Security Affairs

JUNE 12, 2022

Ransomware gangs are actively exploiting CVE-2022-26134 remote code execution (RCE) flaw in Atlassian Confluence Server and Data Center. Multiple ransomware groups are actively exploiting the recently disclosed remote code execution (RCE) vulnerability, tracked as CVE-2022-26134 , affecting Atlassian Confluence Server and Data Center.

Ransomware 127

Ransomware Encryption Malware Hacking 127

Heimadal Security

OCTOBER 17, 2022

Cybersecurity researchers spotted a new ‘Ducktail’ phishing campaign that spreads Windows information-stealing malware written in PHP and uses it to steal Facebook accounts, browser data, and cryptocurrency wallets. Using social […].

Accountability 101

Accountability Malware Cryptocurrency Phishing 101

Anton on Security

APRIL 13, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our sixth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 and #5 ). You can have fun in the cloud!

Cybersecurity 221

Cybersecurity Passwords Accountability Ransomware 221

CyberSecurity Insiders

MARCH 1, 2023

From early this year, two malware variants targeted almost 6-7 law firms spread through two separate incidents, alerting whole of the world about the lurking cyber threat. Both these malware families launched in January and February of this year, respectively. According to the Google Transparency Report for 2022, about 3.8

Cyber threats 102

Cyber threats Malware Ransomware Cybersecurity 102

Heimadal Security

FEBRUARY 14, 2023

Threat actors breached Pepsi Bottling Ventures LLC`s network and successfully installed info-stealing malware. The incident happened on or around December 23rd, 2022, and the team discovered it 18 days later, on January 10th, 2023. It took the IT team another 9 days to remediate the breach and secure the system.

Data breaches 123

Data breaches Malware Cybersecurity 123

Heimadal Security

APRIL 12, 2022

Threat actors have been detected using the Spring4Shell vulnerability to install malware on victim PCs, according to security researchers. However, what the US Cybersecurity […]. The post Mirai Malware Distributed by Means of Spring4Shell Vulnerability appeared first on Heimdal Security Blog.

Malware 107

Malware Cybersecurity 107

Heimadal Security

FEBRUARY 10, 2023

A new custom-made malware, the Screenshotter, surveils the victims before stealing data. The threat actor called TA886 is utilizing this malware to target users from the United States and Germany. Researchers first spotted the campaign in October 2022, but its activity increased in 2023.

Surveillance 93

Surveillance Malware Cybersecurity 93

Heimadal Security

JUNE 21, 2023

The Chinese hackers used the new malware in a campaign targeting foreign affairs ministries in the Americas, between 2022 – 2023.

Malware 108

Malware Marketing Government Cybersecurity 108

Security Affairs

MAY 3, 2023

Threat actors are using the promise of generative AI like ChatGPT to deliver malware, Facebook parent Meta warned. Threat actors are taking advantage of the huge interest in generative AI like ChatGPT to trick victims into installing malware, Meta warns. ” reads the Meta’s Q1 2023 Security Reports.

Malware 95

Malware Education Accountability Media 95

Security Affairs

MAY 30, 2022

Experts pointed out that the malware is being actively developed. The new variant of the bot includes exploits for the following security issues: CVE-2022-22954 : Critical RCE flaw in VMware Workspace ONE Access and VMware Identity Manager. CVE-2022-22947 : RCE flaw in Spring. CVE-2022-1388 : Critical RCE flaw in F5 BIG-IP.

Malware 141

Malware DDOS IoT Cybercrime 141

Heimadal Security

NOVEMBER 11, 2022

Worok threat group is hiding information-stealing malware in PNG images. The group was first spotted in September 2022 targeting high-profile victims from the Middle East, Southeast Asia, and South Africa. How the Malware Works Based on the evidence gathered about the Worok threat […].

Malware 103

Malware Cybersecurity 103

Heimadal Security

APRIL 6, 2023

The new Typhon Reborn V2 malware is currently advertised on a dark web forum. Typhon was first discovered in August 2022 and at the moment the malware was a mix of info-stealer, keylogger, and crypto-miner.

Malware 86

Malware Advertising Cybersecurity 86

Security Affairs

JUNE 9, 2022

Researchers uncovered a high stealth Linux malware, dubbed Symbiote, that could be used to backdoor infected systems. Once the malware has infected all the running processes, it provides the threat actor with rootkit capability and supports data-stealing capabilities. “Symbiote is a malware that is highly evasive.

