Malware

Fake LDAPNightmare PoC Exploit Conceals Information-Stealing Malware

• Malware

Fake LDAPNightmare PoC Exploit Conceals Information-Stealing Malware

Do Son January 9, 2025 0

Beware of the dangerous LDAPNightmare exploit posing as a proof-of-concept for Microsoft's CVE-2024-49113 vulnerability. Find out how attackers are distributing information-stealing malware through this fake exploit.

Malicious npm Packages Target Solana Developers, Stealing Private Keys via Gmail

• Malware

Malicious npm Packages Target Solana Developers, Stealing Private Keys via Gmail

Do Son January 9, 2025 0

Discover the concerning campaign involving npm packages designed to exfiltrate Solana private keys via Gmail. Learn how to protect yourself from this threat.

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies

• Malware

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies

Do Son January 9, 2025 0

Learn about the collaboration of Play ransomware with the Andariel group. Explore the tactics used in this sophisticated cyber attack.

Malware Alert: Banshee Stealer Targets macOS Users

• Malware

Malware Alert: Banshee Stealer Targets macOS Users

Do Son January 9, 2025 0

Learn about the dangers of the Banshee Stealer, a sophisticated malware targeting macOS users. Discover how it evades detection and steals sensitive data.

Zero-Day Alert: UNC5337 Exploits Ivanti VPN Vulnerability CVE-2025-0282 for Espionage Operations

• Cyber Security
• Malware
• Vulnerability

Zero-Day Alert: UNC5337 Exploits Ivanti VPN Vulnerability CVE-2025-0282 for Espionage Operations

Do Son January 8, 2025 0

UNC5337 leveraged multiple custom malware families including the SPAWNSNAIL passive backdoor, SPAWNMOLE tunneler, SPAWNANT installer

“Gayfemboy” Botnet Leveraging 0-Day Exploit in Four-Faith Industrial Routers

• Malware
• Vulnerability

“Gayfemboy” Botnet Leveraging 0-Day Exploit in Four-Faith Industrial Routers

Do Son January 7, 2025 0

Discover the powerful Gayfemboy botnet and its persistence in leveraging a 0-day vulnerability in industrial routers for DDoS attacks.

Thousands of SonicWall Devices Remain Vulnerable to CVE-2024-40766

• Malware
• Vulnerability

Thousands of SonicWall Devices Remain Vulnerable to CVE-2024-40766

Do Son January 6, 2025 0

Uncover the details of CVE-2024-40766 vulnerability in SonicWall NSA devices and the alarming number of organizations still exposed to it.

EAGERBEE: Advanced Backdoor Targets Middle Eastern ISPs and Government Entities

• Cyber Security
• Malware

EAGERBEE: Advanced Backdoor Targets Middle Eastern ISPs and Government Entities

Do Son January 6, 2025 0

Uncover the advanced cyberespionage campaign using the EAGERBEE backdoor to infiltrate ISPs and governmental institutions in the Middle East.

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal

• Malware

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal

Do Son January 5, 2025 0

Explore the sophisticated NonEuclid RAT and its evolution in malware sophistication. Discover its ransomware encryption and anti-VM checks.

CryptBot Infostealer Returns with Sophisticated Tactics for Initial Access

• Malware

CryptBot Infostealer Returns with Sophisticated Tactics for Initial Access

Do Son January 5, 2025 0

Stay informed about the resurfacing of CryptBot, a dangerous information-stealing malware. Learn how it uses advanced tactics to target unsuspecting victims.

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance

• Cyber Security
• Malware

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance

Do Son January 5, 2025 0

Uncover the misuse of OAST techniques by threat actors. Learn how ethical security assessments tools are being hijacked for nefarious purposes.

Cybersecurity Alert: FireScam—The Android Malware Disguised as Telegram Premium

• Malware

Cybersecurity Alert: FireScam—The Android Malware Disguised as Telegram Premium

Do Son January 5, 2025 0

Beware of FireScam: a dangerous Android malware posing as Telegram Premium app. Learn how cybercriminals exploit unsuspecting users and steal sensitive information.

Beware! Fake EditThisCookie Extension Steals User Data

• Malware

Beware! Fake EditThisCookie Extension Steals User Data

Do Son January 3, 2025 0

Beware of EditThisCookie®: the malicious browser extension designed to steal user cookies and post phishing content through social media accounts.

Supply Chain Attack on Ethereum Developers via Malicious npm Packages

• Malware

Supply Chain Attack on Ethereum Developers via Malicious npm Packages

Do Son January 2, 2025 0

Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.

Project Quarantine: PyPI’s New Line of Defense Against Malware

• Malware
• Technology

Project Quarantine: PyPI’s New Line of Defense Against Malware

Do Son January 2, 2025 0

Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.

Unmasking Fraudulent Popularity: Study Exposes 4.5 Million Fake Stars on GitHub

• Cyber Security
• Malware

Unmasking Fraudulent Popularity: Study Exposes 4.5 Million Fake Stars on GitHub

Do Son January 2, 2025 0

Uncovering the truth about GitHub's star-rating system: a study reveals widespread fraudulent stars manipulating repository popularity.

From Fake Installers to Stolen Credentials: Decoding the LegionLoader Threat

• Malware

From Fake Installers to Stolen Credentials: Decoding the LegionLoader Threat

Do Son January 1, 2025 0

Learn about the evolution of LegionLoader, a sophisticated downloader malware with a wide range of capabilities, including capturing screenshots and stealing information.

D-Link Issues Warning on End-of-Life Routers Vulnerable to Botnet Exploits

• Malware
• Vulnerability

D-Link Issues Warning on End-of-Life Routers Vulnerable to Botnet Exploits

Do Son January 1, 2025 0

D-Link issues critical advisory for End-of-Life routers. Learn about the vulnerabilities exploited by botnets and the need for replacement.

Stealthy UEFI Bootkit Targets Windows Kernel, Raising Security Concerns

• Malware

Stealthy UEFI Bootkit Targets Windows Kernel, Raising Security Concerns

Do Son December 30, 2024 0

Learn about the latest threat to Windows systems: a sophisticated UEFI bootkit that compromises the kernel during boot process.

Malware Targeting the Ukrainian Military: SSH Over TOR Backdoor Unveiled

• Malware

Malware Targeting the Ukrainian Military: SSH Over TOR Backdoor Unveiled

Do Son December 30, 2024 0

Learn about a sophisticated malware campaign leveraging SSH over TOR to target the Ukrainian military through a backdoor.

PLAYFULGHOST Malware: A Sophisticated Gh0st RAT Variant with Advanced Distribution Tactics

• Malware

PLAYFULGHOST Malware: A Sophisticated Gh0st RAT Variant with Advanced Distribution Tactics

Do Son December 30, 2024 0

Unveiling the sinister capabilities of PLAYFULGHOST, a dangerous backdoor malware with advanced functionality and clever distribution techniques.

Global Cyber Collaboration Takes Down PlugX Worm

• Malware

Global Cyber Collaboration Takes Down PlugX Worm

Do Son December 29, 2024 0

Learn about the Sekoia team's groundbreaking effort to combat the PlugX worm, a notorious threat to global cybersecurity.