Penetration Testing

DECEMBER 24, 2023

In the digital battlegrounds of modern warfare, a new adversary has emerged, codenamed ‘UAC-0099’ This nefarious cyber threat actor has been actively targeting Ukraine since mid-2022, according to insights from the Deep Instinct Threat... The post Threat Actor “UAC-0099”: Exploiting CVE-2023-38831 Against Ukraine (..)

Penetration Testing 110

Penetration Testing Cyber threats Malware 110

Penetration Testing

FEBRUARY 12, 2024

Pikabot, a malware loader first observed in early 2023, has reemerged after a brief lull in activity, showcasing substantial transformations in its codebase and techniques.

Penetration Testing 83

Penetration Testing Malware 83

Penetration Testing

APRIL 8, 2024

According to a comprehensive report by Palo Alto Networks, the cybersecurity realm is witnessing a significant uptick in malware-initiated scanning attacks.

Penetration Testing 101

Penetration Testing Malware Cybersecurity 101

Penetration Testing

NOVEMBER 24, 2023

According to the latest report from Dr.Web, a company specializing in cybersecurity, October 2023 witnessed a significant surge in the activity of malicious software targeting Android-based mobile devices.

Adware 83

Adware Spyware Banking Malware 83

Webroot

OCTOBER 25, 2023

Our annual analysis of the most notorious malware has arrived. As always, it covers the trends, malware groups, and tips for how to protect yourself and your organization. Their tactics have evolved significantly over the years, with ransomware now the malware of choice for cybercriminals. Who made this year’s malware list?

Malware 90

Malware Artificial Intelligence Penetration Testing Ransomware 90

Penetration Testing

JANUARY 14, 2024

An active exploitation of CVE-2023-36025 has been identified, leading to the propagation of a... The post Phemedrone Stealer: Exploiting CVE-2023-36025 for Defense Evasion appeared first on Penetration Testing.

Penetration Testing 83

Penetration Testing Cyber threats Cybersecurity Malware 83

Penetration Testing

DECEMBER 27, 2023

According to the monthly threat analysis by NCC Group, the banking malware Carbanak, known since 2014, has updated its methods and is now actively used in ransomware attacks.

Penetration Testing 81

Penetration Testing Malware Banking Ransomware 81

Penetration Testing

FEBRUARY 4, 2024

Unit 42 researchers recently made significant... The post New variant of Mispadu Stealer is Exploiting CVE-2023-36025 Vulnerability appeared first on Penetration Testing.

Penetration Testing 88

Penetration Testing Malware 88

Penetration Testing

DECEMBER 31, 2023

In a digital landscape where cyber threats are constantly evolving, Microsoft’s latest Threat Intelligence report, covering activity since mid-November 2023, sheds light on the sophisticated strategies employed by cybercriminals.

Penetration Testing 81

Penetration Testing Malware Cyber threats Ransomware 81

Penetration Testing

DECEMBER 2, 2023

Recently, a cunning phishing scam has emerged, targeting unsuspecting WordPress users with a fabricated security flaw, CVE-2023-45124. This sophisticated ruse, uncovered by the Wordfence Threat... The post WordPress Phishing Scam Exploits Fake CVE-2023-45124 Vulnerability appeared first on Penetration Testing.

Scams 85

Scams Phishing Penetration Testing Cybersecurity 85

Penetration Testing

JANUARY 16, 2024

In 2023, the world faced an unprecedented surge in cyber threats, a storm that Check Point Research’s analysis has vividly captured. The year marked a new high in cyber attacks, with a 1% increase... The post Ransomware Surge: 1 in 10 Organizations Targeted Globally in 2023 appeared first on Penetration Testing.

Penetration Testing 81

Penetration Testing Ransomware Cyber threats Cyber Attacks 81

Penetration Testing

DECEMBER 3, 2023

The BlackBerry Global Threat Intelligence Report for November 2023 provides a deep dive into the current cybersecurity landscape, offering invaluable... The post Cybercrime Rampant: Novel Malware Attacks Triple in Frequency, BlackBerry Warns appeared first on Penetration Testing.

