Top IT Security Bloggers

Symantec Security Response Blogs
  • マイクロソフト月例パッチ(Microsoft Patch Tuesday)- 2018 年 7 月

    Symantec Security Response Blogs
    今月は、53 個のパッチがリリースされており、そのうち 17 件が「緊急」レベルです。



    Publish to Facebook: 


    No


    いつものことですが、ベストプラクティスとして以下のセキュリティ対策を講じることを推奨します。
    read more
  • Thrip: 人工衛星、通信、防衛産業を狙うスパイ集団

    Symantec Security Response Blogs
    シマンテックによる人工知能ベースの TAA(Targeted Attack Analytics)で、広範囲にわたる新しいスパイ活動が明らかになりました。



    Publish to Facebook: 


    No


    最近のサイバースパイ活動で特に大きい変化のひとつは、「現地調達型」の戦術を多くのグループが採用するようになったことです。「現地調達型」というのはシマンテックの呼び方で、オペレーティングシステムの機能や正規のネットワーク管理ツールを利用して被害者のネットワークに侵入する行為を指します。その狙いは 2 つです。まず、既存の機能やツールを使うことで、攻撃者は被害者のネットワークに紛れ込み、無数にある正規のプロセスにその攻撃活動を隠そうとします。次に、そうしたツールを利用する悪質な動作が発覚したとしても、攻撃元の特定を困難にすることができます。
    read more
  • 2018 年 2 月の最新インテリジェンス

    Symantec Security Response Blogs
    攻撃グループ「Chafer」が盛んな活動を続け、全世界のスパム率は下がった一方、メールマルウェアはわずかながら上昇に転じました。



    Publish to Facebook: 


    No



    2 月の「Latest Intelligence(最新インテリジェンス)」が発表されました。脅威を取りまく環境の概況も踏まえながら、その内容をご紹介します。2 月には、攻撃グループ「Chafer」が中東の組織を狙って活発な活動を展開しました。メールマルウェアの比率は依然として低かった一方、Facebook のアカウントにログインしてアカウント情報を盗み出そうとするモバイルマルウェアが出現しています。
    read more
  • Latest Intelligence for October 2017

    Symantec Security Response Blogs
    Symantec research shows users to be twice as likely to encounter threats through email as any other infection vector, and the spam rate declines slightly for the second month in a row.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    Some of the key takeaways from October’s Latest Intelligence, and the threat landscape in general, include research on the most likely infection vectors, malicious security tools, and a scam targeting tax professionals.
    read more
  • Sowbug: Cyber espionage group targets South American and Southeast Asian governments

    Symantec Security Response Blogs
    Group uses custom Felismus malware and has a particular interest in South American foreign policy.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast Asia and appears to be heavily focused on foreign policy institutions and diplomatic targets. Sowbug has been seen mounting classic espionage attacks by stealing documents from the organizations it infiltrates. 

    Click to Tweet: 


    Who are #Sowbug? New #espionage group very focused on foreign policy, diplomatic targets



    Click to Tweet Acct: 


    @threatintel


    read more
  • Ramnit worm: Still turning up in unlikely places

    Symantec Security Response Blogs
    Over 90 Ramnit-infected apps removed from Google Play.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    Contributors: Shaun Aimoto, Martin Zhang

    Click to Tweet: 


    Nope, Ramnit worm not ported to #Android. It’s an infected HTML file that drops Ramnit on Win PCs



    Click to Tweet Acct: 


    @threatintel


    read more
  • BadRabbit: New strain of ransomware hits Russia and Ukraine

    Symantec Security Response Blogs
    BadRabbit is self-propagating and has many similarities to the June 2017 Petya / NotPetya outbreak.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    A new strain of ransomware called BadRabbit (Ransom.BadRabbit) began spreading yesterday, October 24, 2017, with the vast majority of infection attempts seen in Russia.

    Click to Tweet: 


    BadRabbit ransomware uses at least three third-party open-source tools



    Click to Tweet Acct: 


    @threatintel


    read more
  • Android malware on Google Play adds devices to botnet

    Symantec Security Response Blogs
    Symantec has found eight apps infected with the Sockbot malware on Google Play that can add compromised devices to a botnet and potentially perform DDoS attacks.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    Contributor: Martin Zhang

    Click to Tweet: 


    Not all #Android #Minecraft PE skin apps are made equal. Some are malware in disguise. Choose carefully.



    Click to Tweet Acct: 


    @threatintel


    read more
  • Necurs attackers now want to see your desktop

    Symantec Security Response Blogs
    The Necurs botnet is back again, this time spreading a downloader that takes screen grabs of victims’ desktops and reports encountered errors back to the attackers.



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    Contributors: Eduardo Altares, Wei Wang Dai, and Mingwei Zhang

    Click to Tweet: 


    Attackers need operational intelligence too. #Necurs downloader now also collecting OPINTEL.



    Click to Tweet Acct: 


    @threatintel


    read more
  • KRACKs: What you need to know about the new Wi-Fi encryption vulnerabilities

    Symantec Security Response Blogs
    Wi-Fi security under threat from newly discovered WPA2 vulnerabilities



    Publish to Facebook: 


    No






    Twitter Card Style: 
    summary


    What is KRACKs?
    read more

Editor's Recommendations

Solution Centres

Events

View all events Submit your own security event

Latest Videos

More videos

Blog Posts

Media Release

More media release