Do Son Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks
Cyber Security
These scams go beyond the typical emotional manipulation seen in traditional romance scams, incorporating elaborate schemes involving fake cryptocurrency exchanges
NHS England Digital has issued a critical alert concerning vulnerabilities in Arcserve’s Unified Data Protection (UDP) software
CRIL published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to Venus ransomware
Scattered Spider, also known by multiple aliases including 0ktapus and Muddled Libra, is a financially motivated threat actor group active
Tycoon 2FA operates by using an adversary-in-the-middle (AitM) approach. Its primary function is to harvest session cookies
TRU have uncovered a disturbing trend in FIN7 attacks demonstrating the notorious cybercrime group's evolving tactics for infiltrating systems
The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221
By following these steps, you can easily protect yourself from becoming a victim of URL phishing attacks and thus enhance your online safety
A bespoke backdoor known as Kapeka (also dubbed KnuckleTouch) has been spotlighted for its sophisticated capabilities
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
The report highlights an alarming trend where cybercriminals and Advanced Persistent Threat (APT) groups, such as Pawn Storm
Microsoft Graph API is being used to facilitate communications with command-and-control (C&C) servers hidden within Microsoft’s cloud infrastructure
APT42 operations are using two custom backdoors: NICECURL and TAMECAT. These backdoors are delivered via spear phishing
Dropbox has confirmed a security breach within its Dropbox Sign (formerly HelloSign) service, exposing customer data
A comprehensive report has uncovered the money laundering tactics employed by the North Korean hacking collective, Lazarus Group
Akamai security researchers highlight the shocking scale of phishing scams impersonating the United States Postal Service (USPS)
Cato Networks reported intercepting several attempts aimed at installing the XMRig cryptocurrency mining malware using this vulnerability
troubling cyber campaign, dubbed FROZEN#SHADOW, threat actors have leveraged the relatively unknown SSLoad malware
Security experts at eSentire have sounded the alarm on a new wave of FakeBat malware attacks. Threat actors are refining their methods
During their investigation, ThreatFabric identified a new actor in the Brokewell mobile malware arena—dubbed "Baron Samedit."