Latest Brute-Forcing news

Cisco warns of large-scale brute-force attacks against VPN services

Cisco warns about a large-scale credential brute-forcing campaign targeting VPN and SSH services on Cisco, CheckPoint, Fortinet, SonicWall, and Ubiquiti devices worldwide.
- Bill Toulas
- April 16, 2024
- 12:11 PM
- 2
Hackers infect Linux SSH servers with Tsunami botnet malware

An unknown threat actor is brute-forcing Linux SSH servers to install a wide range of malware, including the Tsunami DDoS (distributed denial of service) bot, ShellBot, log cleaners, privilege escalation tools, and an XMRig (Monero) coin miner.
- Bill Toulas
- June 20, 2023
- 01:50 PM
- 3
Android phones are vulnerable to fingerprint brute-force attacks

Researchers at Tencent Labs and Zhejiang University have presented a new attack called 'BrutePrint,' which brute-forces fingerprints on modern smartphones to bypass user authentication and take control of the device.
- Bill Toulas
- May 21, 2023
- 10:12 AM
- 3
Russian malware dev behind NLBrute hacking tool extradited to US

A Russian malware developer accused of creating and selling the NLBrute password-cracking tool was extradited to the United States after being arrested in the Republic of Georgia last year on October 4.
- Sergiu Gatlan
- February 23, 2023
- 12:36 PM
- 0
New GoTrim botnet brute forces WordPress site admin accounts

A new Go-based botnet malware named 'GoTrim' is scanning the web for self-hosted WordPress websites and attempting to brute force the administrator's password and take control of the site.
- Bill Toulas
- December 13, 2022
- 12:27 PM
- 0
Windows 11 gets better protection against SMB brute-force attacks

Microsoft announced that the Windows 11 SMB server is now better protected against brute-force attacks with the release of the Insider Preview Build 25206 to the Dev Channel.
- Sergiu Gatlan
- September 21, 2022
- 05:22 PM
- 2
Microsoft warns of brute-force attacks targeting MSSQL servers

Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server (MSSQL) database servers using weak passwords.
- Sergiu Gatlan
- May 18, 2022
- 09:27 AM
- 0
Raspberry Pi removes default user to hinder brute-force attacks

An update to Raspberry Pi OS Bullseye has removed the default 'pi' user to make it harder for attackers to find and compromise Internet-exposed Raspberry Pi devices using default credentials.
- Sergiu Gatlan
- April 08, 2022
- 09:00 AM
- 3
Microsoft blocked billions of brute-force and phishing attacks last year

Office 365 and Azure Active Directory (Azure AD) customers were the targets of billions of phishing emails and brute force attacks successfully blocked last year by Microsoft.
- Sergiu Gatlan
- February 03, 2022
- 11:35 AM
- 1
Microsoft warns of rise in password sprays targeting cloud accounts

The Microsoft Detection and Response Team (DART) says it detected an increase in password spray attacks targeting privileged cloud accounts and high-profile identities such as C-level executives.
- Sergiu Gatlan
- October 31, 2021
- 10:00 AM
- 0
QNAP warns of ongoing brute-force attacks against NAS devices

QNAP warns customers of ongoing attacks targeting QNAP NAS (network-attached storage) devices and urges them to immediately take action to mitigate them.
- Sergiu Gatlan
- March 25, 2021
- 10:58 AM
- 1
Hackers Backdoor Sites by Hiding Fake WordPress Plugins

Malicious plugins that hide in plain sight and act as backdoors are used by attackers to gain and maintain a foothold on WordPress websites, and to upload web shells and scripts for brute-forcing other sites.
- Sergiu Gatlan
- October 18, 2019
- 06:18 PM
- 1
New GoldBrute Botnet is Trying to Hack 1.5 Million RDP Servers

A botnet is currently scanning the internet in search of poorly protected Windows machines with Remote Desktop Protocol (RDP) connection enabled.
- Ionut Ilascu
- June 06, 2019
- 08:33 PM
- 2
GetCrypt Ransomware Brute Forces Credentials, Decryptor Released

A new ransomware called GetCrypt is being installed via the RIG exploit kit. While encrypting a computer it will try to brute force the network credentials of unmapped network shares.
- Lawrence Abrams
- May 22, 2019
- 03:24 PM
- 1
Multi-Factor Auth Bypassed in Office 365 and G Suite IMAP Attacks

Massive IMAP-based password-spraying attacks successfully breached Microsoft Office 365 and G Suite accounts, circumventing multi-factor authentication (MFA) according to an analysis by Proofpoint.
- Sergiu Gatlan
- March 14, 2019
- 12:32 PM
- 0
StealthWorker Malware Uses Windows, Linux Bots to Hack Websites

Hackers are running a new campaign which drops the StealthWorker brute-force malware on Windows and Linux machines that end up being used to brute force other computers in a series of distributed brute force attacks.
- Sergiu Gatlan
- March 06, 2019
- 03:11 PM
- 0
Botnet of 20,000 WordPress Sites Infecting Other WordPress Sites

A botnet consisting of over 20,000 WordPress sites is being used to attack and infect other WordPress sites. Once compromised, these new sites are added to the botnet so that they too can be used to perform commands for the attackers.
- Lawrence Abrams
- December 06, 2018
- 04:50 PM
- 0
Old JavaScript Crypto Flaw Puts Bitcoin Funds at Risk

Security researchers are warning that old Bitcoin addresses generated in the browser or through JavaScript-based wallet apps might be affected by a cryptographic flaw that allows attackers to brute-force private keys, take control of users' wallets, and steal funds.
- Catalin Cimpanu
- April 15, 2018
- 09:56 AM
- 0
Massive Brute-Force Attack Infects WordPress Sites with Monero Miners

Over the course of the current week, WordPress sites around the globe have been the targets of a massive brute-force campaign during which hackers attempted to guess admin account logins in order to install a Monero miner on compromised sites.
- Catalin Cimpanu
- December 20, 2017
- 06:25 PM
- 0
Hacker "Courvoisier" Pleads Guilty to Attacks on Uber, Groupon, T Mobile, Others

A UK man living in a caravan park has pleaded guilty last week to cyber-attacks on 17 websites and selling stolen user information on the Dark Web.
- Catalin Cimpanu
- December 18, 2017
- 12:30 AM
- 1