Newsletter

Networking Monitoring News – Jan 2016

CryptoWall 4.0

CryptoWall has caused massive damage and has infected scores of businesses and home user machines. CryptoWall 3.0 has made an estimated US $325 Million this year. The new version is pretending to be a resume inside a zipped e-mail attachment. These resumes, though, were actually JavaScript files that when executed would download an executable, save it to the Windows %Temp% folder, and then execute it. Make sure you have working back-ups and if you have something similar to a Network Appliance make sure you are making use of snapshots to help recover data.

If you are a ContentCatcher: Email customer we have blocked .js (JavaScript) files by default and can block a zip file containing these .js files at the first layer.

DELL

Researchers have found that if a website is configured in a certain way, an attacker can abuse a Dell self-signed certificate that comes installed on your Dell machines to extract a device-identifying code (Service Tag). This code could be useful information for carrying out tech support scams against your users.

The certificate is not malware or adware. Rather, it was intended to provide the system service tag to Dell online support allowing them to quickly identify the computer model.

Here is a link to the uninstaller that will remove this certificate.

https://dellupdater.dell.com/Downloads/APP009/eDellRootCertFix.exe

Ron Samson

Share
Published by
Ron Samson

Recent Posts

7 Best SOC Services for Cybersecurity in Financial Services: What You Need to Know

Financial institutions face more cyber threats than almost any other industry. Banks, credit unions, investment…

2 weeks ago

What’s the Best SIEM Software for Security Management in Healthcare: Top Solutions

Healthcare organizations face unique cybersecurity challenges that make choosing the right Security Information and Event…

56 years ago

5 Top Cybersecurity Trends 2025: How Automation and AI Will Enhance Incident Response

The cybersecurity industry continues to transform as threats become more sophisticated and attack surfaces expand.…

3 weeks ago

Why the Best SIEM for Security Operations Is Crucial for Cloud-Based Environments

Cloud computing has transformed how businesses operate, but it's also created new security challenges that…

3 weeks ago

Top 10 SIEM Tools for Integrating with Existing Security Systems

Security Information and Event Management (SIEM) platforms have become central to modern cybersecurity strategies. These…

4 weeks ago

Best EDR Software: Key Features to Ensure Maximum Protection

Cybersecurity threats are getting more sophisticated every day. Traditional antivirus programs can't keep up with…

4 weeks ago