Malware

Homebrew Phishing Site Appears in Google Search, Raising Concerns

• Malware

Homebrew Phishing Site Appears in Google Search, Raising Concerns

Do Son January 21, 2025 0

In a recent discovery, a phishing website targeting Homebrew, an open-source package manager for macOS, was found...

Read More Read more about Homebrew Phishing Site Appears in Google Search, Raising Concerns

Top 3 Malware Targeting Businesses in the Last 12 Months

• Malware

Top 3 Malware Targeting Businesses in the Last 12 Months

Do Son January 21, 2025 0

The cybersecurity trends are constantly shifting, and 2024 was no exception. Attackers found new ways to target...

Read More Read more about Top 3 Malware Targeting Businesses in the Last 12 Months

Gootloader Malware Expands Its Reach with Advanced Social Engineering and SEO Poisoning

• Malware

Gootloader Malware Expands Its Reach with Advanced Social Engineering and SEO Poisoning

Do Son January 20, 2025 0

Sophos X-Ops has released an in-depth analysis of the notorious Gootloader malware family, highlighting its use of...

Read More Read more about Gootloader Malware Expands Its Reach with Advanced Social Engineering and SEO Poisoning

MintsLoader Campaign Targets Critical Sectors with Sophisticated Malware Delivery

• Malware

MintsLoader Campaign Targets Critical Sectors with Sophisticated Malware Delivery

Do Son January 20, 2025 0

The eSentire Threat Response Unit (TRU) has uncovered a new malware campaign leveraging a tool called MintsLoader...

Read More Read more about MintsLoader Campaign Targets Critical Sectors with Sophisticated Malware Delivery

Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware

• Cyber Security
• Malware

Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware

Do Son January 20, 2025 0

A sophisticated cyber-espionage campaign targeting organizations across China, Hong Kong, and Taiwan has been uncovered by Intezer’s...

Read More Read more about Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware

Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

• Malware

Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

Do Son January 19, 2025 0

The Socket research team has identified a malicious Python package on PyPI named pycord-self, targeting developers working...

Read More Read more about Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

Black Basta Exploits Microsoft Teams for Phishing Attacks

• Cyber Security
• Malware

Black Basta Exploits Microsoft Teams for Phishing Attacks

Do Son January 19, 2025 0

NVISO Labs has uncovered a sophisticated phishing campaign attributed to the ransomware group Black Basta, leveraging Microsoft...

Read More Read more about Black Basta Exploits Microsoft Teams for Phishing Attacks

IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations

• Malware

IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations

Do Son January 19, 2025 0

A newly discovered IoT botnet has been linked to a series of large-scale distributed denial-of-service (DDoS) attacks...

Read More Read more about IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations

Lazarus APT Targets Job Seekers with “Contagious Interview” Campaign Using ClickFix Technique

• Malware

Lazarus APT Targets Job Seekers with “Contagious Interview” Campaign Using ClickFix Technique

Do Son January 18, 2025 0

North Korea’s notorious Lazarus APT group has been observed employing advanced social engineering tactics in a campaign...

Read More Read more about Lazarus APT Targets Job Seekers with “Contagious Interview” Campaign Using ClickFix Technique

“PlugX” Malware Deleted from Thousands of Computers in Global Operation

• Malware
• Vulnerability

“PlugX” Malware Deleted from Thousands of Computers in Global Operation

Do Son January 14, 2025 0

In a decisive move against Chinese state-sponsored cyber espionage, the U.S. Department of Justice (DOJ) and FBI,...

Read More Read more about “PlugX” Malware Deleted from Thousands of Computers in Global Operation

Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch

• Malware

Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch

Do Son January 14, 2025 0

A recent report by researchers at Socket reveals a concerning supply chain attack targeting popular Node.js libraries,...

Read More Read more about Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch

Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack

• Malware

Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack

Do Son January 14, 2025 0

A widespread malware campaign has been uncovered, targeting over 5,000 WordPress websites globally. The campaign, traced back...

Read More Read more about Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack

Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution

• Malware

Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution

Do Son January 14, 2025 0

Seqrite Lab recently uncovered a sophisticated phishing campaign leveraging old payloads to deploy the infamous Formbook stealer....

Read More Read more about Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution

Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit

• Linux
• Malware

Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit

Do Son January 13, 2025 0

The FortiGuard Incident Response (FGIR) team has conducted a comprehensive analysis of a sophisticated Linux rootkit, shedding...

Read More Read more about Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

• Cyber Security
• Malware

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

Do Son January 13, 2025 0

In a recent revelation, security researchers Amaury G., Maxime A., Erwan Chevalier, Felix Aimé, and Sekoia TDR...

Read More Read more about APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing

• Malware

LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing

Do Son January 13, 2025 0

Cybersecurity researchers at AhnLab Security Intelligence Center (ASEC) have unveiled a sophisticated distribution tactic for the LummaC2...

Read More Read more about LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing

HexaLocker V2: Ransomware Reborn with Advanced Tactics

• Malware

HexaLocker V2: Ransomware Reborn with Advanced Tactics

Do Son January 12, 2025 0

On August 9, 2024, the HexaLocker ransomware group unveiled a new variant of their infamous malware on...

Read More Read more about HexaLocker V2: Ransomware Reborn with Advanced Tactics

RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns

• Cyber Security
• Malware

RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns

Do Son January 12, 2025 0

A recent report by Insikt Group reveals an ongoing, sophisticated cyber-espionage operation by the RedDelta advanced persistent...

Read More Read more about RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns

RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques

• Cyber Security
• Malware

RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques

Do Son January 12, 2025 0

The RedCurl Advanced Persistent Threat (APT) group, also known as Earth Kapre or Red Wolf, has resurfaced...

Read More Read more about RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques

GroupGreeting E-Card Platform Compromised in “zqxq” Campaign

• Cyber Security
• Malware

GroupGreeting E-Card Platform Compromised in “zqxq” Campaign

Do Son January 11, 2025 0

The popular e-card platform GroupGreeting.com, used by major companies such as Airbnb, Coca-Cola, and eBay, recently fell...

Read More Read more about GroupGreeting E-Card Platform Compromised in “zqxq” Campaign