Security Boulevard

MAY 24, 2024

A recent blog by Elastic Security Labs details GHOSTENGINE, a crypto miner that leverages an intrusion set (HIDDENSHOVEL) to disable endpoint security solutions (EDRs) on a victim host. The post EDR-Killing Malware and the Need for Network Detection appeared first on Security Boulevard.

Malware 64

Malware Cybersecurity 64

Heimadal Security

MARCH 22, 2023

A new campaign is deploying variants of the ShellBot malware, specifically targeting poorly maintained Linux SSH servers. It seems the threat actors use scanner malware to find systems that have SSH port 22 open and proceed to install ShellBot on the servers that have weak credentials.

DDOS 122

DDOS Malware Cybersecurity 122

Heimadal Security

JANUARY 17, 2024

CISA and FBI released an advisory on Androxgh0st malware IoCs (Indicators of Compromise) and warned about hackers using this threat to steal credentials.

Malware 90

Malware Software Cybersecurity 90

Security Boulevard

JANUARY 7, 2024

Recent reports have highlighted the return of the Carbanak Malware. As per the reports, it’s a banking malware used in ransomware attacks that leverages updated tactics for increased effectiveness. In this blog, we’ll […] The post Alert: Carbanak Malware Strikes Again With Updated Tactics appeared first on TuxCare.

Malware 69

Malware Banking Ransomware Software 69

SecureList

JANUARY 16, 2024

Introduction In the ever-evolving landscape of mobile security, hunting for malware in the iOS ecosystem is akin to navigating a labyrinth with invisible walls. Imagine having a digital compass that not only guides you through this maze, but also reveals the hidden mechanisms of iOS malware previously shrouded in mystery.

Malware 122

Malware Mobile Backups Spyware 122

Quick Heal Antivirus

MAY 6, 2024

We’re Midway into 2024, and the threat landscape is evolving with new variants of viruses and malware that. The post The Threat Landscape: Emerging Viruses and Malware to Watch Out For in 2024 appeared first on Quick Heal Blog.

Malware 52

Malware Social Engineering Antivirus Banking 52

Security Boulevard

JANUARY 23, 2024

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a joint Cybersecurity Advisory warning of the escalating threat posed by Androxgh0st malware. Read More The post FBI and CISA Warn of Androxgh0st Malware Attacks appeared first on Nuspire. Tell me more about.

Malware 131

Malware Cybersecurity 131

Heimadal Security

APRIL 27, 2023

Google advertisements have been exploited to distribute various types of malware over the past few months. To trick unsuspecting users into downloading malware onto their systems, threat actors often used the platform to promote fake websites on legit software and application updates.

Malware 101

Malware Advertising Software Cybersecurity 101

Heimadal Security

DECEMBER 20, 2023

Security researchers discovered a new JaskaGO malware stealer that can infect both Windows and macOS. Researchers observed various malware versions impersonating installers for legitimate software like CapCut video editor, AnyConnect, and some security tools. JaskaGO uses various methods to persist in the infected system.

Malware 83

Malware Software Cybersecurity 83

Graham Cluley

OCTOBER 13, 2023

Valve, the company behind the Steam video game platform, has announced a new security feature after multiple reports of game updates being poisoned with malware. Read more in my article on the Hot for Security blog. But have they chosen the best way to protect developers' accounts?

Malware 109

Malware Accountability 109

CyberSecurity Insiders

DECEMBER 22, 2021

I enjoy being editor and managing this blog so much, I thought I'd share some of the best blogs of 2021. AT&T Alien Labs blog by Ofer Caspi in November 2021 AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits. Great year!

Cybersecurity 91

Cybersecurity IoT Malware Threat Detection 91

Heimadal Security

AUGUST 31, 2023

Department of Justice announced the disruption of an international law enforcement operation that targeted the QakBot botnet and its related malware, which has been linked to numerous cyberattacks and caused nearly $60 million in global losses for victims. Seized and 700K Computers Freed appeared first on Heimdal Security Blog.

Malware 100

Malware Banking Cybersecurity 100

Heimadal Security

SEPTEMBER 21, 2022

Cyble Research and Intelligence Labs (CRIL) discovered multiple fake Zoom sites created to spread malware among Zoom users. The sites were created with a similar user interface and disguised the malware as Zoom’s legitime application. The post Fake Zoom Sites Deploying Vidar Malware appeared first on Heimdal Security Blog.

