Researchers Capture Lazarus APT’s Remote-Worker Scheme Live on Camera
Dec 02, 2025The Hacker NewsIdentity Theft / Threat Intelligence A joint investigation led by Mauro Eldritch, founder of BCA LTD,...
Intelligence A
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
Nov 19, 2025Ravie LakshmananVulnerability / Threat Intelligence A recently disclosed security flaw impacting 7-Zip has come under active exploitation in...
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
Nov 19, 2025Ravie LakshmananVulnerability / Threat Intelligence A newly discovered campaign has compromised tens of thousands of outdated or end-of-life...
China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats
Oct 31, 2025Ravie LakshmananMalware / Threat Intelligence A China-affiliated threat actor known as UNC6384 has been linked to a fresh...
Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers
Oct 21, 2025Ravie LakshmananCyber Espionage / Threat Intelligence A new malware attributed to the Russia-linked hacking group known as COLDRIVER...
Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
Oct 10, 2025Ravie LakshmananSaaS Security / Threat Intelligence A threat actor known as Storm-2657 has been observed hijacking employee accounts...
From HealthKick to GOVERSHELL: The Evolution of UTA0388’s Espionage Malware
Oct 09, 2025Ravie LakshmananCyber Espionage / Artificial Intelligence A China-aligned threat actor codenamed UTA0388 has been attributed to a series...
BatShadow Group Uses New Go-Based ‘Vampire Bot’ Malware to Hunt Job Seekers
Oct 07, 2025Ravie LakshmananMalware / Threat Intelligence A Vietnamese threat actor named BatShadow has been attributed to a new campaign...
RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities
Sep 09, 2025Ravie LakshmananMobile Security / Threat Intelligence A new Android malware called RatOn has evolved from a basic tool...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
Oct 23, 2024Ravie LakshmananVulnerability / Threat Intelligence A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited...
Deceptive Employment Requests Distribute Dangerous More_eggs Malware to Human Resources Professionals
Oct 02, 2024Ravie LakshmananCybercrime / Threat Intelligence An email phishing campaign has been detected that is targeting recruiters using a...
Cyber Campaign by TIDRONE Spy Group Against Drone Manufacturers in Taiwan
Sep 09, 2024Ravie LakshmananCyber Attack / Threat Intelligence In a cyber attack campaign starting in 2024, a previously unknown threat...
North Korean Cybercriminals Deploy FudModule Rootkit via Chrome Zero-Day Vulnerability
August 31, 2024Ravie LakshmananRootkit / Threat Intelligence An unpatched security vulnerability in Google Chrome and other Chromium-based web browsers was...
Unauthorized Users Exploit PHP Weakness to Deploy Covert Msupedge Backdoor
August 20, 2024Ravie LakshmananWeakpoint / Risk Assessment An undocumented backdoor named Msupedge has been utilized in a cyber intrusion targeting...
Malicious Exploitation of PHP Weakness Leads to Infiltration by Stealthy Msupedge Malware
Aug 20, 2024Ravie LakshmananWeakness / Cybersecurity An undisclosed loophole known as Msupedge has been utilized in a cyber intrusion directed...
