Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers
Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers.
Threat actors are exploiting internet-exposed GeoVision surveillance software to infiltrate corporate networks. The attackers disable Microsoft Defender and deploy cryptomining malware, according to Huntress research. The activity was first observed on November 8th, with a surge between November 8th and 10th.
AI summary of the linked source. Not reviewed by an editor. How this works
Run GeoVision CCTV software?
Get an email when a new story names GeoVision CCTV software, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- External attack surface management (EASM)
You find your forgotten internet-facing systems before attackers do.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.