Malware 144

Malware DNS Antivirus Passwords 144

SecureList

NOVEMBER 1, 2022

This is our latest installment, focusing on activities that we observed during Q3 2022. We can confirm a Maui ransomware incident in 2022, but we would expand their “first seen” date from the reported May 2021 to April 15, 2021, and the geolocation of the target to Japan and India. The most remarkable findings.

Malware 143

Malware Ransomware Spyware Encryption 143

CyberSecurity Insiders

DECEMBER 7, 2021

This blog was written by an independent guest blogger. ” Data Breaches Are on Pace to Break a New Record High in 2021 | Money Please see my article in FORBES for more of 2021’s alarming cybersecurity statistics. .” MORE Alarming Cybersecurity Stats For 2021 ! 2022 will be more of the same. forbes.com).

Cybersecurity 78

Cybersecurity IoT Artificial Intelligence Cyber threats 78

Security Affairs

APRIL 25, 2023

North Korea-linked APT group BlueNoroff (aka Lazarus) was spotted targeting Mac users with new RustBucket malware. Researchers from security firm Jamf observed the North Korea-linked BlueNoroff APT group using a new macOS malware, dubbed RustBucket, family in recent attacks. The trojan can run on both ARM and x86 architectures.

Malware 83

Malware Social Engineering Architecture Education 83

Security Affairs

MAY 1, 2023

The previously undetected LOBSHOT malware is distributed using Google ads and gives operators VNC access to Windows devices. Threat actors are using an elaborate scheme of fake websites through Google Ads to spread their malware, the backdoors are embedded in installers for apparently legitimate applications, such as AnyDesk.

Malware 88

Malware Cybercrime Banking Software 88

Security Affairs

APRIL 20, 2023

North Korea-linked APT group Lazarus employed new Linux malware in attacks that are part of Operation Dream Job. North Korea-linked APT group Lazarus is behind a new campaign tracked as Operation DreamJob (aka DeathNote or NukeSped ) that employed Linux malware. ” concludes the report.

Malware 95

Malware Social Engineering Education Media 95

Heimadal Security

OCTOBER 5, 2022

On 4 October 2022 U.S. The post Hackers Use Customized Malware to Steal U.S. Defense Data appeared first on Heimdal Security Blog. Government announced a data breach at a U.S. organization in the Defense Industrial Base (DIB) sector.

Malware 105

Malware Data breaches Government Cybersecurity 105

Security Affairs

MAY 5, 2023

Fleckpe is a new Android subscription Trojan that was discovered in the Google Play Store, totaling more than 620,000 downloads since 2022. Fleckpe is a new Android subscription Trojan that spreads via Google Play, the malware discovered by Kaspersky is hidden in photo editing apps, smartphone wallpaper packs, and other general-purpose apps.

Malware 79

Malware Mobile Antivirus Hacking 79

Heimadal Security

JANUARY 16, 2023

CI/CD service CircleCI said the “sophisticated attack” occurred on December 16, 2022, and its antivirus software could not detect the malware. The post CircleCI Security Incident: How a Malware Attack on An Engineer’s Laptop Led to Chaos appeared first on Heimdal Security Blog.

Malware 98

Malware Antivirus Engineering Authentication 98

Security Boulevard

OCTOBER 12, 2022

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fourth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blog for #2 , my unofficial blog for #3 ). Google Cloud.

Cybersecurity 109

Cybersecurity Malware Accountability Authentication 109

eSecurity Planet

JANUARY 21, 2022

government agency overseeing cybersecurity is urging the country’s businesses and other organizations to take the necessary steps to protect their networks from any spillover that might occur from the ongoing cyberattacks aimed at Ukraine government agencies and private companies. Microsoft’s Threat Intelligence Center, in a blog post Jan.

Malware 140

Malware Government Backups Ransomware 140

Security Affairs

JUNE 6, 2022

LockBit ransomware gang claims to have hacked the cybersecurity firm Mandiant, which is investigating the alleged security breach. Today the LockBit ransomware gang has added the cybersecurity firm Mandiant to the list of victims published on its darkweb leak site. ’ At this time, the domain mandiantyellowpress[.]com

Hacking 130

Hacking Ransomware Cybersecurity Cybercrime 130

Security Affairs

APRIL 13, 2023

Security experts warn that a Kyocera Android printing app is vulnerable to improper intent handling and can be abused to drop malware. An improper intent handling issue affecting the Kyocera Android printing app can allow malicious applications to drop malware.

