Malware

Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage

• Cyber Security
• Malware

Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage

Do Son February 6, 2025 0

Uncover the tactics used by the North Korean APT group Kimsuky in their cyber espionage operations, including the use of the RDP Wrapper for persistent access.

BADBOX Botnet: Pre-installed Malware Targets Android Devices

• Malware

BADBOX Botnet: Pre-installed Malware Targets Android Devices

Do Son February 6, 2025 0

Learn about the widespread BADBOX botnet infecting Android devices via compromised firmware. Stay protected from this insidious threat.

ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks

• Malware

ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks

Do Son February 6, 2025 0

Unveiling the sophisticated Silver Fox APT: Learn how this multi-stage malware campaign deploys the resilient ValleyRAT.

Malicious Go Package Exploits Caching for Stealthy Persistence

• Malware

Malicious Go Package Exploits Caching for Stealthy Persistence

Do Son February 5, 2025 0

Unveiling a malicious Go package discovered in the Go ecosystem. Learn how a typosquatting package exploits the Go Module Proxy's caching mechanism.

$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service

• Malware

$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service

Do Son February 5, 2025 0

Discover the NOVA stealer, a new commercial variant of the SnakeLogger malware. Learn how this campaign is targeting Russian organizations.

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections

• Cyber Security
• Malware

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections

Do Son February 5, 2025 0

Uncover the intricate web of the SmartApeSG FakeUpdate campaign and its connections to NetSupport RAT and other malicious threats.

North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface

• Malware

North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface

Do Son February 5, 2025 0

Uncover the new 'FlexibleFerret' macOS malware attributed to North Korean threat actors. Learn about the evolving tactics and job interview schemes used in these espionage campaigns.

SparkCat Malware: Sneaky Crypto Stealer Found in Google Play and App Store Apps

• Malware

SparkCat Malware: Sneaky Crypto Stealer Found in Google Play and App Store Apps

Do Son February 5, 2025 0

Beware of the SparkCat malware campaign that steals cryptocurrency recovery phrases using optical character recognition (OCR) technology on Android and iOS devices.

Coyote Banking Trojan: A Multi-Stage Financial Cyber Threat Targeting Brazil

• Malware

Coyote Banking Trojan: A Multi-Stage Financial Cyber Threat Targeting Brazil

Do Son February 4, 2025 0

Learn about the Coyote Banking Trojan, a stealthy malware campaign targeting online banking users. Protect yourself from this sophisticated threat

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns

• Cyber Security
• Malware

TAG-124: A Deep Dive into the Traffic Distribution System Powering Malware Campaigns

Do Son February 4, 2025 0

Uncover the TAG-124 traffic distribution system used by cybercriminals to spread malware, phishing pages, and fake browser updates.

Tria Stealer: Android Malware Hijacks WhatsApp and Telegram Accounts

• Malware

Tria Stealer: Android Malware Hijacks WhatsApp and Telegram Accounts

Do Son February 3, 2025 0

Tria Stealer: a dangerous Android malware campaign that steals personal messages, hijacks WhatsApp and Telegram accounts, and facilitates financial fraud.

CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia

• Cyber Security
• Malware

CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia

Do Son February 3, 2025 0

Uncover the details of a newly identified cyberespionage campaign, CL-STA-0048, targeting high-value organizations in South Asia.

Tiny FUD: Fully Undetectable macOS Backdoor Discovered

• Malware

Tiny FUD: Fully Undetectable macOS Backdoor Discovered

Do Son February 3, 2025 0

Uncover the threat of Tiny FUD, a fully undetectable macOS backdoor that poses a significant risk to Apple users.

10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware

• Malware

10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware

Do Son February 3, 2025 0

Learn about a sophisticated attack campaign targeting WordPress websites and delivering SocGholish Windows malware to unsuspecting users.

Lumma Stealer Uses GitHub as a Malware Delivery Platform

• Malware

Lumma Stealer Uses GitHub as a Malware Delivery Platform

Do Son February 3, 2025 0

Uncover a sophisticated malware campaign using GitHub's release infrastructure to distribute the dangerous Lumma Stealer Trojan. Learn more.

North Korean APT Lazarus Uses Malicious npm Package to Target Developers

• Malware

North Korean APT Lazarus Uses Malicious npm Package to Target Developers

Do Son February 2, 2025 0

Discover the latest supply chain attack orchestrated by the North Korean APT Lazarus Group. Learn how the BeaverTail malware infiltrates developer environments.

SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond

• Cyber Security
• Malware

SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond

Do Son February 2, 2025 0

Explore the evolution of SparkRAT, a powerful tool for cybercriminals. Learn about its modular design, web-based interface, and cross-platform support.

Fake Game Hacks on YouTube Target Kids with Malware

• Malware

Fake Game Hacks on YouTube Target Kids with Malware

Do Son February 1, 2025 0

Beware of fake game hacks! McAfee Labs warns about malware spread through YouTube videos offering cheats for popular games like Minecraft, Roblox, and Fortnite.

Phorpiex Botnet Now Deploying LockBit Ransomware in Automated Attacks

• Malware

Phorpiex Botnet Now Deploying LockBit Ransomware in Automated Attacks

Do Son January 30, 2025 0

Uncover the unique attack method involving the Phorpiex botnet and LockBit Black Ransomware. Find out how automation is changing the landscape of ransomware deployment.

Phishing Alert: Cybercriminals Deploy SapphireRAT via Legal Notices

• Malware

Phishing Alert: Cybercriminals Deploy SapphireRAT via Legal Notices

Do Son January 30, 2025 0

Protect your organization from the SapphireRAT phishing attack. Discover how cybercriminals are evading traditional security measures with fake legal notices.

China-Nexus Espionage: ScatterBrain Obfuscation Tactics Revealed

• Malware

China-Nexus Espionage: ScatterBrain Obfuscation Tactics Revealed

Do Son January 30, 2025 0

Discover ScatterBrain, a powerful obfuscating compiler employed by APT41. Understand its role in protecting the advanced modular backdoor POISONPLUG.SHADOW.

Aquabotv3: The Mirai-Based Botnet Exploiting CVE-2024-41710 for DDoS Attacks

• Malware
• Vulnerability

Aquabotv3: The Mirai-Based Botnet Exploiting CVE-2024-41710 for DDoS Attacks

Do Son January 30, 2025 0

Mitel SIP phones under active exploitation by Aquabotv3, a new variant of the Mirai-based botnet. Learn about the undisclosed vulnerability CVE-2024-41710.