Thousands of Dropbox accounts compromised via Lenovo ID flaw
The attackers were able to create fake Lenovo IDs using victimsu2019 email addresses.
In brief: two SonicWall zero-days exploited in the wild; authorities dismantle the Sality botnet; and more.
The attackers were able to create fake Lenovo IDs using victimsu2019 email addresses.
According to court documents, Aktulaev used 255 fake accounts to send Microsoft Excel files containing malicious macros.
Users are recommended to install the latest hotfix as soon as possible.
The attackers hijacked BGP routes for IP addresses hosted by Hetzner and redirected traffic intended for Softaculous's update systems and client portal to malicious servers.
Security researchers say attackers are now using the flaws to steal data from PaperCut servers, including database tables.
The technique is designed to interfere with AI tools that analyze malicious code.