Malware 95

Malware Mobile Education Media 95

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. The document updates the information provided in the Dark Web Index 2022 report. The document updates the information provided in the Dark Web Index 2022 report. Pierluigi Paganini.

Identity Theft 94

Identity Theft Accountability DDOS Cybercrime 94

Security Affairs

JUNE 3, 2022

An “extremely sophisticated” China-linked APT tracked as LuoYu was delivering malware called WinDealer via man-on-the-side attacks. The activity of the group was first documented by TeamT5 researchers that also reported the use of three malware families: SpyDealer, Demsty and WinDealer. To nominate, please visit:?.

Malware 132

Malware Telecommunications Hacking Internet 132

Security Affairs

MAY 7, 2022

Experts spotted a malware campaign that is the first one using a technique of hiding a shellcode into Windows event logs. In February 2022 researchers from Kaspersky spotted a malicious campaign using a novel technique that consists of hiding the shellcode in Windows event logs. We will continue to monitor similar activity.”

Malware 87

Malware Encryption Hacking Cybersecurity 87

Security Affairs

APRIL 28, 2022

Threat actors have replaced the BazaLoader and IcedID malware with a new loader called Bumblebee in their campaigns. Cybercriminal groups that were previously using the BazaLoader and IcedID as part of their malware campaigns seem to have adopted a new loader called Bumblebee. It is used by multiple cybercrime threat actors.”

Malware 82

Malware Cybercrime Encryption Hacking 82

Security Affairs

APRIL 5, 2023

The eFile.com online service, which is authorized by the US Internal Revenue Service (IRS), was spotted serving malicious malware to visitors. eFile.com , the personal online tax preparation and e-file service authorized by the US Internal Revenue Service (IRS), was spotted serving malware to visitors.

Malware 80

Malware Education Media Hacking 80

Security Affairs

APRIL 13, 2022

China-linked Hafnium APT group started using a new piece of new malware to gain persistence on compromised Windows systems. Microsoft Threat Intelligence Center (MSTIC) highlighted the simplicity of the technique employed by the Tarrask malware that creates “hidden” scheduled tasks on the system to maintain persistence.

Malware 106

Malware Education Internet Internet 106

Security Affairs

JUNE 20, 2022

The developers behind the BRATA Android malware have implemented additional features to avoid detection. The operators behind the BRATA Android malware have implemented more features to make their attacks stealthy. “TAs are modifying their code in order to tailor their malware on specific banking institutions.

Malware 97

Malware Banking Antivirus Phishing 97

Malwarebytes

APRIL 3, 2023

The channel , comprising managed service providers (MSPs), Systems Integrators (SIs), value-added resellers (VARs), and more, plays a vital role in providing cybersecurity for companies around the globe today. But as malware evolves and cyberattacks become more common, keeping up with the top threats to the channel can be difficult.

Malware 71

Malware Education Ransomware Security Awareness 71

Security Boulevard

APRIL 13, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our sixth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 and #5 ). You can have fun in the cloud!

Cybersecurity 108

Cybersecurity Passwords Accountability Ransomware 108

Security Affairs

MAY 22, 2022

Researchers uncovered a malware campaign targeting the infoSec community with fake Proof Of Concept to deliver a Cobalt Strike beacon. Researchers from threat intelligence firm Cyble uncovered a malware campaign targeting the infoSec community. The malware, disguised as a fake PoC code, was available on GitHub. link] .

InfoSec 140

InfoSec Malware Cybercrime Information Security 140

Security Affairs

MAY 18, 2022

Researchers spotted a new variant of the UpdateAgent macOS malware dropper that was employed in attacks in the wild. Researchers from the Jamf Threat Labs team have uncovered a new variant of the UpdateAgent macOS malware dropper. Upon executing the malware, it connects to a remote server and retrieves a bash script to be executed.

Adware 80

Adware Malware Spyware Hacking 80

Security Affairs

APRIL 11, 2022

Cybersecurity researchers spotted a new Windows information-stealing malware, named FFDroider, designed to steal credentials and cookies. Cybersecurity researchers from Zscaler ThreatLabz warn of a new information-stealing malware, named FFDroider, that disguises itself as the popular instant messaging app Telegram.

Malware 82

Malware Media Firewall Advertising 82