Bleeping Computer

JULY 25, 2024

Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install malware. [.]

Malware 139

Malware Firmware 139

Bleeping Computer

JULY 23, 2024

CrowdStrike is warning that a fake recovery manual to repair Windows devices is installing a new information-stealing malware called Daolpu. [.]

Malware 141

Malware 141

Security Affairs

JULY 21, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 93

Malware Ransomware Hacking 93

Security Affairs

JULY 14, 2024

A Dark Gate malware campaign from March-April 2024 demonstrates how attackers exploit legitimate tools and services to distribute malware. Palo Alto Networks Unit 42 researchers shared details about a DarkGate malware campaign from March-April 2024. The malware is considered a sophisticated threat and is continuously improved.

Malware 103

Malware Cybercrime Software Phishing 103

Security Affairs

JULY 14, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 96

Malware Spyware Internet Internet 96

Security Affairs

MAY 27, 2024

Experts warn of a new ATM malware family that is advertised in the cybercrime underground, it was developed to target Europe. A threat actor is advertising a new ATM malware family that claims to be able of compromised 99% of devices in Europe. “The malware is fully automated, simplifying its deployment and operation.”

Malware 137

Malware Banking Advertising Cybercrime 137

Tech Republic Security

JANUARY 18, 2024

The Androxgh0st malware botnet is used for victim identification and exploitation in targeted networks, as well as credentials collection. Read the FBI/CISA's tips for protecting against this malware threat.

Malware 187

Malware Cybersecurity 187

Bleeping Computer

JULY 15, 2024

Cybercriminals use Facebook business pages and advertisements to promote fake Windows themes that infect unsuspecting users with the SYS01 password-stealing malware. [.]

Malware 141

Malware Advertising Passwords 141

Tech Republic Security

SEPTEMBER 26, 2023

Malware is an insidious infection that will steal productivity from your enterprise and potentially wreak havoc on your network. To prevent and counteract malware, it’s important to know the terminology surrounding it.

Malware 148

Malware Technology 148

SecureList

MARCH 20, 2024

Introduction Malware for mobile devices is something we come across very often. million malware, adware, and riskware attacks on mobile devices. Last month, we wrote a total of four private crimeware reports on Android malware, three of which are summarized below. In 2023 , our technologies blocked 33.8 and sends it to the C2.

Malware 100

Malware Mobile Firmware Spyware 100

The Hacker News

JULY 23, 2024

non-governmental organization (NGO) based in China have been targeted by a Beijing-affiliated state-sponsored hacking group called Daggerfly using an upgraded set of malware tools. Organizations in Taiwan and a U.S. In the attack on

Malware 133

Malware Hacking 133

Bleeping Computer

JULY 23, 2024

Threat actors are taking advantage of the massive popularity of the Hamster Kombat game, targeting players with fake Android and Windows software that install spyware and information-stealing malware. [.]

Malware 109

Malware Spyware Software Cryptocurrency 109

Security Affairs

JULY 7, 2024

Today marks the launch of the Security Affairs newsletter, specializing in Malware. Each week, it will feature a collection of the best articles and research on malware. This newsletter complements the weekly one you already receive.

Malware 95

Malware Spyware Cybercrime Ransomware 95

Security Affairs

JULY 21, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 88

Malware Ransomware Hacking 88

The Hacker News

JULY 23, 2024

The Computer Emergency Response Team of Ukraine (CERT-UA) has alerted of a spear-phishing campaign targeting a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY.

Malware 113

Malware Phishing Government 113

Security Affairs

JULY 22, 2024

Huntress researchers observed the JavaScript downloader malware SocGholish (aka FakeUpdates ) that is being used to deliver remote access trojan AsyncRAT and the legitimate open-source project BOINC (Berkeley Open Infrastructure Network Computing Client).

Malware 81

Malware Cryptocurrency Hacking Software 81

The Hacker News

JULY 21, 2024

The JavaScript downloader malware known as SocGholish (aka FakeUpdates) is being used to deliver a remote access trojan called AsyncRAT as well as a legitimate open-source project called BOINC.

Malware 111

Malware 111

Security Boulevard

JUNE 28, 2024

The post Cyberattack Rate Surges as Novel Malware Growth Accelerates appeared first on Security Boulevard. The rate of cyberattacks is rising as the threat level continues to evolve, according to BlackBerry Limited’s latest Global Threat Intelligence Report.

Malware 128

Malware Social Engineering Engineering Security Awareness 128

Bleeping Computer

JULY 10, 2024

The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade detection. [.]

Malware 116

Malware 116

Security Boulevard

JUNE 28, 2024

The post Temu is Malware — It Sells Your Info, Accuses Ark. Chinese fast-fashion-cum-junk retailer “is a data-theft business.” AG appeared first on Security Boulevard.

