Nation-state backed cyberattacks are a growing concern in an interconnected world. Earth Lusca, a threat group with ties to China, has proven itself a cunning player in this high-stakes arena....
In the cybersecurity threats, DLL hijacking remains a classic maneuver in the arsenal of cyber adversaries. This technique, despite its age, continues to offer a stealthy passage for threat actors...
SentinelLabs and ClearSky Cyber Security have been tracking an intensive influence operation spreading propaganda and disinformation since late 2023. This campaign, attributed to the Russia-aligned Doppelgänger network, initially focused on...
Research from Lab52 has uncovered a recent Turla campaign exhibiting novel tactics and a customized variant of the Kazuar trojan. This analysis offers technical insights into the campaign’s methodology and...
Sophos X-Ops has spotlighted a concerning trend in the exploitation of vulnerabilities within ConnectWise ScreenConnect installations, a widely used remote monitoring and management software. The recently disclosed vulnerabilities in ScreenConnect...
VOLTZITE, a threat group known for persistent targeting of global critical infrastructure sectors, continues to refine its methods. Identified by Dragos, this group has quickly garnered attention for its sophisticated...
The notorious 8220 Gang has resurfaced, targeting cloud infrastructure in a campaign demonstrating significant advancements in their tactics, techniques, and procedures (TTPs). This ongoing campaign, active since May 2023, primarily...
Researchers at Talos and CERT.NGO have pulled back the curtain on new malicious components deployed by the notorious Turla APT group, exposing a sophisticated web of tools engineered for stealthy...
A recent investigation by Trustwave SpiderLabs’ Email Security team has uncovered a sophisticated Phishing-as-a-Service (PaaS) platform known as Tycoon Group. This platform’s capabilities and ease of use highlight the growing...
Security experts at the AhnLab Security Intelligence Center (ASEC) have recently uncovered a malware distribution campaign targeting a Korean construction-related association website. The attackers have compromised legitimate security software installers,...
Security researchers at Aqua Nautilus have uncovered a sophisticated campaign exploiting misconfigurations and vulnerabilities in Apache Hadoop and Apache Druid. This campaign leverages a potent variant of the Lucifer DDoS...
Carpet-bombing DDoS attacks are a growing concern for network operators. Their ability to circumvent traditional defenses and cause widespread disruption has led to a new age of attack methodologies. This...
In September 2023, the infamous Russian-linked cyber-espionage group APT29 flexed its muscle again, this time targeting embassies of several nations with a well-crafted attack. The group exploited a critical vulnerability...
ESET researchers have meticulously dissected a complex, ongoing influence operation named ‘Operation Texonto.’ This campaign, exhibiting strong alignment with Russian interests, blends espionage techniques with disinformation tactics to target Ukraine,...
The Lazarus Group, a skilled North Korean state-sponsored hacking collective, continues to aggressively target entities in the global defense sector. Their goal: To bolster North Korea’s military capabilities through the...
Support Securityonline.info site. Thanks!
