WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_type` = 'home-page' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_type` = 'home-page' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
INSERT INTO `wp_yoast_indexable` (`object_type`, `title`, `breadcrumb_title`, `permalink`, `blog_id`, `description`, `is_robots_noindex`, `open_graph_title`, `open_graph_image`, `open_graph_image_id`, `open_graph_description`, `open_graph_image_source`, `open_graph_image_meta`, `object_published_at`, `object_last_modified`, `version`, `permalink_hash`, `created_at`, `updated_at`) VALUES ('home-page', '%%sitename%% %%page%% %%sep%% %%sitedesc%%', 'Home', 'https://ltssecure.com/', '1', 'Intelligent Security Behaviour Analytics & Access Broker', '0', '%%sitename%%', '', '0', '', NULL, NULL, '2016-06-08 16:35:28', '2023-10-27 06:07:33', '2', '22:2482d850ed92e20e693469dbd708902d', '2024-04-30 17:43:06', '2024-04-30 17:43:06')

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_id` = '6084' AND `object_type` = 'post' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_id` = '6084' AND `object_type` = 'post' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_id` = '1' AND `object_type` = 'user' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
SELECT * FROM `wp_yoast_indexable` WHERE `object_id` = '1' AND `object_type` = 'user' LIMIT 1

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
INSERT INTO `wp_yoast_indexable` (`object_type`, `object_id`, `permalink`, `title`, `description`, `is_cornerstone`, `is_robots_noindex`, `is_robots_nofollow`, `is_robots_noarchive`, `is_robots_noimageindex`, `is_robots_nosnippet`, `is_public`, `has_public_posts`, `blog_id`, `open_graph_image`, `open_graph_image_id`, `open_graph_image_source`, `open_graph_image_meta`, `twitter_image`, `twitter_image_id`, `twitter_image_source`, `object_published_at`, `object_last_modified`, `version`, `permalink_hash`, `created_at`, `updated_at`) VALUES ('user', '1', 'https://ltssecure.com/author/leoadmin/', NULL, NULL, '0', '0', NULL, NULL, NULL, NULL, NULL, '0', '1', 'https://secure.gravatar.com/avatar/b51bcb9fee39763cb8ab58043d8f4ca6?s=500&d=mm&r=g', NULL, 'gravatar-image', NULL, 'https://secure.gravatar.com/avatar/b51bcb9fee39763cb8ab58043d8f4ca6?s=500&d=mm&r=g', NULL, 'gravatar-image', '2015-11-10 16:28:40', '2024-04-26 13:50:29', '2', '38:f96cb2cddf6202e51d6b239067a50899', '2024-04-30 17:43:06', '2024-04-30 17:43:06')

