February 2019 – Page 47 – news.buyenne.com

Square Enix: Letztes Tomb Raider ist schwach gestartet

Von Shadow of the Tomb Raider hat Square Enix bis Ende 2018 nur rund 4,12 Millionen Exemplare verkauft – weniger als erwartet. Der Publisher will sich umorganisieren, in den nächsten Monaten neue Spiele vorstellen und wohl sein Superheldenepos Avengers…

Von Shadow of the Tomb Raider hat Square Enix bis Ende 2018 nur rund 4,12 Millionen Exemplare verkauft - weniger als erwartet. Der Publisher will sich umorganisieren, in den nächsten Monaten neue Spiele vorstellen und wohl sein Superheldenepos Avengers veröffentlichen. (Square Enix, Tomb Raider)

Sicherheit: Github startet Safe Harbor für Bug-Bounty-Programm

Um Teilnehmer seines Bug-Bounty-Programms rechtlich besser abzusichern, startet Github ein Safe-Harbor-Programm, das die Aktionen der Sicherheitsforscher absichern soll. Die Richtlinien basieren auf eigener Erfahrung und Vorlagen aus der Community. Das…

Hard-to-detect credential-theft malware has infected 1,200 and is still going

Separ’s living-off-the-land approach bypasses many antimalware providers.

A deceptively simple malware attack has stolen a wide array of credentials from thousands of computers over the past few weeks and continues to steal more, a researcher warned on Tuesday.

The ongoing attack is the latest wave of Separ, a credential stealer that has been known to exist since at least late 2017, a researcher with security firm Deep Instinct said. Over the past few weeks, the researcher said, Separ has returned with a new version that has proven surprisingly adept at evading malware-detection software and services. The source of its success: a combination of short scripts and legitimate executable files that are used so often for benign purposes that they blend right in. Use of spartan malware that's built on legitimate apps and utilities has come to be called "living off the land," and
it has been used in a variety
of highly effective campaigns over the past few years.

The latest Separ arrives in what appears to be a PDF document. Once clicked, the file runs a chain of other apps and file types that are commonly used by system administrators. An inspection of the servers being used in the campaign show that it, so far, has collected credentials belonging to about 1,200 organizations or individuals. The number of infections continues to rise, which indicates that the spartan approach has been effective in helping it fly under the radar.

Read 7 remaining paragraphs | Comments