Mastodon en masto.es

0 publicaciones0 participantes0 publicaciones hoy

Pyrzout :vm:Fake DeepSeek AI Installers, Websites, and Apps Spreading Malware <a href="https://hackread.com/fake-deepseek-ai-installers-websites-apps-malware/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hackread.com/fake-deepseek-ai-installers-websites-apps-malware/</a> <a href="https://social.skynetcloud.site/tags/ArtificialIntelligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ArtificialIntelligence</a> <a href="https://social.skynetcloud.site/tags/ScamsandFraud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ScamsandFraud</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/SEOPoisoning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SEOPoisoning</a> <a href="https://social.skynetcloud.site/tags/DeepSeekR1" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DeepSeekR1</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/DeepSeek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DeepSeek</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/Chatbot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chatbot</a> <a href="https://social.skynetcloud.site/tags/Fraud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fraud</a> <a href="https://social.skynetcloud.site/tags/Scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Scam</a> <a href="https://social.skynetcloud.site/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>

Juan LoboPor favor, expandir lo máximo posible entre vuestros conocidos el mensaje de que no copien nunca nada desde el navegador tras ejecutar Windows + R porque te lo dice un pop-up. No. Caca. Windows + R y después Control + V no, estás ejecutando un comando de powershell malicioso.Un problema está siendo esto de los loaders con el Click-Fix, se está extendiendo como la pólvora este vector de ataque. Yo creo que los grupos criminales no se han puesto con esto antes porque es difícil entrar así, necesitas la complicidad activa del usuario, cómo va ser buena idea decirle a la gente "oye, ábrete el ejecutor de comandos y pega este comando que te doy y dale a enter para ejecutarlo en tu equipo", no es como el engaño fácil del click del phishing. Pero oye, quién iba a decir que todo el mundo sigue las instrucciones y lo ejecuta. Estamos teniendo una oleada de esta técnica, por increíble que parezca.<a href="https://masto.es/tags/ciberseguridad" class="mention hashtag" rel="tag">#ciberseguridad</a> <a href="https://masto.es/tags/seopoisoning" class="mention hashtag" rel="tag">#seopoisoning</a> <a href="https://masto.es/tags/clickfix" class="mention hashtag" rel="tag">#clickfix</a>

OTX BotSIEM agent being used in SilentCryptoMiner attacksA global malware campaign targeting mainly Russian-speaking users has been distributing cryptocurrency mining malware through fake software download sites, Telegram channels, and YouTube videos. The multi-stage infection chain uses unusual techniques for persistence and evasion, including hiding malicious payloads in legitimate file signatures and abusing the Wazuh SIEM agent as a backdoor. The final payload injects the SilentCryptoMiner into explorer.exe to mine cryptocurrencies like Monero. The attackers use SEO poisoning, social engineering, and multiple persistence mechanisms to maintain access. While primarily focused on cryptomining, some variants can also steal cryptocurrency wallet addresses and take screenshots.Pulse ID: 6703a4b33a02dffbd52f2427 Pulse Link: <a href="https://otx.alienvault.com/pulse/6703a4b33a02dffbd52f2427" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/6703a4b33a02dffbd52f2427</a> Pulse Author: AlienVault Created: 2024-10-07 09:06:59Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/BackDoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BackDoor</a> <a href="https://social.raytec.co/tags/CryptoMiner" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptoMiner</a> <a href="https://social.raytec.co/tags/CryptoMining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CryptoMining</a> <a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/Russia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Russia</a> <a href="https://social.raytec.co/tags/SEOPoisoning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SEOPoisoning</a> <a href="https://social.raytec.co/tags/SMS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMS</a> <a href="https://social.raytec.co/tags/SocialEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SocialEngineering</a> <a href="https://social.raytec.co/tags/Telegram" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Telegram</a> <a href="https://social.raytec.co/tags/YouTube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YouTube</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/cryptocurrency" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptocurrency</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AlienVault</a>

RandyAnybody have some thoughts on how to chase down all the SEO poison sites I'm seeing associated with this campaign? I'm easily seeing dozens, but suspect it's hundreds if not thousands.There's two things I know so far. They're all using .de for the TLD and their title is empty. The google search I'm using is this.powerlifting meets maryland site:.de title:""<a href="https://infosec.exchange/tags/SEOPoisoning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SEOPoisoning</a> <a href="https://infosec.exchange/tags/ThreatHunting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatHunting</a>

RandyHey! They got a new graphic for the fake captcha notification allow page. At least the first I've noticed it. I guess I got tired of seeing that same old robot every time. This SEO poisoned site even has a handy sitemap. The compromised site appears to have a number of different poisoned page sets each with their own sitemap. But surprisingly not very much shows up in a site: search in google.bettysarmy[.]com sortyellowapples[.]com firstblackphase[.]com haxbyq[.]com shbzek[.]com ulmoyc[.]com sizepigwed[.]live<a href="https://infosec.exchange/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatIntel</a> <a href="https://infosec.exchange/tags/SEOPoisoning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SEOPoisoning</a>

Búsquedas recientes

Opciones de búsqueda

Administrado por:

Estadísticas del servidor:

#seopoisoning