American multinational computer technology giant Dell addresses a 12-year-old driver flaw, tracked as CVE-2021-21551, impacting millions of computers. Hundreds of millions of Dell computers worldwide are affected by a 12-year-old vulnerability, tracked as CVE-2021-21551, that affects Dell DBUtil driver. The flaw affects version 2.3 of the Dell BIOS driver, it is one of a series of escalate privileges issues discovered by researchers from SentinelLabs. The vulnerabilities could be exploited by attackers to access driver functions and…

The first Thursday in May is World Password Day. Learn some tips for what your organization should do to foster good password management techniques. Image: Daniel Chetroni/Shutterstock As a system administrator, every 60 days (per our password expiration policy) I find myself in Password Hell. This entails having to change about two dozen expiring passwords to continue to access the systems I need to do my job. It’s particularly cumbersome since I work from home…

The Roaming Mantis smishing campaign has been impersonating a logistics company to steal SMS messages and contact lists from Asian Android users since 2018. In the second half of 2020, the campaign improved its effectiveness by adopting dynamic DNS services and spreading messages with phishing URLs that infected victims with the fake Chrome application MoqHao. Since January 2021, however, the McAfee Mobile Research team has established that Roaming Mantis has been targeting Japanese users with…

Introduction Email is one of the primary ways of communication in the modern world. We use email to receive notifications about our online shopping, financial transaction, credit card e-statements, one-time passwords to authenticate registration processes, application for jobs, auditions, school admissions and many other purposes. Since many people around the globe depend on electronic mail to communicate, phishing emails are an attack method favored by cyber criminals. In this type of attack, cyber criminals design…

Recently seized by the government, the site spoofed an actual company developing a coronavirus vaccine in an effort to steal personal data for malicious purposes. Image: U.S. Attorney’s Office for the District of Maryland With the rollout of the COVID-19 vaccines, cybercriminals have been devising phishing campaigns and phony websites designed to entrap people interested in the latest developments. One site, since taken down by the state of Maryland, was impersonating a vaccine maker with…

A teenager from Florida who allegedly hacked into the accounts of Pensacola high school students to cast fraudulent homecoming court votes for herself is facing felony charges. Tate High School homecoming queen Emily Rose Grover allegedly teamed up with her mother, 50-year-old Laura Rose Carroll, to cast nearly 250 fake votes. Carroll works as an assistant principal at Bellview Elementary School in Escambia County.  Agents with the Florida Department of Law Enforcement (FDLE) arrested Pensacola residents Carroll…

A new information stealer is going after cryptocurrency wallets and credentials for applications including NordVPN, Telegram, Discord, and Steam. Panda Stealer uses spam emails and the same hard-to-detect fileless distribution method deployed by a recent Phobos ransomware campaign discovered by Morphisec. The attack campaign appears to be primarily targeting users in Australia, Germany, Japan, and the United States. Panda Stealer was discovered by Trend Micro at the start of April. Threat researchers have identified two infection chains being used by the…