ideas and knowledge and to help build more capabilities in order to better protect our smart devices. Research background Smart watches, smart home devices and even smart cars – as more and more connected devices join the IoT ecosystem, the importance of ensuring their security becomes patently obvious. It’s widely known that the smart devices which are now inseparable parts of…

IT threat evolution Q2 2020. PC statistics

September 3, 2020by Black Hat Sec

IT threat evolution Q2 2020. Review IT threat evolution Q2 2020. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Quarterly figures According to Kaspersky Security Network, in Q2: Kaspersky solutions blocked 899,744,810 attacks launched from online resources in 191 countries across the globe. As many as 286,229,445 unique URLs triggered Web Anti-Virus components. Attempted infections by malware designed to steal money via online access to bank accounts were logged on the…

Security Feeds ⁄ APT ⁄ Internet of Things ⁄ Featured ⁄ Targeted Attacks ⁄ Cybercrime ⁄ Security technology

GReAT Ideas follow-up

July 15, 2020by Black Hat Sec

On June 17, we hosted our first “GReAT Ideas. Powered by SAS” session, in which several experts from our Global Research and Analysis Team shared insights into APTs and threat actors, attribution, and hunting IoT threats. Here is a brief summary of the agenda from that webinar: Linking attacks to threat actors: case studies by Kurt Baumgartner Threat hunting with Kaspersky’s new malware attribution engine by Costin Raiu Microcin-2020: GitLab programmers ban, async sockets and the sock by Denis Legezo The next generation IoT…

Security Feeds ⁄ Malware Statistics ⁄ Financial malware ⁄ Internet of Things ⁄ Featured ⁄ Vulnerabilities and exploits ⁄ Google Android ⁄ Mobile Malware ⁄ Malware reports ⁄ Miner ⁄ Trojan Banker ⁄ Apple MacOS ⁄ Vulnerability Statistics

IT threat evolution Q1 2020. Statistics

May 20, 2020by Black Hat Sec

These statistics are based on detection verdicts for Kaspersky products received from users who consented to providing statistical data. Quarterly figures According to Kaspersky Security Network, Kaspersky solutions blocked 726,536,269 attacks launched from online resources in 203 countries across the globe. A total of 442,039,230 unique URLs were recognized as malicious by Web Anti-Virus components. Attempted infections by malware designed to steal money via online access to bank accounts were logged on the computers of 249,748 unique users. Ransomware attacks were defeated on the…

Security Feeds ⁄ Botnets ⁄ Internet of Things ⁄ Featured ⁄ DDoS reports ⁄ DDoS-attacks

DDoS attacks in Q1 2020

May 6, 2020by Black Hat Sec

News overview Since the beginning of 2020, due to the COVID-2019 pandemic, life has shifted almost entirely to the Web — people worldwide are now working, studying, shopping, and having fun online like never before. This is reflected in the goals of recent DDoS attacks, with the most targeted resources in Q1 being websites of medical organizations, delivery services, and gaming and educational platforms. For instance, attackers in mid-March tried to disable the website of the US Department of Health and Human Services (HHS).…

Security Feeds ⁄ Botnets ⁄ Internet of Things ⁄ Featured ⁄ DDoS reports ⁄ DDoS-attacks ⁄ DNS Amplification

DDoS attacks in Q4 2019

February 13, 2020by Black Hat Sec

News overview In the past quarter, DDoS organizers continued to harness non-standard protocols for amplification attacks. In the wake of WS-Discovery, which we covered in the previous report, cybercriminals turned to Apple Remote Management Service (ARMS), part of the Apple Remote Desktop (ARD) application for remote administration. The first attacks using ARMS were registered back in June 2019, and by early October the protocol was being used by DDoS-as-a-service providers; such attacks have since become widespread. According to the BinaryEdge portal, at the beginning…