The United States has charged and put highest-ever $5 million bounty on Russian hackers behind Dridex banking #malware . Read ➤ Using Dridex (aka Bugat or Cridex), they stole more than $100 million from victims across the globe over a period of 10 years.

The duo, Maksim Yakubets, the leader of 'Evil Corp' hacking group, and his co-conspirator Igor Turashev, has also been charged with conspiracy to commit bank fraud in connection with the infamous #Zeus  banking malware that stole $70 million from victims' bank accounts.

The “Great Cannon” has been deployed again

Facebook has sued a Chinese advertising company for abusing its platform to: ➡️ distribute #malware , ➡️ compromising its users, and ➡️ then using those hacked accounts to run deceptive #Facebook  ads to promote counterfeit goods and diet pills. #technews 

Important 👉 A new unpatched #vulnerability  (CVE-2019-14899) could let network attackers hijack encrypted VPN connections. Details: Most and Unix-like operati #Linuxg  systems are vulnerable, including , Debian, OpenBSD, , i #UbuntuS , and . #macOS  #Android 

Since the flaw resides in the networking stack of various operating systems, not on the VPN technology used, the attack works against widely implemented virtual private network protocols like #OpenVPN  , WireGuard, IKEv2/IPSec, and more.

Using this attack, a network adjacent attacker can: ➡️ determine virtual IP of a victim assigned by the VPN server, ➡️ determine if there is an active connection to a given site, ➡️ determine the exact seq and ack numbers, and ➡️ inject data into IPv4 and IPv6 TCP streams.