GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
Cybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting...
motivated
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites
A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the...
FIN7 Utilizes Anubis Backdoor to Take Control of Windows Systems via Compromised SharePoint Sites
The financially driven threat group identified as FIN7 has associated with a Python-created backdoor known as Anubis (distinguishable from an...
EncryptHub Utilizes Ransomware and Data Theft through Trojanized Applications, PPI Services, and Phishing Attempts
An organized cyber threat group named EncryptHub has been identified executing advanced phishing schemes to disseminate data theft tools and...
Recent Cybersecurity Incident: PureCrypter Utilizes Agent Tesla and Fresh TorNet Backdoor in Continuing Cyber Campaigns
An individual driven by financial incentives has been connected to a persistent phishing email initiative that has been active since...
TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware
Google on Wednesday shed light on a financially motivated threat actor named TRIPLESTRENGTH for its opportunistic targeting of cloud environments...
Microsoft Alerts About Fresh INC Ransomware Targeting U.S. Healthcare Industry
Sep 19, 2024Ravie LakshmananHealthcare / Malware Microsoft has disclosed that a financially driven threat actor has been identified deploying a...
HACKER GROUPS called PINEAPPLE and FLUXROOT Exploit Google Cloud to Conduct Credential Phishing
Jul 22, 2024NewsroomCloud Security / Phishing Attack FLUXROOT, a financially driven group originating from Latin America (LATAM), has been seen...
APPLE and FLUXROOT Hacker Groups Misuse Google Cloud for Credential Phishing
Jul 22, 2024NewsroomCloud Security / Phishing Attack A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been seen using...
The FIN7 Group Promotes a Tool for Bypassing Security on Dark Net Communities
FIN7, a financially driven threat group, has been utilizing various aliases on undercover forums to supposedly promote a tool commonly...
Report by Mandiant: Snowflake Users Targeted for Data Theft and Blackmail
A latest study from Mandiant, a division of Google Cloud, unveils that a financially driven threat actor known as UNC5537...