Malware 136

Malware Retail Social Engineering Data privacy 136

Penetration Testing

JUNE 2, 2024

A new in-depth analysis by Krasimir Konov, malware analyst... The post Telegram: The Dark Horse of Website Malware Attacks appeared first on Penetration Testing. Telegram, the messaging platform known for its emphasis on privacy and security, has been revealed as a surprisingly potent tool in the hands of cybercriminals.

Malware 119

Malware Penetration Testing 119

Bleeping Computer

JULY 25, 2024

The French police and Europol are pushing out a "disinfection solution" that automatically removes the PlugX malware from infected devices in France. [.]

Malware 96

Malware 96

Bleeping Computer

JULY 23, 2024

Russian-linked malware was used in a January 2024 cyberattack to cut off the heating of over 600 apartment buildings in Lviv, Ukraine, for two days during sub-zero temperatures. [.]

Malware 97

Malware 97

Bleeping Computer

JULY 15, 2024

The Iranian-backed MuddyWatter hacking group has partially switched to using a new custom-tailored malware implant to steal files and run commands on compromised systems. [.]

Malware 98

Malware Hacking 98

Tech Republic Security

APRIL 18, 2024

Nearly 10 million devices were infected with data-stealing malware in 2023, with criminals stealing an average of 50.9 credentials per device.

Malware 202

Malware Big data Data breaches Ransomware 202

Security Boulevard

JULY 25, 2024

In this article, we’ll learn more about the PHP vulnerability exploit and what can be done to safeguard against it. […] The post PHP Vulnerability Used For Malware And DDOS Attacks appeared first on TuxCare. The post PHP Vulnerability Used For Malware And DDOS Attacks appeared first on Security Boulevard.

DDOS 62

DDOS Malware Cybercrime Media 62

Penetration Testing

JULY 18, 2024

This multi-stage attack utilizes a combination of phishing emails, malicious shortcut files, PowerShell scripts, and legitimate software like RDPWrapper... The post Cryptocurrency Traders Beware: New Malware Exploits RDPWrapper and Tailscale appeared first on Cybersecurity News.

Cryptocurrency 103

Cryptocurrency Malware Phishing Software 103

Penetration Testing

MAY 1, 2024

Security researchers at Lumen Technologies’ Black Lotus Labs have uncovered a sophisticated new malware campaign targeting enterprise-grade small office/home office (SOHO) routers.

Malware 117

Malware Penetration Testing Technology 117

Penetration Testing

APRIL 17, 2024

McAfee Labs researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics and aggressive social engineering to trick victims and evade detection.

Penetration Testing 143

Penetration Testing Malware Social Engineering Engineering 143

Bleeping Computer

MAY 29, 2024

Cybercriminals are abusing Stack Overflow in an interesting approach to spreading malware—answering users' questions by promoting a malicious PyPi package that installs Windows information-stealing malware. [.]

Malware 131

Malware 131

The Hacker News

JUNE 2, 2024

Fake web browser updates are being used to deliver remote access trojans (RATs) and information stealer malware such as BitRAT and Lumma Stealer (aka LummaC2). Fake browser updates have been responsible for numerous malware infections, including those of the well-known SocGholish malware," cybersecurity firm eSentire said in a new report. "In

Malware 125

Malware Cybersecurity 125

The Hacker News

JUNE 18, 2024

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads.

Cryptocurrency 117

Cryptocurrency Malware Cybersecurity 117

Security Affairs

APRIL 13, 2024

Researchers warn threat actors are manipulating GitHub search results to target developers with persistent malware. Checkmarx researchers reported that t hreat actors are manipulating GitHub search results to deliver persistent malware to developers systems. Merely checking for known vulnerabilities is insufficient.

Malware 119

Malware Cryptocurrency Encryption Hacking 119

Bleeping Computer

MARCH 5, 2024

A new malware dubbed 'WogRAT' targets both Windows and Linux in attacks abusing an online notepad platform named 'aNotepad' as a covert channel for storing and retrieving malicious code. [.]

Malware 113

Malware 113

The Hacker News

JULY 11, 2024

The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an "advanced and upgraded version" of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk.

Malware 115

Malware 115

The Hacker News

APRIL 26, 2024

Fake browser updates are being used to push a previously undocumented Android malware called Brokewell. Brokewell is a typical modern banking malware equipped with both data-stealing and remote-control capabilities built into the malware," Dutch security firm ThreatFabric said in an analysis published Thursday.

Malware 126

Malware Banking 126

Penetration Testing

JULY 26, 2024

A new wave of cyberattacks has exposed a critical weakness in Secure Email Gateways (SEGs), allowing malicious emails to bypass security filters and deliver dangerous malware payloads.

Malware 56

Malware Phishing Cybersecurity 56