Threats - Rewterz

June 26, 2019

Rewterz Threat Alert – Echobot Botnet Acquiring Unauthorized System Access

Severity Medium Analysis Summary New Mirai level Botnet Echobot using 26 different exploits for the infection vectors that leveraging the vulnerabilities in Oracle, D-Link, Dell, LINKSYS, […]

June 25, 2019

Rewterz Threat Alert – OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

Severity Medium Analysis Summary Add protection for private keys at rest in RAM against speculation and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and Rambleed. This […]

June 25, 2019

Rewterz Threat Alert – Waterbug Resurfaces with New Tool Kit

Severity High Analysis Summary Campaign 1 Recent Waterbug activity can be divided into three distinct campaigns, characterized by differing toolsets. One campaign involved a new and […]

June 25, 2019

Rewterz Threat Advisory – Critical RCE affects older Diebold Nixdorf ATMs

Severity High Analysis Summary The output of command, there is a service (Spiservice) which running on port 8043. The SpiService.exe is associated with XFS, the Extension […]

June 24, 2019

Rewterz Threat Alert – ServHelper (aka HuadhServHelper) Malware Indicators of Compromise

Severity Medium Analysis Summary ServHelper is a new malware family — best classified as a backdoor first observed in the wild in November 2018. Its name […]

June 24, 2019

Rewterz Threat Alert – Malspam NanoCore RAT Malware – Indicators of Compromise

Severity Medium Analysis Summary NanoCore is high-risk trojan, a remote access tool (RAT). In most cases, this malware is proliferated using spam email campaigns. Criminals send […]

June 21, 2019

Rewterz Threat Alert – TrueBot Malspam campaign – Silence Group

Severity Medium Analysis Summary Silence is a financially motivated threat actor group that has primarily targeted Russian financial institutions. The campaign delivers TrueBot (aka Silence.Downloader) malware […]

June 21, 2019

Rewterz Threat Alert – Ryuk Ransomware Adds Additional Features of IP Address and Computer Name Blacklisting

Severity High Analysis Summary A new variant of the Ryuk Ransomware has been discovered that adds IP address and computer blacklisting so that matching computers will […]

June 20, 2019

Rewterz Threat Alert – Ursnif Malware IoCs

Severity Medium Analysis Summary Ursnif is typically encountered when the user inadvertently opens a malicious file attachment that arrives via a spam email message. Upon execution, […]