Malware 111

Malware Cybersecurity 111

Security Affairs

FEBRUARY 1, 2024

Mandiant spotted new malware used by a China-linked threat actor UNC5221 targeting Ivanti Connect Secure VPN and Policy Secure devices. Mandiant researchers discovered new malware employed by a China-linked APT group known as UNC5221 and other threat groups targeting Ivanti Connect Secure VPN and Policy Secure devices.

VPN 103

VPN Malware Authentication Hacking 103

CyberSecurity Insiders

DECEMBER 22, 2021

I enjoy being editor and managing this blog so much, I thought I'd share some of the best blogs of 2021. AT&T Alien Labs blog by Ofer Caspi in November 2021 AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits. Great year!

Cybersecurity 81

Cybersecurity IoT Malware Threat Detection 81

Heimadal Security

AUGUST 24, 2023

In the world of cybersecurity, the terms “ransomware” and “malware” are often used interchangeably, leading to confusion about their distinct characteristics and implications. Understanding […] The post Ransomware Vs. Malware: What’s The Difference? appeared first on Heimdal Security Blog.

Malware 81

Malware Ransomware Cyber Attacks Software 81

Heimadal Security

DECEMBER 13, 2023

Researchers warn Lazarus threat actors still exploit known Log4j vulnerability to infect devices with new DLang malware strains. More about the new RAT malware Researchers revealed Lazarus […] The post Lazarus Hackers Exploit 2-Year-Old Log4j Vulnerability to Deploy New RAT Malware appeared first on Heimdal Security Blog.

Malware 95

Malware Manufacturing Cybersecurity 95

Heimadal Security

NOVEMBER 22, 2023

Threat actors target macOS systems with the Atomic Stealer malware in a new phase of the ClearFake campaign. Hackers designed the Atomic Stealer (AMOS) malware for targeting macOS devices. It […] The post Mac Systems Under Threat: ClearFake Campaign Deploys Atomic Stealer Malware appeared first on Heimdal Security Blog.

Malware 86

Malware Cybersecurity 86

Graham Cluley

NOVEMBER 25, 2021

Security researchers are warning biomanufacturing facilities around the world that they are being targeted by a sophisticated new strain of malware, known as Tardigrade. Read more in my article on the Tripwire State of Security blog.

Manufacturing 145

Manufacturing Malware Data breaches Ransomware 145

Heimadal Security

MARCH 1, 2023

Cybersecurity researchers recently discovered a new wave of ChromeLoader malware that threat actors are using to circumvent antivirus software and other cybersecurity measures. As part of the ChromeLoader malware campaign, cybercriminals now use VHD files instead of the typical ISO optical disc image format.

Malware 91

Malware Antivirus Cybersecurity Software 91

Digital Shadows

NOVEMBER 10, 2022

In our first blog in this series, we covered how ransomware groups go about their recruitment, with their large teams. The post Dark Web Recruitment: Malware, Phishing, and Carding first appeared on Digital Shadows.

Phishing 113

Phishing Malware Ransomware 113

Heimadal Security

OCTOBER 3, 2023

Security experts have discovered BunnyLoader, a malware-as-a-service (MaaS) that is rapidly evolving and gaining popularity on different hacker platforms due to its ability to covertly infiltrate systems and manipulate their data, focusing in particular on system clipboards.

Malware 94

Malware Cybersecurity 94

Heimadal Security

FEBRUARY 14, 2023

Threat actors breached Pepsi Bottling Ventures LLC`s network and successfully installed info-stealing malware. So, the hackers had around […] The post Pepsi Bottle Ventures Suffers Data Breach After Malware Attack appeared first on Heimdal Security Blog.

Data breaches 119

Data breaches Malware Cybersecurity 119

Heimadal Security

AUGUST 30, 2023

Threat actors exploit a known remote code vulnerability in RocketMQ servers to infect devices with DreamBus malware. and older, allowing attackers to perform remote code execution under certain […] The post DreamBus Malware Exploits Unpatched RocketMQ Servers appeared first on Heimdal Security Blog.

Malware 81

Malware Cybersecurity 81

Security Affairs

NOVEMBER 8, 2023

The North Korea-linked APT BlueNoroff used a new strain of macOS malware strain dubbed ObjCShellz, Jamf Threat Labs reported. Researchers from Jamf Threat Labs discovered a new macOS malware strain dubbed ObjCShellz and attributed it to North Korea-linked APT BlueNoroff. ” concludes the report.

