Tag Archive for: family

How to keep your family safe online with ESET’s mobile security

/in


Gone are the days of flip phones with keypads, their main drawcard the ability to play snake. Nowadays, you’d struggle to find a phone that isn’t connected to the internet, and while this brings a whole world of excitement and knowledge, it also creates risks, and especially so for children. 

A 2020 study found that most children own a mobile phone by the age of seven, and mobile devices are the most common way children access the internet. In addition, 39% of the children surveyed said they could not live without their phones. 

Source…

Coos County Family Health Services shut down by ransomware attack | State

/in


BERLIN — A ransomware attack has shut down Coos County Family Health Services, a main provider of health services in the Androscoggin Valley.

Coos County Family Health CEO Ken Gordon said the attack affected essentially all of its systems — phone, computer and email.

He said the non-profit organization noticed early Monday morning, before its various clinics opened, that there were abnormalities in the way its systems were running. An examination revealed the entire system had been compromised. He said CCFHS shut down services and worked to prevent further activity on the system.

Gordon confirmed the system had been hit by a ransomware attack but said he could not talk about the attack itself. He emphasized that there is no evidence that patient information has been compromised. He said the organization hopes to have phone service restored by Thursday and to have the entire system back up and running as soon as possible.

“We’re slowly in the process of rebuilding and standing things up,” Gordon said.

On Wednesday, Coos County Family Health Services had its Page Hill Clinic at Androscoggin Valley Hospital open for walk-in care and Dr. Brian Beals and pediatric nurse practitioner Chelsey Andrea were seeing sick children at the Gorham office.

The organization is hoping all four clinics will be open to see patients on a limited basis Thursday.

Coos County Family Health Services operates primary care clinics at 133 Pleasant Street and Page Hill at Androscoggin Valley Hospital in Berlin and at 2 Broadway Avenue in Gorham, offering a wide range of health and social services including primary care, pediatrics, women’s health, podiatry and behavioral health. It operates a dental clinic at 73 Main Street in Berlin. CCFHS also runs RESPONSE sites in Berlin, Lancaster, and Colebrook, addressing the needs of survivors of domestic violence and sexual assault.

Gordon said the non-profit serves about 15,000 people annually and offers services on a sliding fee scale for those without insurance or with large deductibles.

The ransomware attack comes in the middle of a pandemic that has taxed health-care providers. Gordon said he feels patients and…

Source…

This New Malware Family Using CLFS Log Files to Avoid Detection

/in


Malware Attack

Cybersecurity researchers have disclosed details about a new malware family that relies on the Common Log File System (CLFS) to hide a second-stage payload in registry transaction files in an attempt to evade detection mechanisms.

FireEye’s Mandiant Advanced Practices team, which made the discovery, dubbed the malware PRIVATELOG, and its installer, STASHLOG. Specifics about the identities of the threat actor or their motives remain unclear.

Although the malware is yet to be detected in real-world attacks aimed at customer environments or be spotted launching any second-stage payloads, Mandiant suspects that PRIVATELOG could still be in development, the work of a researcher, or deployed as part of a highly targeted activity.

CLFS is a general-purpose logging subsystem in Windows that’s accessible to both kernel-mode as well as user-mode applications such as database systems, OLTP systems, messaging clients, and network event management systems for building and sharing high-performance transaction logs.

“Because the file format is not widely used or documented, there are no available tools that can parse CLFS log files,” Mandiant researchers explained in a write-up published this week. “This provides attackers with an opportunity to hide their data as log records in a convenient way, because these are accessible through API functions.”

PRIVATELOG and STASHLOG come with capabilities that allow the malicious software to linger on infected devices and avoid detection, including the use of obfuscated strings and control flow techniques that are expressly designed to make static analysis cumbersome. What’s more, the STASHLOG installer accepts a next-stage payload as an argument, the contents of which are subsequently stashed in a specific CLFS log file.

Fashioned as an un-obfuscated 64-bit DLL named “prntvpt.dll,” PRIVATELOG, in contrast, leverages a technique called DLL search order hijacking in order to load the malicious library when it is called by a victim program, in this case, a service called “PrintNotify.”

“Similarly to STASHLOG, PRIVATELOG starts by enumerating *.BLF files in the default user’s profile directory and uses the .BLF file with the oldest creation date…

Source…

Antivirus detection is bypassed by a new family of Linux malware

/in


Some have been active for over three years

Upon closer inspection, the researchers at AT&T Alien Labs identified these binaries as modified versions of the open source Prism backdoor that has been used in multiple campaigns earlier.

Cybersecurity researchers have uncovered severalmalicious Linux binaries that have successfully managed to sneak past most antivirus products.

“We have conducted further investigation of the samples and discovered that several campaigns using these malicious executables have managed to remain active and under the radar for more than 3.5 years. The oldest samples Alien Labs can attribute to one of the actors date from the 8th of November, 2017,” note the researchers.

Calling Prism a “simplistic and straightforward” backdoor that’s easy to detect, the researchers note that the fact the modified binaries have managed to evade detection for several years is perhaps a result of the security infrastructure focussing its efforts on bigger campaigns, allowing smaller ones to slip through the gaps.

News Summary:

  • Antivirus detection is bypassed by a new family of Linux malware
  • Check all news and articles from the latest Security news updates.
Disclaimer: If you need to update/edit this news or article then please visit our help center. For Latest Updates Follow us on Google News

Source…