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable' doesn't exist]
INSERT INTO `wp_yoast_indexable` (`object_type`, `object_id`, `object_sub_type`, `permalink`, `primary_focus_keyword_score`, `readability_score`, `is_cornerstone`, `is_robots_noindex`, `is_robots_nofollow`, `is_robots_noimageindex`, `is_robots_noarchive`, `is_robots_nosnippet`, `open_graph_image`, `open_graph_image_id`, `open_graph_image_source`, `open_graph_image_meta`, `twitter_image`, `twitter_image_id`, `twitter_image_source`, `primary_focus_keyword`, `canonical`, `title`, `description`, `breadcrumb_title`, `open_graph_title`, `open_graph_description`, `twitter_title`, `twitter_description`, `estimated_reading_time_minutes`, `author_id`, `post_parent`, `number_of_pages`, `post_status`, `is_protected`, `is_public`, `has_public_posts`, `blog_id`, `schema_page_type`, `schema_article_type`, `object_last_modified`, `object_published_at`, `version`, `permalink_hash`, `created_at`, `updated_at`) VALUES ('post', '6084', 'page', 'https://ltssecure.com/', '42', '60', '0', NULL, '0', NULL, NULL, NULL, 'https://ltssecure.com/wp-content/uploads/2022/02/LTS-Secure-logo-1.png', '9545', 'set-by-user', '{\"width\":18515,\"height\":4139,\"url\":\"https://ltssecure.com/wp-content/uploads/2022/02/LTS-Secure-logo-1.png\",\"path\":\"/home/lts/public_html/wp-content/uploads/2022/02/LTS-Secure-logo-1.png\",\"size\":\"full\",\"id\":\"9545\",\"alt\":\"LTS Secure logo\",\"pixels\":76633585,\"type\":\"image/png\"}', 'https://ltssecure.com/wp-content/uploads/2022/02/LTS-Secure-logo-1.png', '9545', 'set-by-user', 'cyber security solutions', 'https://ltssecure.com/', 'Know Your Cyber Security Solutions from LTS Secure', 'LTS Secure provides all types of cyber security solutions. We are a renowned professional company and provide service till 5 Years 185 days.', 'Know Your Cyber Security Solutions from LTS Secure', 'Cyber Security Solutions In Social Media', 'Cyber Security Solutions In Social Media know from LTS Secure.', 'Cyber Security Solutions In Social Media', 'Cyber Security Solutions In Social Media know from LTS Secure.', '10', '1', '0', NULL, 'publish', '0', NULL, NULL, '1', NULL, NULL, '2024-04-19 12:36:51', '2021-01-25 06:34:34', '2', '22:2482d850ed92e20e693469dbd708902d', '2024-04-30 17:43:06', '2024-04-30 17:43:06')

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable_hierarchy' doesn't exist]
SELECT `ancestor_id` FROM `wp_yoast_indexable_hierarchy` WHERE `indexable_id` = '0' ORDER BY `depth` DESC

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable_hierarchy' doesn't exist]
SELECT `ancestor_id` FROM `wp_yoast_indexable_hierarchy` WHERE `indexable_id` = '0' ORDER BY `depth` DESC

WordPress database error: [Table 'lts_prod_pr.wp_yoast_indexable_hierarchy' doesn't exist]
DELETE FROM `wp_yoast_indexable_hierarchy` WHERE `indexable_id` = '0'

LTS Secure Warning: Qbot Banking Trojan Reappears With New Evasion Techniques

Qbot malware, an every evolving banking trojan, that has been around since 2008, has again resurfaced, targeting customers of U.S. financial institutions. The new variant includes capabilities helping it remain undetected.

 

Technical Details

  • The malware starts of by loading itself into the explorer.exe memory, from an executable introduced via phishing, an open file share or an exploit.
  • The malware then proceeds to copy itself into the application folders default location, defined in the %APPDATA% registry key.
  • The malware then creates another copy of itself in the below registry, to ensure that it runs when the system reboots.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

  • Later, a .dat file is then dropped, containing the log of the system information & the botnet name.
  • The malware then executes its copy from %APPDATA% and covers its tracks by replacing the infected file with a legitimate one.
  • Finally, the malware injects itself into an instance of explorer.exe, which it creates on its own. This allows the attacker to update the malware using their C&C server.
  • The new variant of the malware has a new packing layer, that scrambles & hides the code from scanner & signature-based solutions, helping it evade detection.

 

Impact

  • Log user’s keystrokes.
  • Harvest browsing & financial data.
  • Steal sensitive/confidential information like email login credentials, domain passwords & certificates.
  • Process hooking.

 

Recommended Actions

  • Always update your anti-virus software with the latest releases.
  • Periodically run “full system scan” on your endpoints.
  • Never download any suspicious attachments or click on any shady-looking link. Take an effort to educate your users on how to identify a mal-spam.
  • Ensure that system is up-to-date with latest patches released.
  • Make proper security configuration for Firewall/IDS/IPS/Endpoint Protection systems so that no holes are left barred.
  • Isolate all of the compromised computers ASAP to prevent threats from spreading further inside your infrastructure.


Notice: Undefined index: relattr in /home/lts/public_html/wp-content/plugins/fuse-social-floating-sidebar/inc/fuse_social_sidebar_func.php on line 245

Notice: Constant WP_USE_THEMES already defined in /home/lts/public_html/index.php on line 14