Malware 104

Malware Cryptocurrency Social Engineering Engineering 104

Heimadal Security

OCTOBER 13, 2023

The […] The post Balada Injector Malware Hits More Than 17,000 WordPress Sites appeared first on Heimdal Security Blog. Composer is a tool for the tagDiv’s Newspaper and Newsmag WordPress themes. Both themes are paid for and used by 155,500 websites.

Malware 104

Malware Hacking Cybersecurity 104

Heimadal Security

JUNE 20, 2023

A new malware campaign employs fake OnlyFans content and adult lures to install the remote access trojan ‘DcRAT,’ enabling threat actors to steal data and credentials or deploy ransomware on infected devices.

Malware 93

Malware Government Ransomware Cybersecurity 93

Heimadal Security

JANUARY 27, 2023

One of the most recent finds exposed the Aurora Stealer malware imitating popular applications to infect as many users as possible. Aurora targets data from web browsers and crypto […] The post Aurora Infostealer Malware Deploys Shapeshifting Tactics appeared first on Heimdal Security Blog.

Malware 101

Malware Phishing Cybersecurity 101

Heimadal Security

SEPTEMBER 27, 2022

Erbium is a new Malware-as-a-Service (MaaS) designed to steal login credentials and cryptocurrency wallets. The Malware circulates at the moment as fake cracks and cheats for known video games. The post Erbium, A New InfoStealer Malware on the Market appeared first on Heimdal Security Blog.

Marketing 117

Marketing Malware Cryptocurrency Cybersecurity 117

eSecurity Planet

JANUARY 20, 2023

CyberArk researchers are warning that OpenAI’s popular new AI tool ChatGPT can be used to create polymorphic malware. “However, we find that its ability to write sophisticated malware that holds no malicious code is also quite advanced.”

Malware 143

Malware CISO Cybersecurity Technology 143

Security Affairs

JUNE 9, 2022

Researchers uncovered a high stealth Linux malware, dubbed Symbiote, that could be used to backdoor infected systems. Once the malware has infected all the running processes, it provides the threat actor with rootkit capability and supports data-stealing capabilities. “Symbiote is a malware that is highly evasive.

Malware 144

Malware DNS Antivirus Passwords 144

Heimadal Security

NOVEMBER 9, 2022

Cryptocurrency users are once again threatened by cyberattacks, this time in the shape of a new clipper malware strain called Laplas, deployed via SmokeLoader. Researchers claim they have identified more than 180 different samples related to the clipper malware in the last two weeks, suggesting a wide scale deployment.

Cryptocurrency 105

Cryptocurrency Malware Phishing Cybersecurity 105

Heimadal Security

AUGUST 17, 2023

In a notable comeback, the creators of the notorious Raccoon Stealer information-stealing malware have reemerged after a six-month hiatus. Brief Overview Raccoon Stealer has maintained its status as a prominent player in the realm of information-stealing malware since its inception […] The post Raccoon Stealer 2.3.0

Malware 79

Malware Cybersecurity 79

Heimadal Security

SEPTEMBER 1, 2023

A new malware is gaining traction in the cyber world. Dubbed SapphireStealer, this open-source.NET-based information-stealing malware has been observed to be used by threat groups, with some of them even creating their own customized variations.

Malware 94

Malware Cybersecurity 94

Graham Cluley

FEBRUARY 15, 2023

Towards the end of last year, malicious hackers broke into the systems of Pepsi Bottling Ventures, the largest privately-owned bottler of Pepsi-Cola beverages in the USA, and installed malware. For almost the month the malware secretly exfiltrated personally identifiable information (PII) from the company's network.

Malware 98

Malware Hacking Data breaches 98

Graham Cluley

DECEMBER 2, 2021

Finland’s National Cyber Security Centre has issued a warning about malicious SMS messages that have been spammed out to mobile users, directing iPhone owners to phishing sites and Android users to download malware. Read more in my article on the Tripwire State of Security blog.

Malware 135

Malware Phishing Mobile 135

Heimadal Security

MAY 17, 2024

New LibreOffice Vulnerability Allows Threat Actors to Execute Malware With One Click appeared first on Heimdal Security Blog. The LibreOffice developers warn users in a security advisory that the office software supports linking scripts to […] The post Click to Hack?

Hacking 61

Hacking Malware Software Cybersecurity 61