Unlimited Balance in Alopeyk Account — Only for Study Purpose

InfoSec Write-ups - Medium-- Unlimited Balance in Alopeyk Account — Only for Study PurposeFigure1: Unlimited Balance in Alopeyk AccountAlopeyk (https://alopeyk.com/) is an Iranian Online Transportation Service. One of its famous services is the motorcycle service. Alopeyk is one of the most affordable transportation options in Iran. Anyone can download the Alopeyk app for iOS or Android and create an … Continue reading Unlimited Balance in Alopeyk Account — Only for Study Purpose

Fake COVID-19 survey hides ransomware in Canadian university attack

Malwarebytes Labs-- This post was authored by Jérôme Segura with contributions from Hossein Jazi, Hasherezade and Marcelo Rivero. In recent weeks, we’ve observed a number of phishing attacks against universities worldwide which we attributed to the Silent Librarian APT group. On October 19, we identified a new phishing document targeting staff at the University of … Continue reading Fake COVID-19 survey hides ransomware in Canadian university attack

Scammers are spoofing bank phone numbers to rob victims

Malwarebytes Labs-- It can be a very convincing trick… “You can check the number in your display online sir. You’ll see I’m really calling from your bank.” That is, of course, if you are unaware that phone numbers can be spoofed. Then again, they wouldn’t be successful scammers if they weren’t convincing. If you suggest … Continue reading Scammers are spoofing bank phone numbers to rob victims

WebGoat Client Side lessons

InfoSec Write-ups - Medium-- Bypass front-end restrictions 2Bypass front-end restrictions lesson 2For this lesson we have to send a request bypassing the restrictions on the page, let’s go ahead and fill up and submit the formRequest on Burp HistoryRight, now that we have the request, let’s change it so it contains “non-allowed” dataAltered requestHere we have the same … Continue reading WebGoat Client Side lessons

[Webinar and eBook]: Are You’re Getting The Best Value From Your EDR Solution?

The Hacker News-- Many companies rely on Endpoint Detection and Response (EDR) solutions as their primary security tool to protect their organizations against cyber threats. EDR was introduced around eight years ago, and analysts now peg the EDR market size as $1.5 to $2.0 billion in annual revenue globally, expecting it to quadruple over the … Continue reading [Webinar and eBook]: Are You’re Getting The Best Value From Your EDR Solution?

TrickBot Linux Variants Active in the Wild Despite Recent Takedown

The Hacker News-- Efforts to disrupt TrickBot may have shut down most of its critical infrastructure, but the operators behind the notorious malware aren't sitting idle. According to new findings shared by cybersecurity firm Netscout, TrickBot's authors have moved portions of their code to Linux in an attempt to widen the scope of victims that could be targeted. … Continue reading TrickBot Linux Variants Active in the Wild Despite Recent Takedown