Malware

North Korea’s Cyber Shadow War: Unmasking RustBucket and KandyKorn

• Cyber Security
• Malware

North Korea’s Cyber Shadow War: Unmasking RustBucket and KandyKorn

Do Son November 27, 2023 0

The SwiftLoader droppers from RustBucket were repurposed to deliver KandyKorn payloads, showcasing a recycling of tools

Android Malware Surge: Adware Trojans, Spyware Trojans, and Banking Malware on the Rise

• Malware

Android Malware Surge: Adware Trojans, Spyware Trojans, and Banking Malware on the Rise

Do Son November 24, 2023 0

According to the latest report from Dr.Web, October 2023 witnessed a significant surge in the activity of malicious software targeting Android-based mobile devices

Hamas-Linked SysJoker Backdoor: A Persistent Threat’s New Dangerous Facade

• Cyber Security
• Malware

Hamas-Linked SysJoker Backdoor: A Persistent Threat’s New Dangerous Facade

Do Son November 24, 2023 0

SysJoker backdoor collects information about the infected system, including Windows version, username, MAC address, IP address, other data

WailingCrab Malware Evolves: Embracing MQTT for Stealthier C2 Communication

• Malware

WailingCrab Malware Evolves: Embracing MQTT for Stealthier C2 Communication

Do Son November 23, 2023 0

WailingCrab, also known as WikiLoader, is a sophisticated malware that primarily targets organizations through email campaigns

Cyble Research Uncovers Persian Remote World, a Threat to Cybersecurity

• Malware

Cyble Research Uncovers Persian Remote World, a Threat to Cybersecurity

Do Son November 23, 2023 0

The emergence of Persian Remote World and its suite of malicious tools like Persian Loader and RATs underscores a significant threat

Phobos Ransomware: A Masquerading Threat Impersonating VX-Underground

• Cyber Security
• Malware

Phobos Ransomware: A Masquerading Threat Impersonating VX-Underground

Do Son November 23, 2023 0

Phobos ransomware has exploited the credibility of VX-Underground, weaving a deceptive web to entrap its victims.

HrServ Web Shell Defies Detection with Stealthy Techniques

• Malware

HrServ Web Shell Defies Detection with Stealthy Techniques

Do Son November 23, 2023 0

Researchers discovered a DLL file identified as "hrserv.dll," representing a previously unknown web shell with advanced capabilities

Beware the Invisible Threat: Phishing Expands with QR Codes, CAPTCHAs, and Steganography

• Cyber Security
• Malware

Beware the Invisible Threat: Phishing Expands with QR Codes, CAPTCHAs, and Steganography

Do Son November 22, 2023 0

A novel phishing technique, Quishing (a blend of QR and phishing), involves concealing malicious links within QR codes.

G Data Uncovers Stealthy Malware: Agent Tesla Targets Sensitive Data in Email and Browsers

• Malware

G Data Uncovers Stealthy Malware: Agent Tesla Targets Sensitive Data in Email and Browsers

Do Son November 22, 2023 0

G Data has uncovered a novel variant of the malicious software Agent Tesla, delivered via a bait file in the ZPAQ compression format

NetSupport RAT Wielded in Escalating Cyber Attacks: Educational Institutions, Government Agencies, and Service Businesses at Risk

• Cyber Security
• Malware

NetSupport RAT Wielded in Escalating Cyber Attacks: Educational Institutions, Government Agencies, and Service Businesses at Risk

Do Son November 22, 2023 0

NetSupport RAT most commonly infiltrates a victim’s system through deceptive websites and bogus browser updates.

EFF Discovers Corejava Malware Embedded in Dragon Touch KidzPad Y88X 10 Devices

• Malware

EFF Discovers Corejava Malware Embedded in Dragon Touch KidzPad Y88X 10 Devices

Do Son November 22, 2023 0

Amazon continued to sell these compromised devices until February 2023. In both cases, the same Corejava malware was detected.

