Worrid about WannaCry, Forget it "SambaCry Flaws" to hack Linux

SambaCry Flaws

 A seven year old critical remote code execution vulnerability (CVE 2017-7494) in Samba networking software that allows a remote hacker to take full control of a vulnerable Linux and Unix machines has recently been discovered. Researchers predicted that the SambaCry Flaw based attacks also have potential to spread just like WannaCry ransomware widely. Kaspersky Lab have captured a malware campaign that is exploiting SambaCry vulnerability to infect Linux computers with cryptocurrency mining software.

After compromising the vulnerable machines using SambaCry vulnerability flaw, attackers execute two payloads on the targeted systems, as:
  • INAebsGB.so — A reverse-shell that provides remote access to the attackers.
  • cblRWuoCc.so — A backdoor that includes cryptocurrency mining utilities such as CPUminer.
"Through the reverse-shell left in the system, the attackers can change the configuration of a miner already running or infect the victim’s computer with other types of malware," Kaspersky researchers say.
Mining cryptocurrencies can be a costly investment as it requires an enormous amount of computing power, but such cryptocurrency mining malware makes it easier for cyber criminals by allowing them to utilize computing resources of compromised systems to make the profit.
This is a great reason for system administrators and ordinary Linux users to update their Samba software to the latest version immediately to prevent future problems.

Comments

Post a Comment

Popular posts from this blog

POS: Security Flaws allows hacker to change price, steal data

Image
Researchers at ERPScan discovered that SAP’s POS product, that is a component of the company’s SAP for Retail giving, was stricken by many flaws. Specifically, the system’s server element, Xpress Server, lacked necessary authorization checks for vital practicality. This allows AN assailant with access to the system to send malicious configuration files to Xpress Server and gain complete management of each the frontend and backend of the PoS system. A hacker will abuse tens of commands, permitting them to steal knowledge from all the credit and debit cards used at the targeted store, and apply special costs and discounts to such that things. These discounts is applied for such that times in order that AN item contains a tiny value only fraudsters visit purchase it. Fraudsters may also got wind of the system in order that their purchases area unit charged to the previous customer’s card. An assailant may also modification the info displayed on a receipt, as well as to s
Read more

"FruitFly" Mac malware: longstanding Mac backdoor discovered

Image
The FBI is presently work many infections tied to a mysterious family of Mac-based malware known as "FruitFly." When asked concerning the threat, a proponent for the Bureau told Motherboard that "as a matter of long policy, the FBI neither confirms nor denies the existence of investigations." however 2 security researchers say the FBI is so work the malware. One of the researchers, Malwarebytes's Thomas Reed, discovered the primary variant of FruitFly back in Jan 2017. At the time, he represented the threat as "a piece of malware in contrast to something I’ve seen before, that seems to possess really been alive, undetected, for a few time." FruitFly one is "extremely oversimplified on the surface," in Reed's estimation. however it distinguishes itself by its use of "ancient" functions to capture screenshots and acquire digital camera access. The malware's binary additionally contains lib jpeg, open ASCII tex
Read more

MalwareTech: Not guilty for unleashing a Kronos banking malware

Image
British cybersecurity researcher credited with serving to curb the recent WannaCry ransomware attack pleaded innocent  to federal charges accuse him of making malicious computer code to steal banking info 3 years past. Marcus Hutchins entered his plea in Wisconsin tribunal, wherever prosecutors charged him and an nameless co-defendant with conspiring to commit pc fraud within the state et al. Authorities arrested the 23-year-old man August. 2 at McCarran International airport in urban center, wherever he was aiming to board a flight to his zero in Ilfracombe, England. He had been in las vegas for DEFCON. Hutchins' professional, Marcia Hofmann, aforementioned when Monday's transient hearing that Hutchins can fight the costs which “when the proof involves lightweight, we have a tendency to square measure assured he are going to be totally guiltless.” “Marcus Hutchins could be a sensible young man and a hero,” Hofmann aforementioned. Hutchins left later during
Read more