Google security official on election threats, spearphishing
October 19, 2018
POLITICO – GOOGLE EMAIL SECURITY GURU SPEAKS — MC recently caught up with Mark Risher, director of product management at Google with an emphasis on security and privacy. A few highlights: — Election security threats are broader than one country or one group of people, Risher said. “One of the headlines that shows up often […]
New Report from NSFOCUS Analyzes 27 Million Attacks in H1 Cybersecurity Insights Report
October 18, 2018
SANTA CLARA, Calif., October 18, 2018 – NSFOCUS, a leader in holistic hybrid security solutions, today released its H1 Cybersecurity Insights report, which highlights the observations of the NSFOCUS Threat Intelligence center, a security research organization created by NSFOCUS for implementing an intelligent security 2.0 strategy and improving the cybersecurity ecosystem. NSFOCUS analyzed traffic from […]
XBash Malware Security Advisory
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/nsfocus7.jpg)
October 18, 2018
On September 17, 2018, Unit42 researchers published an analysis of a new malware family XBash on its official blog. According to them, XBash was developed by the Iron Group, a cybercrime organization that has been active since 2016. The malware was named XBash based on the name of the malicious code’s original main module. XBash combines functions of ransomware, coinminers, botnets, and worms to target Linux and Microsoft Windows servers. (more…)
Git RCE Vulnerability (CVE-2018-17456)Security Advisory
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/banner_141.jpg)
October 17, 2018
1 Vulnerability Overview
Recently, the Git project disclosed CVE-2018-17456, a vulnerability in Git that can cause arbitrary code execution when a user clones a malicious repository. An attacker can take control of a target host by exploiting this vulnerability and at the same time using social engineering methods such as phishing. Git encourages all users to update their clients to protect themselves. (more…)
NuggetPhantom Analysis Report
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/网络安全法.jpg)
October 12, 2018
1.1 Executive Summary
In a recent emergency response activity, NSFOCUS Threat Intelligence center (NTI) discovered a security event that featured NuggetPhantom, a modularized malware toolkit. According to our observation, the organization behind this event made its debut at the end of 2016 in the blue screen of death (BSOD) event that targeted Tianyi Campus clients, and was again involved in another security event that leveraged Tianyi Campus clients to mine cryptocurrency at the end of 2017. (more…)
Thoughts on the Application of the Micro Honeypot System in the Financial Sector
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/银行业金融机构信息科技外包管理体系建设及落地经验分享.jpg)
October 11, 2018
Overview
According to the Emerging Technology Analysis: Deception Techniques and Technologies Create Security Technology Business Opportunities released by Gartner in 2015, “Deception technologies are defined by the use of deceit and/or feints designed to thwart or throw off an attacker’s cognitive processes, disrupt an attacker’s automation tools, delay an attacker’s activities or disrupt breach progression. Deceptions are achieved through use of deceitful responses, purposeful obfuscations, feints, misdirections and other falsehoods.” Gartner also predicted the market of deception-based security defense technologies, saying that 10 percent of enterprises will use deception tools or tactics to counter cyberattacks by 2018. (more…)
Telecom Exchange LA 2018
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/TEX-LA-Logo-350w.png)
October 8, 2018
Telecom Exchange LA 2018 November 6-7, 2018 Kimpton Hotel Palomar Los Angeles Beverly Hills
NSFOCUS Completes IDC Migration and Expansion
October 1, 2018
NSFOCUS Completes IDC Migration and Expansion by Triet Nguyen Earlier this year, we kicked off a massive undertaking to shift our NSFOCUS Cloud to a managed service provider with the intention of consolidating internal data center real estate within our five data centers so we could regain resources to focus on our products. By taking […]
An Analysis of Qbot Variants in the Wild
![](https://nsfocusglobal.com/wp-content/uploads/2018/10/Windows-远程漏洞利用工具总览分析.jpg)
October 1, 2018
Overview Since their source code was publicly released on GitHub, Mirai and Qbot have wreaked havoc on the Internet of things (IoT). Before such public release, Mirai had been found to have adversarial behavior against Qbot in its infection process. Recently, the research team of NSFOCUS Threat Intelligence center (NTI) captured the first Qbot variant […]
Xbash Malware Combines Many Malicious Functions in Worm
![](https://nsfocusglobal.com/wp-content/uploads/2018/09/Xbash.jpg)
September 30, 2018
Unit 42, a research team of Palo Alto Networks found a new malware family this month and named it Xbash. This new malware combines ransomware, coinming, botnet, and worm features and targets Linux and Windows mainly. Xbash is developed in Python and was then converted into self-contained Linux ELF executables by abusing the legitimate tool […]