LockBit 3.0 Ransomware Exploit Targets Citrix NetScaler Appliances

• Malware
• Vulnerability

LockBit 3.0 Ransomware Exploit Targets Citrix NetScaler Appliances

Do Son November 21, 2023 0

LockBit 3.0, an advanced ransomware, has been exploiting a critical vulnerability dubbed "Citrix Bleed" (CVE-2023-4966)

The Escalating Threat of Mobile Banking Trojan Campaigns in India

• Malware

The Escalating Threat of Mobile Banking Trojan Campaigns in India

Do Son November 20, 2023 0

Mobile banking trojan infections can significantly endanger users' personal and financial security. Awareness of the risks and common tactics

DarkGate and PikaBot: New Malware Threats Emerge from Advanced Phishing Campaign

• Cyber Security
• Malware

DarkGate and PikaBot: New Malware Threats Emerge from Advanced Phishing Campaign

Do Son November 20, 2023 0

This dropper then fetches and executes either DarkGate or PikaBot malware, marking the successful infection of the user's machine

WinSCP SEO Poisoning Campaign: Hackers Exploit Popular Software for Malware Attacks

• Cyber Security
• Malware

WinSCP SEO Poisoning Campaign: Hackers Exploit Popular Software for Malware Attacks

Do Son November 20, 2023 0

DLL Sideloading is used to run a malicious DLL library, while the genuine WinSCP installer serves as a smokescreen for the deceit.

Remcos RAT: Hackers Target Ukrainian Government with Surveillance Tool

• Cyber Security
• Malware

Remcos RAT: Hackers Target Ukrainian Government with Surveillance Tool

Do Son November 20, 2023 0

Hackers disseminated phishing emails containing Remcos RAT attachments disguised as PDF files, sent by the Security Service of Ukraine

Kinsing Cryptocurrency Miner Leverages Apache ActiveMQ Bug to Infect Linux Systems

• Cyber Security
• Malware
• Vulnerability

Kinsing Cryptocurrency Miner Leverages Apache ActiveMQ Bug to Infect Linux Systems

Do Son November 20, 2023 0

CVE-2023-46604 is being used to infiltrate Linux systems with the Kinsing malware, culminating in a nefarious cryptocurrency mining operation

Nitrogen Malware: BlackCat’s New Weapon in Disguised Advertising Attacks

• Cyber Security
• Malware

Nitrogen Malware: BlackCat’s New Weapon in Disguised Advertising Attacks

Do Son November 19, 2023 0

Disguised as popular business software, such as Slack or Cisco's VPN client AnyConnect, the malefactors distribute the Nitrogen malware,

Rhysida Ransomware Threat Grows: FBI and CISA Warn

• Malware

Rhysida Ransomware Threat Grows: FBI and CISA Warn

Do Son November 16, 2023 0

FBI and the CISA in a joint statement on November 15 warned of an escalation in attacks by the Rhysida ransomware gang.

Swiss Software Giant Concevis Falls Victim to Ransomware Attack

• Cyber Security
• Malware

Swiss Software Giant Concevis Falls Victim to Ransomware Attack

Do Son November 16, 2023 0

Concevis, a major Swiss provider of software solutions for the government, financial sector, logistics companies, faced a ransomware attack

GPT-4: Unveiling the AI Model’s Prowess in Malware Analysis

• Malware
• Technology

GPT-4: Unveiling the AI Model’s Prowess in Malware Analysis

Do Son November 16, 2023 0

Check Point conducted a study on the capabilities of GPT in the realm of malware analysis, using the extensive language model of GPT-4

Ddostf DDoS Bot Exploits Vulnerabilities: MySQL Servers at Risk

• Cyber Security
• Malware

Ddostf DDoS Bot Exploits Vulnerabilities: MySQL Servers at Risk

Do Son November 16, 2023 0

AhnLab has discovered attacks on vulnerable MySQL servers using the Ddostf bot for DDoS assaults. First identified in 2016