Cybercrime 80

Cybercrime Penetration Testing Malware Cybersecurity 80

Penetration Testing

DECEMBER 18, 2023

The 2023 Mobile Banking Heists Report, meticulously compiled by... The post 32% Surge in US Mobile Fraud! Banking Malware Run Rampant as Market Booms appeared first on Penetration Testing.

Banking 81

Banking Mobile Marketing Penetration Testing 81

Penetration Testing

DECEMBER 5, 2023

2023 witnessed a significant shift in the tactics and approaches of cyber attackers, influenced by global conflicts and advancements in technology. This... The post Cyber Threat Tactics Shift in 2023: What You Need to Know appeared first on Penetration Testing.

Cyber threats 85

Cyber threats Penetration Testing Cyber Attacks Technology 85

Penetration Testing

JANUARY 11, 2024

A Linux-based malware family, DreamBus has been quietly evolving, honing its capabilities to exploit vulnerabilities in business applications. DreamBus, initially identified in early 2019, has... The post DreamBus: The Linux-Based Malware Targeting Business Applications appeared first on Penetration Testing.

Malware 90

Malware Penetration Testing Cryptocurrency 90

Penetration Testing

DECEMBER 20, 2023

As 2023 winds down, ESET’s latest Threat Report for the second half of the year (H2 2023) reveals a complex tapestry of cybersecurity challenges.

Penetration Testing 83

Penetration Testing Ransomware Threat Reports Cybersecurity 83

Penetration Testing

JANUARY 29, 2024

The GRIT Ransomware Annual Report 2023 offers a comprehensive overview of the evolving ransomware landscape.

Penetration Testing 79

Penetration Testing Ransomware Malware 79

Penetration Testing

MARCH 8, 2024

A new malware campaign is spreading rapidly, exploiting an unpatched security hole in the popular Popup Builder WordPress plugin.

Penetration Testing 90

Penetration Testing Malware 90

Penetration Testing

NOVEMBER 2, 2023

In the third quarter of the 2023 Threat Insights Report recently published by HP Wolf Security, a significant surge in campaigns deploying Remote Access Trojans (RAT) is recorded.

Threat Reports 81

Threat Reports Penetration Testing Malware 81

Security Affairs

JANUARY 1, 2024

In October 2023, a developer known as PRISMA first uncovered an exploit that allows the generation of persistent Google cookies through token manipulation. Subsequently, other malware integrated the exploit, including Rhadamanthys, Risepro, Meduza , Stealc Stealer and recently the White Snake. ” continues the report.

Malware 135

Malware Penetration Testing Passwords Encryption 135

Penetration Testing

APRIL 8, 2024

Security researchers at Red Canary have uncovered a worrying campaign targeting a recently patched vulnerability (CVE-2023-48788) in Fortinet’s FortiClient Enterprise Management System (EMS).

Penetration Testing 104

Penetration Testing Malware 104

Penetration Testing

JANUARY 4, 2024

In December 2023, the cybersecurity community was alerted to a new form of cyber threat – the Ducktail malware.

Penetration Testing 100

Penetration Testing Cyber threats Marketing Malware 100

Penetration Testing

JANUARY 28, 2024

Recently, QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant found in Ivanti Connect Secure (ICS) VPN compromised appliances (CVE-2023-21887 and CVE-2023-46805).

VPN 106

VPN Penetration Testing Cybersecurity Malware 106

Penetration Testing

JANUARY 21, 2024

Discovered by the Trellix Advanced Research Center in mid-November 2023,... The post Researcher warns: Java-Based Stealer Spreads via Cracked Software appeared first on Penetration Testing.

Software 128

Software Penetration Testing Cyber threats Malware 128

Penetration Testing

FEBRUARY 26, 2024

Based on the HelloKitty ransomware source code, its earliest samples were detected in July 2023, with subsequent variants... The post Abyss Locker: A Cross-Platform Ransomware Threat appeared first on Penetration Testing.

