Cyber Security Archives • Page 19 of 78 • Daily CyberSecurity

Russian Influence Operations Target German Elections

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Russian Influence Operations Target German Elections

Do Son February 13, 2025

Explore the Russian influence operations targeting the 2025 German elections. Discover their tactics and impact on democracy.

South Korean CSOs Under Cyberattack: 3-Year Study South Korean Cyberattack

South Korean CSOs Under Cyberattack: 3-Year Study

Do Son February 13, 2025

Explore the impact of South Korean cyberattack threats on civil society organizations and their defenders in a detailed study.

zkLend Hacked: $9.5 Million in Bitcoin Stolen TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

zkLend Hacked: $9.5 Million in Bitcoin Stolen

Do Son February 12, 2025

Explore the zkLend vulnerability that led to a massive $9.5 million theft. Discover the implications for decentralized finance.

Chinese Hackers Suspected in Ivanti CSA Attacks: Webshells and Lateral Movement Detected Sources and related content Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Chinese Hackers Suspected in Ivanti CSA Attacks: Webshells and Lateral Movement Detected Sources and related content

Do Son February 12, 2025

Discover the security concerns surrounding Ivanti CSA 4.6. Find out how to safeguard your business from unauthenticated remote code execution and SQL injection attacks.

Sandworm APT Exploits Trojanized KMS Tools to Target Ukrainian Users in Cyber Espionage Campaign Sandworm APT - APT44

Sandworm APT Exploits Trojanized KMS Tools to Target Ukrainian Users in Cyber Espionage Campaign

Do Son February 11, 2025

Learn about the notorious Sandworm APT44 and their state-sponsored cyber espionage targeting Ukrainian Windows users with trojanized KMS activators.

US Treasury Sanctions Russian Bulletproof Hosting Provider Zservers for Supporting LockBit Ransomware Attacks CVE-2024-3393 - Zservers sanctions

US Treasury Sanctions Russian Bulletproof Hosting Provider Zservers for Supporting LockBit Ransomware Attacks

Do Son February 11, 2025

Learn about the recent U.S. Treasury sanctions against Zservers, a Russian bulletproof hosting provider accused of facilitating LockBit ransomware attacks.

$16 Million Ransomware Operation Shut Down: 8Base Masterminds Apprehended 8Base ransomware down

$16 Million Ransomware Operation Shut Down: 8Base Masterminds Apprehended

Do Son February 10, 2025

Discover the recent takedown of the 8Base ransomware syndicate by international law enforcement. Learn about their notorious history and the global impact of their activities.

Alabama Man Pleads Guilty in Bitcoin Price Manipulation Scheme Involving Hacked SEC X Account X Account Hack

Alabama Man Pleads Guilty in Bitcoin Price Manipulation Scheme Involving Hacked SEC X Account

Do Son February 10, 2025

Learn about the shocking hack of the SEC's X account and its impact on the cryptocurrency market. Find out the role of Eric Council Jr. in the fraudulent Bitcoin ETF announcement.

The Rise of Phishing-as-a-Service: How Cybercriminals are Outsourcing Attacks DocuSign-Themed Phishing Email

The Rise of Phishing-as-a-Service: How Cybercriminals are Outsourcing Attacks

Do Son February 10, 2025

Explore the dangerous world of Phishing-as-a-Service (PhaaS). Learn about the rise of subscription-based platforms that enable cybercriminals to launch sophisticated phishing campaigns.

Threat Actors Exploit SimpleHelp Vulnerabilities to Deploy Sliver Backdoor Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Threat Actors Exploit SimpleHelp Vulnerabilities to Deploy Sliver Backdoor

Do Son February 9, 2025

Field Effect reveals a cyberattack that used newly discovered SimpleHelp RMM software vulnerabilities to deploy the Sliver backdoor and establish persistence mechanisms.

Publicly Disclosed ASP.NET Machine Keys Used in Code Injection Attacks ViewState code injection attacks

Publicly Disclosed ASP.NET Machine Keys Used in Code Injection Attacks

Do Son February 9, 2025

Discover the dangers of code injection attacks in web applications. Explore the vulnerability of ViewState and how to prevent remote code execution.

Sophos Uncovers Rising Threat of SVG-Based Phishing Attacks SVG Phishing Attacks

Sophos Uncovers Rising Threat of SVG-Based Phishing Attacks

Do Son February 8, 2025

Beware of SVG phishing attacks. Learn how attackers are using SVG files to bypass anti-spam protections and distribute malicious links.

Lazarus Group Lures Victims with Fake LinkedIn Job Offers, Warns Bitdefender North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

Lazarus Group Lures Victims with Fake LinkedIn Job Offers, Warns Bitdefender

Do Son February 7, 2025

Beware of cyber espionage on LinkedIn! Lazarus Group targets professionals with fake job offers and sophisticated malware.

MMS “VidSpam”: A New Bitcoin Scam Using Old Tech Crypto Drain Conspiracy, Malicious MobileConfig phone phishing Cryptocurrency Phishing

MMS “VidSpam”: A New Bitcoin Scam Using Old Tech

Do Son February 7, 2025

Beware the resurgence of VidSpam! Learn about the new Bitcoin scam that is using old technology to trick victims.

Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage

Do Son February 6, 2025

Uncover the tactics used by the North Korean APT group Kimsuky in their cyber espionage operations, including the use of the RDP Wrapper for persistent access.

Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect KongTuke Microsoft Teams Phishing ModeloRAT Initial Access Broker CVE-2024-38193 - Lazarus Group Threat Actors ScreenConnect

KongTuke Microsoft Teams Phishing ModeloRAT Initial Access Broker CVE-2024-38193 - Lazarus Group Threat Actors ScreenConnect

Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect

Do Son February 6, 2025

Learn about the latest cyber threats involving ScreenConnect and how threat actors are leveraging this RMM tool for malicious purposes.

GreenSpot APT Phishes 163.com Users with Spoofed Domains Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer

GreenSpot APT Phishes 163.com Users with Spoofed Domains

Do Son February 6, 2025

GreenSpot APT, an advanced persistent threat group, is orchestrating a phishing campaign targeting users of China's 163.com email service.

XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181 Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis

Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis

XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181

Do Son February 5, 2025

Discover the evolving threat of XE Group: from credit card skimming to zero-day vulnerabilities, this notorious cybercriminal organization is targeting organizations across industries.

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit

CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections

Do Son February 5, 2025

Uncover the intricate web of the SmartApeSG FakeUpdate campaign and its connections to NetSupport RAT and other malicious threats.

Cybercriminals Exploit Big Tech Cloud IPs in Infrastructure Laundering Scheme

Do Son February 4, 2025

Silent Push report uncovers how FUNNULL utilizes infrastructure laundering to evade detection on major cloud providers like AWS and Azure.

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns TAG-124

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns

Do Son February 4, 2025

Uncover the TAG-124 traffic distribution system used by cybercriminals to spread malware, phishing pages, and fake browser updates.

Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign Unveiled Iranian Hacktivists Operation Epic Fury Cyber New Generation Warfare Russian Hybrid Escalation Plex data breach Water Systems Cybersecurity - Threat Actor Naming Standard

Iranian Hacktivists Operation Epic Fury Cyber New Generation Warfare Russian Hybrid Escalation Plex data breach Water Systems Cybersecurity - Threat Actor Naming Standard

Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign Unveiled

Do Son February 4, 2025

Uncover the details of Operation Phantom Circuit, a highly sophisticated cyber espionage campaign orchestrated by North Korea's Lazarus Group.