WannaCry - it's not over
WannaCry's encryptor was deactivated by a kill switch. But the worm component is still active. It crawls the internet for vulnerable systems and captures them where possible. It has recently been hitting US hospitals. In addition, the case WannaCry shows that it could have been worse. Time to…
Warning: Massive "WannaCry" Ransomware campaign launched
An outbreak of the latest version of "WannaCry" has been claiming victims in several countries. The speed and ferocity of the outbreak has taken many by surprise. Researchers are as yet puzzled as to the origin of the outbreak which hit 11 countries within just three hours. So far Spain and Russia…
Attacks on SS7 - how safe is my data?
A few days ago reports emerged that attackers have exploited a weakness in a communication protocol which is used for SMS services by mobile carriers. This has increased the susceptibility of processes such as mTAN significantly. We will take a look at the facts and backgrounds as well as measures…
Twitter hack: thousands of accounts hijacked
Many Twitter users in Europe woke up to some unexpected Tweets: many Twitter accounts suddenly posted messages which attacked the Dutch and German governments. Unknown attackers were able to gain access to the millions of accounts through an app which provides statistics.
Bochum Ransomware Maktub: Fake Invoices used as bait
A current spam wave floods email inboxes: Fake invoices with genuine user data (names and even postal addresses) are used as bait. The attackers furthermore misuse existing companies' names and data to complete the sophisticated scam. Victims will be infected with the Maktub Ransomware, currently…
Ransomware "Golden Eye" targeting German businesses
A new ransomware is currently targeting German companies. This latest malware from the James Bond-themed Janus Cybercrime Collective combines two existing ransomwares (Petya and Misha) and leaves infected systems completely unusable: GoldenEye first encrypts files and then the hard drive. Read more…
Attacks on large companies: all day, every day
According to media reports, the ThyssenKrupp industrial group has been targetted by cyber criminals. The company is said to have fallen victim to a cleverly designed hacker attack as early as February this year. The company's own CERT (Cyber Emergency Response Team) has uncovered the attack in…
Firefox 0-Day targeting Tor-Users
Yesterday a Firefox 0-Day was made publicly available. We have analyzed the exploit from begin to end and talk about the different stages, including: the exploit techniques that aim to defeat general protection mechanisms like ASLR and DEP, as well as more advanced protection mechanisms like Export…
Bochum CEO Fraud: using allegedly secret transactions as bait
Scammers' profits, based on CEO fraud, are rising worldwide. The losses for companies of all kinds and sizes go into the millions! This holiday season is expected to see a peak in attempted new attacks. Even G DATA was recently hit by such an attack, but its employees reacted attentively and…
Bochum Buying presents for Christmas online? Without doubt!
Holiday season is about to start and online shopping for Christmas is trending! Our experts forewarn you about current phishing and malware threats in our German G DATA SecurityBlog.
Karsten Hahn
Virus Analyst
Tim Berghoff
Security Evangelist
