Hacks

Multiple zero-day vulnerabilities in  digital video recorders  (DVRs) for surveillance systems manufactured by Taiwan-based LILIN have been exploited by botnet operators to infect and co-opt vulnerable devices into a family of denial-of-service bots. The findings come from Chinese security firm  Qihoo 360 's Netlab team, who say different attack groups have been using LILIN DVR zero-day vulnerabilities to spread  Chalubo ,  FBot , and  Moobot  botnets at least since August 30, 2019. Netlab researchers said they reached out to LILIN on January 19, 2020, although it wasn't until a month later the vendor released a  firmware update  (2.0b60_20200207) addressing the vulnerabilities. The development comes as IoT devices are increasingly being used as an  attack surface  to launch DDoS attacks and as proxies to engage in various forms of cybercrime. What Are the LILIN Zero-Days About? The flaw in itself concerns a chain of vulnerab...

Cyber police seized a huge bot farm that used to send large scale  spam  through various services such as email and social media. The investigation was carried out by  Ukraine police in  six different regions. Attackers use homes, garages, apartments, and rented offices to carry out malicious activities. To hide their anonymity and to anonymize the bot farm they used  TOR  and the  VPN  services. Further investigation reveals that the bot farm is operated exclusively for client interest. The bot farm lets attackers register accounts on various online platforms that require user phone numbers to complete the verification process, such as social media, email, payment systems, etc.. They also sold some verified accounts at a higher price to the interested clients. By having the verified accounts threat actors use them for spamming purposes. Police seized several multi-SIM card modems, these modems would have at least 32 sim card slots...