Tenable

AUGUST 4, 2022

Analyzing the Vulnerabilities Associated with the Top Malware Strains of 2021. International cybersecurity agencies issue a joint alert outlining the top malware strains of 2021. While malware is used for a variety of purposes, the government agencies point out that ransomware is a primary use case. Background. Description.

Malware 74

Malware Windows SMB Groups 74

Tenable

MARCH 8, 2022

This month’s update includes patches for: NET and Visual Studio. Windows SMB Server. Mass exploitation of that vulnerability was observed in the wild by the WannaCry ransomware , which remains one of the most destructive malware events to date. NET and Visual Studio Remote Code Execution Vulnerability. 3 Critical.

Windows 100

Windows Authentication SMB .Net 100

AlienVault

SEPTEMBER 24, 2018

2018 seems to be a time for highly profitable cryptominers that spread over SMB file-shares. Following my analysis on ZombieBoy in July, I found a new malware sample that I’m calling MadoMiner. However, MadoMiner is much, much, larger, in terms of: The size of the malware; The amount of systems infected; and. Installation.

Malware 40

Malware SMB .Net Architecture 40

Tenable

JULY 13, 2021

NET Runtime. Windows SMB. While Microsoft rates this as “Exploitation Less Likely,” it is important to consider that malware variants commonly look to escape VMs and infect the host machine, so patching this flaw should remain a priority despite Microsoft’s risk assessment. Microsoft Windows Codecs Library. OpenEnclave.

Windows 53

Windows Software Review Malware SMB 53

AlienVault

JULY 18, 2018

Continuing the 2018 trend of cryptomining malware, I’ve found another family of mining malware similar to the “massminer” discovered in early May. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit. exe obtains the ip of the victim by connecting to ip[dot]3222[dot]net. Installation.

Malware 40

Malware SMB Analysis System 40

Tenable

AUGUST 19, 2022

Vulnerabilities associated with 2021’s top malware. Right after the Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) outlined the top malware of 2021, Tenable’s Security Response Team identified vulnerabilities associated with these malicious strains. CVE-2017-0144. CVE-2017-0199.

IoT 52

IoT Malware Windows Guidelines 52