Updated on 2022-10-30: MotW bypass micropatch
ACROS Security has released a micropatch for a recently discovered bypass for Microsoft’s Mark of the Web (MotW) security feature. Read more:
- Free Micropatches For Bypassing MotW Security Warning with Invalid Signature (0day)
- Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates
Updated on 2022-10-26
Magniber—the ransomware strain that is exclusively targeting South Korean users—has continued its evolution, with new updates being spotted by AhnLab, after similarly observed updates over the past month. Read more:
- Rapidly Evolving Magniber Ransomware
- Change in Magniber Ransomware (*.cpl → *.jse) – September 8th
- Change in Magniber Ransomware (*.js → *.wsf) – September 28th
- Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates
Updated on 2022-10-14
HP security researchers have a breakdown of Magniber, a ransomware strain that has been active for more than half a decade and has exclusively targeted South Korean users. Read more: Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates
Overview
A new Magniber campaign was found delivering fake Windows 10 and antivirus software updates to target home users, while staying undetected. Post-encryption the attackers demand a ransom of up to $2,500. Read more: This unusual ransomware attack targets home PCs, so beware