Penetration Testing

APRIL 30, 2024

Security researchers at Zscaler have uncovered a new anti-analysis feature in recent iterations of the Zloader malware (versions 2.4.1.0

Penetration Testing 102

Penetration Testing Malware 102

Penetration Testing

APRIL 26, 2024

Researchers at Huntress have revealed a critical development in the LightSpy malware threat landscape. This calls... The post LightSpy Malware Strikes macOS: Your Mac Could be the Target appeared first on Penetration Testing.

Penetration Testing 106

Penetration Testing Malware 106

Penetration Testing

APRIL 25, 2024

ThreatFabric has unveiled a sophisticated new Android malware strain named “Brokewell.” The... The post Alert: “Brokewell” Malware – New Threat Targets Bank Users with Remote Device Takeover appeared first on Penetration Testing.

Banking 113

Banking Penetration Testing Malware 113

Penetration Testing

APRIL 18, 2024

Kaspersky Labs researchers have revealed a new, targeted malware campaign dubbed “DuneQuixote” with a focus on government entities within the Middle East.

Malware 105

Malware Penetration Testing Government 105

Penetration Testing

APRIL 18, 2024

A detailed analysis by Sucuri, a leading website security firm, has uncovered a sophisticated malware campaign that has shifted strategies to become more elusive and harder to detect.

Penetration Testing 102

Penetration Testing Malware 102

Penetration Testing

MARCH 23, 2024

Indetectables Toolkit This tool compilation is carefully crafted to be useful both for beginners and veterans of the malware analysis world.

Penetration Testing 144

Penetration Testing Malware Engineering 144

Penetration Testing

MARCH 28, 2024

Security researchers at Kaspersky Labs have uncovered a dangerous new variant of the DinodasRAT malware that targets Linux operating systems.

Penetration Testing 141

Penetration Testing Malware 141

Penetration Testing

APRIL 28, 2024

A newly disclosed critical vulnerability, CVE-2024-3400, allows attackers to gain remote control of vulnerable firewalls, leading to fears of widespread data... The post Palo Alto Firewalls Under Attack: Critical Flaw Exploited to Deploy Cryptojacking Malware appeared first on Penetration Testing.

Firewall 109

Firewall Penetration Testing Malware 109

Penetration Testing

APRIL 14, 2024

A sophisticated malware campaign targeting the widely-used Notepad++ text editor has been uncovered by security researchers at AhnLab Security Emergency Response Center (ASEC).

Penetration Testing 111

Penetration Testing Malware 111

Penetration Testing

APRIL 16, 2024

According to a detailed report by Recorded Future’s Insikt Group, the cybersecurity landscape faces a formidable threat in the form of “Mobile NotPetya,” a potential zero-click, wormable mobile malware that could spread autonomously and... The post Unstoppable Malware?

Mobile 105

Mobile Penetration Testing Malware Risk 105

Penetration Testing

MARCH 13, 2024

Recently, researchers at the Zero Day Initiative (ZDI) have dissected a complex DarkGate malware campaign targeting users through a zero-day flaw in Microsoft Windows SmartScreen (CVE-2024-21412).

Penetration Testing 134

Penetration Testing Malware 134

Penetration Testing

APRIL 9, 2024

The attackers used a malware strain... The post LazyStealer Malware Targets Governments with Simple But Effective Strategy appeared first on Penetration Testing.

Government 107

Government Penetration Testing Malware Technology 107

Penetration Testing

APRIL 4, 2024

Researchers at FortiGuard Labs have uncovered the inner workings of Byakugan, a versatile malware strain employing a mix of legitimate and malicious components to steal sensitive user data while flying under the radar.

Penetration Testing 111

Penetration Testing Malware 111

Penetration Testing

FEBRUARY 28, 2024

Enter GULoader, a malware favored by cybercriminals for its stealth, adaptability, and ability to... The post SVG Attacks: How GULoader Malware Sneaks into Your Network appeared first on Penetration Testing.

Penetration Testing 126

Penetration Testing Malware Cybersecurity 126

Penetration Testing

APRIL 11, 2024

Cybercriminals, demonstrating both ingenuity and malice, have initiated a campaign that manipulates GitHub’s search functionality to distribute... The post GitHub Search Sabotaged: Malware Hidden in Popular Repositories appeared first on Penetration Testing.

Penetration Testing 111

Penetration Testing Malware Cybersecurity 111

Penetration Testing

MARCH 24, 2024

In a striking revelation, the cybersecurity world has been alerted to a novel and sophisticated cyber espionage campaign orchestrated by APT29, a notorious threat group believed to be operating under the auspices of Russia’s... The post APT29 Strikes German Politics with WINELOADER Malware Assault appeared first on Penetration Testing. (..)

Penetration Testing 112

Penetration Testing Malware Cybersecurity 112

Penetration Testing

APRIL 28, 2024

In a sophisticated and deeply troubling cyber campaign, dubbed FROZEN#SHADOW, threat actors have leveraged the relatively unknown SSLoad malware along with Cobalt Strike and ScreenConnect remote monitoring and management (RMM) software to orchestrate a... The post FROZEN#SHADOW Campaign: The Stealthy Advance of SSLoad Malware and Cobalt (..)

Penetration Testing 83

Penetration Testing Malware Software 83

Penetration Testing

APRIL 8, 2024

According to a comprehensive report by Palo Alto Networks, the cybersecurity realm is witnessing a significant uptick in malware-initiated scanning attacks.

