Cyber Security Archives • Page 22 of 78 • Daily CyberSecurity

Scammers Exploit Truth Social to Launch Phishing and Fraud Campaigns

Scammers Exploit Truth Social to Launch Phishing and Fraud Campaigns

Do Son January 19, 2025

Discover the dark side of Truth Social: scammers exploiting user trust for phishing links, investment fraud, and cyberattacks.

CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack

PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack

CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks

Do Son January 18, 2025

Stay informed about the latest vulnerabilities in Ivanti products. CVE-2025-0282 and CVE-2025-0283 can allow attackers to remotely execute code and escalate privileges.

Real Estate Scams on the Rise in the Middle East TASPEN, mobile malware North Korean IT Worker Fraud

Real Estate Scams on the Rise in the Middle East

Do Son January 17, 2025

Beware of real estate scams in the Middle East. Learn how fraudsters exploit online listings, targeting expats and newcomers.

North Korean Hackers Linked to Crowdfunding Scam Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

North Korean Hackers Linked to Crowdfunding Scam

Do Son January 16, 2025

Uncover the link between North Korean IT worker schemes and a 2016 crowdfunding scam. Learn about the activities of the NICKEL TAPESTRY threat group.

Cybercriminals Exploit Fake Google Ads to Ransack Advertiser Accounts Google Ads Scam

Cybercriminals Exploit Fake Google Ads to Ransack Advertiser Accounts

Do Son January 16, 2025

Beware of the Google Ads Scam targeting advertisers! Learn how cybercriminals use fraudulent ads to compromise accounts and perpetuate further scams.

Millions Stolen: North Korea Hackers Target Blockchain Industry Google Play, Crypto Wallets Cryptocurrency Thefts

Millions Stolen: North Korea Hackers Target Blockchain Industry

Do Son January 14, 2025

Stay informed about the escalating threat of cryptocurrency thefts by North Korean cyber actors. Learn about their malicious activities and the impact on the global financial system.

Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces

Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion

Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces

Do Son January 14, 2025

Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain BingX cyberattack FortiGate SSO Attacks Firewall Config Theft

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

Do Son January 13, 2025

Discover the UAC-0063 cyber espionage campaign: Russia's strategic interest in Central Asia's geopolitical dynamics.

Phishing Campaigns Exploit YouTube URLs and Microsoft 365 Themes to Steal Credentials Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Phishing Campaigns Exploit YouTube URLs and Microsoft 365 Themes to Steal Credentials

Do Son January 12, 2025

Protect yourself from YouTube phishing scams. Find out how cybercriminals trick users with legitimate-looking URLs and urgent-sounding subject lines.

ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack

Do Son January 12, 2025

ZACROS Corporation experiences data breach: personal information of over 157,000 individuals compromised.

RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns

Do Son January 12, 2025

Uncover the details of RedDelta: A sophisticated cyber-espionage group targeting political and government entities in Asia.

RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques

Do Son January 12, 2025

Discover the latest cyber threat: RedCurl APT group. Learn about their sophisticated techniques and targeted cyber espionage campaigns.

FunkSec: The Rising Ransomware Group Blurring the Lines Between Cybercrime and Hacktivism Exploited VMware

FunkSec: The Rising Ransomware Group Blurring the Lines Between Cybercrime and Hacktivism

Do Son January 11, 2025

Discover FunkSec, the new player in the ransomware scene creating ripples with audacious claims and innovative methods.

GroupGreeting E-Card Platform Compromised in “zqxq” Campaign GroupGreeting e-card - “zqxq” campaign

GroupGreeting E-Card Platform Compromised in “zqxq” Campaign

Do Son January 11, 2025

Discover the latest cyberattack on GroupGreeting.com. Learn about the sophisticated JavaScript injection techniques used in the “zqxq” campaign.

Recruitment Scam Targets Job Seekers with Fake CrowdStrike Branding CrowdStrike phishing campaign

Recruitment Scam Targets Job Seekers with Fake CrowdStrike Branding

Do Son January 10, 2025

Learn about the recent CrowdStrike phishing campaign that distributed the XMRig cryptominer through deceptive recruitment tactics.

New PayPal Phishing Scam Bypasses Security Measures PayPal Industrial Bank, Fintech Crypto Lending PayPal, Hotel Booking Perplexity AI, PayPal

PayPal Industrial Bank, Fintech Crypto Lending PayPal, Hotel Booking Perplexity AI, PayPal

New PayPal Phishing Scam Bypasses Security Measures

Do Son January 9, 2025

Stay vigilant against PayPal phishing attacks. Learn about a sophisticated phishing tactic that tricks even the most cautious users.

Muddling Malspam: Unveiling the Use of Spoofed Domains in Malicious Spam Campaigns Gmail Scam

Muddling Malspam: Unveiling the Use of Spoofed Domains in Malicious Spam Campaigns

Do Son January 9, 2025

A recurring theme in these campaigns is their potential link to Muddling Meerkat, a threat actor known for puzzling DNS operations and abuse of neglected domains

Zero-Day Alert: UNC5337 Exploits Ivanti VPN Vulnerability CVE-2025-0282 for Espionage Operations

Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Zero-Day Alert: UNC5337 Exploits Ivanti VPN Vulnerability CVE-2025-0282 for Espionage Operations

Do Son January 8, 2025

UNC5337 leveraged multiple custom malware families including the SPAWNSNAIL passive backdoor, SPAWNMOLE tunneler, SPAWNANT installer

MirrorFace: Unmasking the Chinese Cyber Espionage Group Targeting Japan AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

MirrorFace: Unmasking the Chinese Cyber Espionage Group Targeting Japan

Do Son January 8, 2025

Discover the cyberattacks attributed to the MirrorFace group in Japan. Learn about their campaigns, targets, and the vulnerabilities they exploit.

Fraudsters Exploit Trust with Fake Refund Schemes in the Middle East EU Education Scams, .edu.eu Domain App Store security Refund Schemes - Texas Pharmacist's Fraudulent

EU Education Scams, .edu.eu Domain App Store security Refund Schemes - Texas Pharmacist's Fraudulent

Fraudsters Exploit Trust with Fake Refund Schemes in the Middle East

Do Son January 8, 2025

Beware of refund schemes targeting consumers in the Middle East. Learn how scammers exploit government portals and remote access tools to steal sensitive data and money.

Casio Discloses Data Leak Following Ransomware Attack Casio Network Breach - data leak

Casio Discloses Data Leak Following Ransomware Attack

Do Son January 7, 2025

Casio discloses details of a ransomware attack and data breach. Find out how the company is addressing the security issues and protecting customer information.

Beware of PhishWP: New WordPress Plugin Targets Online Shoppers WordPress Backdoor

Beware of PhishWP: New WordPress Plugin Targets Online Shoppers

Do Son January 6, 2025

Beware of PhishWP: a dangerous WordPress plugin that disguises itself as a legitimate tool but actually steals your sensitive information.