Ransomware 109

Ransomware Penetration Testing Malware 109

Penetration Testing

DECEMBER 15, 2023

PikaBot, a malware family that surfaced in early 2023, has swiftly morphed from being distributed via malspam campaigns to employing a more insidious delivery method: malvertising.

Penetration Testing 83

Penetration Testing Malware 83

Penetration Testing

MARCH 14, 2024

In a newly released Threat Analysis report, Cybereason Security Services has sounded the alarm about a dangerous wave of attacks targeting a critical vulnerability (CVE-2023-46604) in the Apache ActiveMQ messaging service.

Penetration Testing 96

Penetration Testing Ransomware Malware 96

Penetration Testing

APRIL 24, 2024

A new report from Cyble Research & Intelligence Labs (CRIL) has shed light on the origins of DragonForce, a dangerous ransomware strain that emerged in late 2023.

Penetration Testing 85

Penetration Testing Ransomware Malware 85

Penetration Testing

DECEMBER 20, 2023

As we approach the end of 2023, it’s crucial to reflect on the cyber threats that have shaped our digital world.

Penetration Testing 49

Penetration Testing Cybersecurity Cyber threats Ransomware 49

Penetration Testing

MAY 7, 2024

The attack, first detected in December 2023, exploited zero-day vulnerabilities in Ivanti Connect Secure to... The post China-Linked Hackers Target MITRE with ROOTROT Web Shell appeared first on Penetration Testing.

Penetration Testing 57

Penetration Testing Hacking Malware 57

Penetration Testing

APRIL 29, 2024

This discovery outlines a critical escalation in cyber... The post Stealthy ‘DarkGate’ Trojan Abuses AutoHotkey, Evades Defender appeared first on Penetration Testing.

Penetration Testing 132

Penetration Testing Cyber threats Malware 132

Penetration Testing

JANUARY 23, 2024

The Kasseika ransomware, identified amidst a surge in bring-your-own-vulnerable-driver (BYOVD) attacks in 2023, emerges as a formidable adversary.... ... The post Unpacking Kasseika: The Latest Ransomware to Exploit BYOVD Tactics appeared first on Penetration Testing.

Penetration Testing 98

Penetration Testing Ransomware Malware 98

Penetration Testing

FEBRUARY 12, 2024

In the wake of Atlassian’s disclosure of CVE-2023-22527, a critical template injection vulnerability in the Confluence Server and Data Center, Arctic Wolf Labs has uncovered threat actors are leveraging this vulnerability to deploy the... The post C3RB3R Ransomware Strikes Again: Exploiting the Confluence Vulnerability appeared first (..)

Penetration Testing 82

Penetration Testing Ransomware Malware 82

Penetration Testing

APRIL 25, 2024

Security researchers at Harfang Lab have uncovered an ongoing MuddyWater campaign that has been escalating since late 2023.

Penetration Testing 84

Penetration Testing Software Hacking Malware 84

Penetration Testing

JANUARY 27, 2024

First emerging in November 2023, this financially motivated variant has evolved rapidly, targeting companies and individuals primarily in countries such as Argentina, Brazil,... The post From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed appeared first on Penetration Testing.

Penetration Testing 89

Penetration Testing Ransomware Malware 89

Penetration Testing

FEBRUARY 17, 2024

The emergence of Alpha Ransomware in early 2023 caught the attention of the Threat Hunter Team from Symantec due to its striking technical and operational similarities to NetWalker, a prolific ransomware family dismantled by... The post Cybersecurity Alert: Alpha Ransomware Mirrors NetWalker’s Tactics appeared first on Penetration (..)

Ransomware 82

Ransomware Penetration Testing Cybersecurity Malware 82

Penetration Testing

DECEMBER 21, 2023

In the ever-evolving landscape of cyber threats, a new and menacing player emerged throughout the summer and fall of 2023, aiming to take the top spot in the realm of Remote Access Trojans (RATs)... The post BattleRoyal Cluster: A DarkGate Contender Rises with Devious Tricks and Evolving Tactics appeared first on Penetration Testing.

Penetration Testing 83

Penetration Testing Cyber threats Malware 83