Do Son MuddyWater, an Iranian state-backed hacking group, is exploiting the legitimate remote monitoring and management (RMM) solution
Cyber Security
Zscaler ThreatLabz released its 2024 Phishing Report, revealing a disturbing evolution in phishing tactics fueled by generative AI technologies
Security experts have revealed a widespread campaign where hackers are hijacking legitimate web hosting platforms to distribute dangerous malware
A public-private partnership in the Netherlands has revealed critical information about a dangerous ransomware group dubbed Cactus
The report highlights a coordinated campaign waged by the notorious SideCopy and Transparent Tribe (APT36) groups
Cisco has identified two vulnerabilities that were abused in the ArcaneDoor campaign (CVE-2024-20353 and CVE-2024-20359).
A sophisticated hacking group suspected to be the infamous CoralRaider is ramping up its attacks, using multiple well-known infostealers
The CERT-UA has issued an urgent alert regarding escalated cyber activities by the notorious Russia-backed Sandworm APT group
AhnLab Security Intelligence Center have revealed a growing trend of infostealer malware abusing the Electron framework
Forest Blizzard has leveraged GooseEgg to exploit a critical vulnerability in the Windows Print Spooler service, identified as CVE-2022-38028
A new report from Kaspersky Labs reveals a sophisticated toolkit used by the advanced persistent threat (APT) group, "ToddyCat,"
Pupy RAT has been actively involved in cyberattacks across Asia, with notable activities in Taiwan, Hong Kong, Singapore, Japan
TransparentTribe is primarily known for targeting entities in India and Afghanistan, although their activities have spanned across continents
Cyberattacks are constantly evolving, a newly discovered backdoor named "MadMxShell" poses a unique threat to IT security
A detailed analysis by the Splunk Threat Research Team reveals a multi-pronged attack and the use of a new backdoor malware called ‘WINELOADER’
A detailed analysis by Sucuri has uncovered a sophisticated malware campaign that has shifted strategies to become more elusive and harder to detect
The DuneQuixote campaign, active since at least February 2023, utilizes a custom malware known as "CR4T" alongside droppers
GhostLocker 2.0 builds upon the original version, demonstrating the active development and sophistication of this threat
Further complicating the malware's capabilities was the introduction of the previously undocumented Kaolin RAT.
Security researchers have uncovered a persistent, multi-component virus known as OfflRouter that has been quietly infecting Ukrainian systems
The attack typically begins with cybercriminals scanning for internet-exposed Kubernetes workloads running vulnerable OpenMetadata instances
Researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics