Threat Reports Archives - Page 3 of 4

BiBi-Linux Begone: Vali Cyber’s ZeroLock® Triumphs with Behavioral Detection

The recently discovered BiBi-Linux Wiperware overwrites files, renames them with a random string containing “BiBi,” and excludes specific file types from corruption. This x64 ELF executable, devoid of obfuscation, poses a significant threat as it can...

That’s all, Folks! Vali Cyber’s ZeroLock® Ends Linux Looney Tunables Attack

The Looney Tunables (CVE-2023-4911) vulnerability has been discovered in GNU C Library’s dynamic loader, allowing attackers to act with root privileges on any Linux distribution running glibc. Join our Threat Intel lead, Nathan Montierth, as he demonstrates how...

SprySOCKS Backdoor Malware and Vali Cyber’s ZeroLock® Defense

SprySOCKS malware is a new Linux-targeted backdoor that has combines elements from Trochilus (a Windows backdoor) and the Socket Secure (SOCKS). This threat is orchestrated by the China-linked Earth Lusca group, which has relentlessly targeted government entities...

VMware Aria exploit Neutralized by Vali Cyber’s ZeroLock®

VMware Aria Operations for Networks (formerly vRealize Network Insight) is vulnerable to a critical severity authentication bypass flaw that could allow remote attackers to bypass SSH authentication and access private endpoints. Join Nathan Montierth, Vali...

Monti Ransomware vs. Vali Cyber’s ZeroLock®: Detected and Stopped

The Monti ransomware group is back and using a new Linux locker to target VMware, ESXi servers, legal, and government organizations. Watch to learn how Vali Cyber’s ZeroLock detects and stops this new ransomware threat from our Threat Intel lead, Nathan...

GameOver(lay) Gets Destroyed by Vali Cyber’s ZeroLock®

CVE-2023-2640 and CVE-2023-32629 are two easy-to-exploit privilege escalation vulnerabilities in the OverlayFS module in Ubuntu that affect 40% of Ubuntu cloud workloads. Cleverly nicknamed gameOver(lay), Vali Cyber’s ZeroLock can both remediate as well as...