GitHub, Telegram Automatons, and QR Codes Misused in Fresh Surge of Deceptive Assaults
An innovative tax-themed malware scheme targeting insurance and finance sectors has been witnessed exploiting GitHub URLs in misleading email communications...
observed
Deceptive Employment Requests Distribute Dangerous More_eggs Malware to Human Resources Professionals
Oct 02, 2024Ravie LakshmananCybercrime / Threat Intelligence An email phishing campaign has been detected that is targeting recruiters using a...
Cybersecurity Activists Group Twelve Strikes Russian Organizations with Devastating Online Assaults
An activist group named Twelve has been detected using a variety of publicly accessible utilities to carry out devastating online...
Unauthorized Users Misuse Default Passcodes in FOUNDATION Software to Infiltrate Construction Companies
Sep 19, 2024Ravie LakshmananCyber Attack / Hacking Threat actors have been targeting the construction industry by infiltrating the FOUNDATION Accounting...
Defending Against RCE Attacks Exploiting WhatsUp Gold Vulnerabilities
Discovery of Attacks in Trend Vision One Initial infiltration Surveillance carried out on Trend Vision One revealed that an unfamiliar...
BlackByte Ransomware Utilizes VMware ESXi Vulnerability in Latest Wave of Attacks
Researchers have detected that the group responsible for the BlackByte ransomware attack has likely been exploiting a recent fixed vulnerability...
Recent Qilin Ransomware Campaign Exploits VPN Credentials, Pilfers Chrome Data
A small group of compromised endpoints fell victim to a Qilin ransomware offensive wherein threat actors made away with credentials...
New Malicious Software (AnvilEcho) from Iranian Cyber Group TA453 Targets Jewish Leader
A state-sponsored Iranian group has recently initiated targeted spear-phishing endeavors towards an influential Jewish leader, using a novel information-gathering software...
Malicious Actors Deploy Over 100,000 Malware Android Applications to Steal OTP Codes
Jul 31, 2024Ravie LakshmananMobile Security / Malware A recent malicious activity has been spotted utilizing malevolent Android applications to filch...
A New Cybercrime Service Utilizes AI to Package Deceptive Kits with Malicious Android Applications
An organized cybercrime unit called GXC Team that operates in the Spanish language has been identified blending deceptive kits with...
Cunning Credit Card Skimmer Targets Magento Sites via Swap Files
Jul 23, 2024NewsroomThreat Detection / Website Security Adversaries have been spotted employing swap files on compromised websites to hide a...
Cybercriminals Target Magento Websites with Covert Credit Card Collector through Exchange Files
July 23, 2024NewsroomSecurity Threat / Website Protection Risk actors have been uncovered using exchange files in infiltrated websites to hide...
REPORT-100: Fresh Menace Actor Utilizes Open-Source Instruments for Broad Attacks
Jul 18, 2024NewsroomOpen-Source / Cybercrime Anonymous menace actors have been sighted utilizing open-source instruments as components of a suspected cyber...
The FIN7 Group Promotes a Tool for Bypassing Security on Dark Net Communities
FIN7, a financially driven threat group, has been utilizing various aliases on undercover forums to supposedly promote a tool commonly...
Iranian Cybercriminals Implement Fresh BugDream Backdoor in Middle East Digital Attacks
A group of cyber attackers from Iran known as MuddyWater has been detected using an unprecedented backdoor as part of...
