Blog

“Shifu” Banking Trojan – Technical Analysis and Recommendations

By: NSFOCUS Security Labs Overview The banking Trojan "Shifu" was discovered by the IBM counter fraud platform in April, 2015. Built on the Shiz source code, this Trojan employs techniques adopted by multiple notorious Trojans such as Zeus, Gozi, and Dridex. This particular Trojan targeted 14 banks in Japan and...

ElasticSearch Hit by Ransom Attack

By: Dr. Richard Zhao, SVP of Global Threat Research, NSFOCUS Overview During the week of January 21, 2017, over 34,000 vulnerable MongoDB databases fell victim to a ransom attack. Data residing on these databases was erased or encrypted and bitcoin payment was demanded in lieu for return of the data....

NSFOCUS introduces comprehensive web application security solution

Vigilance Security Magazine – Complex attacks on web-based applications are on the rise, accounting for approximately 40 percent of all data breaches in 2016. To combat this growing threat, NSFOCUS has introduced its Web Application Security solution to ensure enterprises are equipped with the most comprehensive application-layer protection against web...

ElasticSearch Hit by Ransom Attack

ElasticSearch Hit by Ransom Attack Overview Last week, over 34,000 vulnerable MongoDB databases fell victim to a recent ransom attack. Data residing on these databases was erased or encrypted and bitcoin payment was demanded in lieu for data return. Moreover, on Jan 18th 2017, several hundred ElasticSearch servers were hit...

DDoS attacks: here to stay

SC Magazine UK – 2016 was a year of record breaking DDoS attacks, SC’s Roi Perez discusses why they are here to stay and what can we expect in 2017