Penetration Testing 100

Penetration Testing Malware Cybersecurity 100

Penetration Testing

MARCH 24, 2024

Cybersecurity experts at SentinelLabs have discovered a dangerous new version of the infamous “AcidRain” malware. This type of malware, known as a wiper, is designed to destroy data and cripple systems.

Malware 100

Malware Penetration Testing Cybersecurity 100

Penetration Testing

APRIL 21, 2024

TransparentTribe, also known under aliases such as APT 36, ProjectM, and Mythic Leopard, is one... The post Fake Sites, Custom Malware: TransparentTribe’s Deception Exposed appeared first on Penetration Testing.

Penetration Testing 88

Penetration Testing Malware 88

Penetration Testing

APRIL 10, 2024

Security researchers at Cisco Talos have uncovered a sophisticated new malware campaign orchestrated by a threat actor they’ve named “Starry Addax.”

Penetration Testing 102

Penetration Testing Malware 102

Penetration Testing

MARCH 11, 2024

A dangerous new malware named Planet Stealer is making its rounds in the cybercriminal underworld, and security experts warn that your passwords, cryptocurrency wallets, and other sensitive information could be in its sights.

Passwords 119

Passwords Penetration Testing Malware Risk 119

Penetration Testing

APRIL 26, 2024

Security experts at eSentire have sounded the alarm on a new wave of FakeBat malware attacks.

Penetration Testing 102

Penetration Testing Malware 102

Penetration Testing

MAY 2, 2024

A new strain of the notorious Mal.Metrica malware campaign is exploiting this common security... The post Mal.Metrica Malware Exploits WordPress Vulnerabilities: 17,000+ Sites Hit appeared first on Penetration Testing.

Malware 57

Malware Penetration Testing 57

Penetration Testing

MARCH 24, 2024

Researchers at Unit 42 have uncovered a major new attack campaign deploying an updated version of the StrelaStealer malware.

Penetration Testing 130

Penetration Testing Malware 130

Penetration Testing

MARCH 18, 2024

Security researchers at Netskope Threat Labs have exposed a sophisticated malware campaign that leverages the trustworthiness of Google Sites to deliver a potent new version of the Azorult infostealer.

Penetration Testing 103

Penetration Testing Malware 103

Penetration Testing

MARCH 1, 2024

A recent investigation by McAfee Labs has shed light on a significant surge in malware distribution through one of the most ubiquitous document formats: the PDF. This surge marks a concerning shift in cybercriminal... The post Malware Hiding in PDFs: What You Need to Know appeared first on Penetration Testing.

Penetration Testing 111

Penetration Testing Malware 111

Penetration Testing

MARCH 31, 2024

A new report released by AhnLab Security Intelligence Center (ASEC) uncovers a disturbing tactic hackers are using to spread malware: they’re leveraging Google Ads tracking features to redirect unsuspecting users to malicious websites.

Penetration Testing 101

Penetration Testing Software Malware Security Intelligence 101

Penetration Testing

APRIL 25, 2024

Security experts at Zscaler ThreatLabz have revealed a widespread campaign where hackers are hijacking legitimate web hosting platforms to distribute dangerous malware.

Penetration Testing 78

Penetration Testing Malware Engineering 78

Penetration Testing

MARCH 6, 2024

Cado Security Labs’ recent discovery exposed a complex malware campaign zeroing in on Linux servers misconfigured with popular cloud services.

Penetration Testing 107

Penetration Testing Malware 107

SC Magazine

FEBRUARY 4, 2021

Today’s columnist, David Trepp of BPM LLP, says detailed pen tests will show how systems can handle future attacks on email and other critical systems. Here’s how organizations can get the most out of pen tests: Understand how well email safeguards work. Testing should also include outbound email data loss prevention controls.

Penetration Testing 104

Penetration Testing Social Engineering Authentication Engineering 104

Penetration Testing

APRIL 7, 2024

In a joint report by Proofpoint’s Threat Research team and Team Cymru, a potent new malware dubbed “Latrodectus” has been exposed.

Penetration Testing 100

Penetration Testing Malware 100

Penetration Testing

FEBRUARY 25, 2024

This technique, despite its age, continues to offer a stealthy passage for threat actors to deploy malware, underscoring... The post Warning: DLL Hijacking in Modern Malware Campaigns appeared first on Penetration Testing.

Penetration Testing 107

Penetration Testing Malware Cybersecurity Ransomware 107

Penetration Testing

FEBRUARY 29, 2024

The world of Pay-Per-Install (PPI) malware rarely stands still, and PrivateLoader, a notorious player in this arena, has pulled a new set of tricks out of its sleeve.

Penetration Testing 100

Penetration Testing Malware 100

Penetration Testing

MARCH 10, 2024

Researchers at the AhnLab Security Emergency Response Center (ASEC) have uncovered a disturbing malware campaign that’s cleverly disguised as a legitimate installer for the popular Notion productivity software. Fake Notion Installer Spreads Data-Stealing Malware appeared first on Penetration Testing.

Penetration Testing 93

Penetration Testing Malware Software 93

Penetration Testing

MARCH 18, 2024

This notorious malware is designed to plunder a vast range of sensitive data from infected machines, including... The post WhiteSnake Stealer Evolves: This Malware Wants Your Passwords, Crypto, and More appeared first on Penetration Testing.

Passwords 97

Passwords Penetration Testing Malware 97

Penetration Testing

APRIL 3, 2024

This campaign delivers the Rhadamanthys Stealer, an advanced Malware-as-a-Service (MaaS), through a complex and deceptive strategy that... The post Rhadamanthys Stealer: MaaS Malware Hits Oil & Gas appeared first on Penetration Testing.

Malware 78

Malware Penetration Testing Phishing 78