Threat Source newsletter (Nov. 19, 2020)
Summary: Cisco Talos reported that it obtained ownership of several command-and-control domains tied to the Emotet botnet, which went virtually dormant over the summer of 2020 before returning in the following months. Talos also released a decryptor tool for the Nibiru ransomware and disclosed three vulnerabilities in Cisco Security Manager, one critical and the others high-severity, affecting releases 4.22 and earlier and allowing arbitrary code execution and file downloads without credentials.
What you should know: Emotet's summer dormancy followed by a return shows a botnet can go quiet and come back, so a lull in its traffic is not evidence the threat is gone. The Cisco Security Manager flaws let an attacker run code and download files with no credentials on releases 4.22 and earlier.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026