Malware

Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists

• Malware
• Vulnerability

Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists

Do Son December 16, 2024 0

A new report by Amnesty International reveals that NSO Group’s Pegasus spyware was used to target iPhones...

Read More Read more about Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists

HeartCrypt: A Packer-as-a-Service Fueling Malware Campaigns

• Malware

HeartCrypt: A Packer-as-a-Service Fueling Malware Campaigns

Do Son December 16, 2024 0

Unit 42 has uncovered HeartCrypt, a Packer-as-a-Service (PaaS) designed to protect malware from detection. Since its launch...

Read More Read more about HeartCrypt: A Packer-as-a-Service Fueling Malware Campaigns

SADBRIDGE Loader Unveils GOSAR Backdoor in Cyber Attacks

• Malware

SADBRIDGE Loader Unveils GOSAR Backdoor in Cyber Attacks

Do Son December 16, 2024 0

Elastic Security Labs has revealed a significant evolution in malware development with the discovery of GOSAR, a...

Read More Read more about SADBRIDGE Loader Unveils GOSAR Backdoor in Cyber Attacks

NodeLoader: A New Malware Family Exploits Node.js for Stealthy Attacks

• Malware

NodeLoader: A New Malware Family Exploits Node.js for Stealthy Attacks

Do Son December 16, 2024 0

Zscaler ThreatLabz has uncovered a novel malware campaign leveraging Node.js applications for Windows to deliver cryptocurrency miners...

Read More Read more about NodeLoader: A New Malware Family Exploits Node.js for Stealthy Attacks

Voice Phishing on Microsoft Teams Facilitates DarkGate Malware Attack

• Cyber Security
• Malware

Voice Phishing on Microsoft Teams Facilitates DarkGate Malware Attack

Do Son December 16, 2024 0

Trend Micro has revealed a new vector for cyberattacks: voice phishing (vishing) conducted via Microsoft Teams. This...

Read More Read more about Voice Phishing on Microsoft Teams Facilitates DarkGate Malware Attack

Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack

• Cyber Security
• Malware

Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack

Do Son December 16, 2024 0

According to Datadog Security Labs, a cybercriminal group known as MUT-1244 has launched a sophisticated attack campaign...

Read More Read more about Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack

Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks

• Cyber Security
• Malware

Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks

Do Son December 15, 2024 0

A new report from Microsoft Threat Intelligence reveals that the Russian state-sponsored threat actor known as Secret...

Read More Read more about Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks

Google Ads Abused in Graphic Design Malvertising Attack

• Cyber Security
• Malware

Google Ads Abused in Graphic Design Malvertising Attack

Do Son December 15, 2024 0

Silent Push Threat Analysts have revealed a widespread malvertising campaign exploiting Google Ads to target graphic design...

Read More Read more about Google Ads Abused in Graphic Design Malvertising Attack

The Zero-Detection PHP Backdoor Glutton Exposed

• Cyber Security
• Malware

The Zero-Detection PHP Backdoor Glutton Exposed

Do Son December 15, 2024 0

A discovery by XLab has detailed Glutton, a stealthy PHP backdoor targeting both traditional organizations and the...

Read More Read more about The Zero-Detection PHP Backdoor Glutton Exposed

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

• Linux
• Malware

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

Do Son December 15, 2024 0

Elastic Security Labs has uncovered “PUMAKIT,” a sophisticated multi-stage malware targeting Linux systems. Initially discovered during routine...

Read More Read more about Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

New Android Banking Trojan Targets Indian Users Through Fake Apps

• Malware

New Android Banking Trojan Targets Indian Users Through Fake Apps

Do Son December 14, 2024 0

McAfee Labs has revealed the discovery of a new Android banking trojan targeting Indian users, exploiting the...

Read More Read more about New Android Banking Trojan Targets Indian Users Through Fake Apps

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

• Malware

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

Do Son December 14, 2024 0

A sophisticated malware strain dubbed “IOCONTROL” has emerged as a significant threat to industrial control systems (ICS)...

Read More Read more about IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

DCOM Upload & Execute: A New Backdoor Technique Unveiled

• Malware
• Vulnerability

DCOM Upload & Execute: A New Backdoor Technique Unveiled

Do Son December 13, 2024 0

Deep Instinct Security Researcher Eliran Nissan has uncovered a new and potent lateral movement technique, “DCOM Upload...

Read More Read more about DCOM Upload & Execute: A New Backdoor Technique Unveiled

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

• Malware
• Vulnerability
• Windows

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

Do Son December 13, 2024 0

Akamai security researcher Tomer Peled has unveiled a novel attack technique exploiting Microsoft’s legacy UI Automation framework,...

Read More Read more about Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome

• Cyber Security
• Malware

Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome

Do Son December 12, 2024 0

Researchers at the Lookout Threat Lab have uncovered two sophisticated Android spyware families, BoneSpy and PlainGnome, attributed...

Read More Read more about Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome

High-Profile Organizations in Southeast Asia Hit by Targeted Cyberattacks

• Cyber Security
• Malware

High-Profile Organizations in Southeast Asia Hit by Targeted Cyberattacks

Do Son December 12, 2024 0

The Symantec Threat Hunter Team has uncovered a sophisticated cyber campaign targeting high-profile organizations in Southeast Asia....

Read More Read more about High-Profile Organizations in Southeast Asia Hit by Targeted Cyberattacks

Modular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623)

• Malware
• Vulnerability

Modular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623)

Do Son December 12, 2024 0

Rapid7 Labs and its Managed Detection and Response (MDR) team uncovered a sophisticated modular Java-based Remote Access...

Read More Read more about Modular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623)

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

• Cyber Security
• Malware

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

Do Son December 12, 2024 0

In August 2024, JPCERT/CC confirmed a targeted attack against a Japanese organization, believed to be the work...

Read More Read more about APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

• Data Leak
• Malware

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

Do Son December 12, 2024 0

Researchers at the Lookout Threat Lab have identified a sophisticated surveillance tool, dubbed EagleMsgSpy, reportedly used by...

Read More Read more about EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

Zloader Trojan Employs Novel DNS Tunneling Protocol for Enhanced Evasion

• Malware

Zloader Trojan Employs Novel DNS Tunneling Protocol for Enhanced Evasion

Do Son December 11, 2024 0

Zloader, the modular Trojan with roots in the infamous Zeus malware, has once again evolved, presenting a...

Read More Read more about Zloader Trojan Employs Novel DNS Tunneling Protocol for Enhanced Evasion