Information Security in the Workplace- password grading
![](https://nsfocusglobal.com/wp-content/uploads/2019/08/video.jpg)
August 24, 2019
With the advancement of IT-based transformation and the rapid development of IT, various network technologies have seen more extensive and profound applications, along with which come a multitude of cyber security issues. Come to find out what information security issues you should beware of in the workplace. (more…)
Banking Trojan Banjori Analysis Report
![](https://nsfocusglobal.com/wp-content/uploads/2019/05/1108-1.jpg)
August 23, 2019
1 Sample Introduction
Banjori is a banking trojan that has been active since it was first spotted in 2013. It identifies personal online banking users in France, Germany, and the USA as major targets. After infecting a user, the trojan injects a malicious payload into the user’s active processes and collect the user’s information. Banking trojans and Banjori are mainly used to steal information via browsers.. Compared to Internet Explorer and Chrome, Firefox is a more sought after target for Banjori, which steals the majority of user information via query of hook and database files of the browser. It is worth noting that this family started to use the then modern dynamic domain generation algorithm (DGA) to obtain C&C server addresses in 2013. This renders the traditional blacklist of antivirus software ineffective, but also creates conditions for destroying andtaking over the Banjori botnets. (more…)
IP Reputation Report-08192019
![](https://nsfocusglobal.com/wp-content/uploads/2019/07/IP-REPUTATION.jpg)
August 22, 2019
Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at August 19, 2019. Top 10 countries in attack percentage: The Palestine is in first place. The Curacao is in the second place. The country China (CN) is […]
Botnet Trend Report-10
![](https://nsfocusglobal.com/wp-content/uploads/2019/06/botnet.jpg)
August 21, 2019
4.2 BillGates: Best Cross-Platform Family
In February 2014, a new botnet family was reported by the Russian website, habr5 and named BillGates because of its bill and gates modules. Subsequently the research group, MalwareMustDie reported that botnet family was operated by a Chinese hacker group, closely related with other known families such as ChinaZ and Elknot. This has helped BillGates attract wide attention. (more…)
Microsoft’s Security Patches for August Fix 95 Security Vulnerabilities Threat Alert
![](https://nsfocusglobal.com/wp-content/uploads/2019/04/Microsoft.jpg)
August 20, 2019
Overview
Microsoft released August 2019 security patches on Tuesday that fix 95 vulnerabilities ranging from simple spoofing attacks to remote code execution in various products, including Active Directory, HTTP/2, Microsoft Bluetooth Driver, Microsoft Browsers, Microsoft Dynamics, Microsoft Edge, Microsoft Graphics Component, Microsoft JET Database Engine, Microsoft Malware Protection Engine, Microsoft NTFS, Microsoft Office, Microsoft Office SharePoint, Microsoft Scripting Engine, Microsoft Windows, Microsoft XML, Microsoft XML Core Services, Online Services, Visual Studio, Windows – Linux, Windows DHCP Client, Windows DHCP Server, Windows Hyper-V, Windows Kernel, Windows RDP, Windows Scripting, Windows Shell, and Windows SymCrypt. (more…)
KDE Frameworks Command Execution Vulnerability (CVE-2019-14744) Threat Alert
![](https://nsfocusglobal.com/wp-content/uploads/2019/08/0819.jpg)
August 19, 2019
Overview
Recently, a security researcher took to Twitter to disclose a KDE Frameworks command injection vulnerability, which stems from the KDesktopfile class handling .desktop, .directory, and configuration files. An attacker could create malicious files of these types, which, once being viewed with the KDE file viewer, could trigger the vulnerability, leading to code execution without requiring any user interactions like executing such files. (more…)
Botnet Trend Report-9
![](https://nsfocusglobal.com/wp-content/uploads/2019/06/botnet.jpg)
August 16, 2019
This chapter explores further into active botnet families detected in 2018. We concentrate on four distinct families and tools focusing our analysis on their behavior changes, sample version changes, sample variants, and average age of C&C servers, to better understand the dynamic lifecycle of botnet families throughout 2018. (more…)
IP Reputation Report-08122019
![](https://nsfocusglobal.com/wp-content/uploads/2019/07/IP-REPUTATION.jpg)
August 15, 2019
-
Top 10 countries in attack counts:
- The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at August 11, 2019.
Cisco Small Business 220 Series Smart Switches Multiple Vulnerabilities Threat Alert
![](https://nsfocusglobal.com/wp-content/uploads/2019/08/0814-1.jpg)
August 14, 2019
Overview
On August 6, 2019, local time, Cisco released security advisories on remediation of three vulnerabilities in Small Business 220 Series Smart Switches, including two critical ones, one of which has a CVSS 3.0 score as high as 9.8. (more…)
Apache Solr Remote Code Execution Vulnerability (CVE-2019-0193) Threat Alert
![](https://nsfocusglobal.com/wp-content/uploads/2019/05/1108-1.jpg)
August 13, 2019
1 Vulnerability Overview
Recently, Apache Software Foundation (ASF) issued a security bulletin to announce the fix of the remote arbitrary code execution vulnerability (CVE-2019-0193) in Apache Solr. This vulnerability exists in the DataImportHandler module, a common module used to import data from databases or other sources. The whole DIH configuration of this module can come from the dataConfig parameter included in an external request. As a DIH configuration can contain scripts, this parameter is a security risk. (more…)