Iran-backed cyberespionage group MuddyWater has launched a new campaign targeting victims worldwide, with a focus on telecommunications, government organizations, and the oil, gas, and energy sectors. ESET telemetry from Q4...
Researchers from Trend Micro have uncovered a new campaign by Earth Longzhi, a subgroup of APT41, which targets organizations in Taiwan, Thailand, the Philippines, and Fiji. The campaign, following months...
APT41, a Chinese cyber espionage group active since 2012, is known for its advanced tactics, techniques, and procedures (TTPs), including the use of custom-built malware and tools. The group is...
Kimsuky, a North Korean state-sponsored cyber adversary, has been active since at least 2012. Known for its expert use of social engineering techniques, Kimsuky targets entities related to South Korean...
Researchers from Unit 42 have recently discovered a new variant of the PingPull malware, which targets Linux systems and is used by the Chinese APT group, Alloy Taurus. This group,...
Microsoft has announced that it will henceforth employ climate-related nomenclature to designate various types of hacking activities. Unclassified hacking behavior still under investigation will be dubbed “Storm,” while hacking activities...
The Daggerfly (also known as Evasive Panda or Bronze Highland) advanced persistent threat (APT) group has recently deployed previously unseen plugins from the MgBot malware framework in a new campaign...
Google’s Threat Analysis Group (TAG) has been actively disrupting cyber campaigns orchestrated by multiple Russian government-backed groups targeting the war in Ukraine. The first quarter of 2023 saw these phishing...
In 2022, the Citizen Lab discovered a series of zero-click exploit chains developed by the NSO Group, targeting iOS 15 and iOS 16 devices worldwide. The investigation began after detecting...
The Lazarus Group, a high-profile Korean-speaking threat actor, has long targeted cryptocurrency-related businesses. However, recent Kaspersky reports indicate an evolution in their tactics, techniques, and procedures, with shifts in targets...
In February 2023, Kaspersky technologies detected a series of elevation-of-privilege exploits on Microsoft Windows servers belonging to small and medium-sized businesses in the Middle East, North America, and Asia. These...
Google’s Threat Analysis Group (TAG) at Google has been tracking North Korean government-backed hacking activities for over a decade. In a follow-up to Mandiant’s report on APT43, TAG shares its...
Western Digital, a prominent name in data technology products, recently faced a significant network security incident. Unauthorized access to the company’s systems has disrupted its operations and impacted its customer...
Recently, McAfee Labs uncovered a series of malware campaigns leveraging the popular note-taking application, Microsoft OneNote, to deliver and execute various strains of malicious software. With Microsoft’s policy change disabling...
In an increasingly connected world, security vulnerabilities are a persistent concern for businesses and individuals alike. The recent discovery of a compromised 3CX Desktop App highlights the continued prevalence of...
Support Securityonline.info site. Thanks!
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
November 19, 2024
