Malware

The Zero-Detection PHP Backdoor Glutton Exposed

• Cyber Security
• Malware

The Zero-Detection PHP Backdoor Glutton Exposed

Do Son December 15, 2024 0

Discover Glutton, a new generation PHP backdoor that poses a threat to organizations and the cybercrime ecosystem. Learn how it blends modularity with strategic subterfuge.

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

• Linux
• Malware

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

Do Son December 15, 2024 0

Learn about PUMAKIT, a sophisticated Linux malware with stealth capabilities and alarming functionalities. Dive into its architecture and infection chain.

New Android Banking Trojan Targets Indian Users Through Fake Apps

• Malware

New Android Banking Trojan Targets Indian Users Through Fake Apps

Do Son December 14, 2024 0

Beware of the new Android banking trojan targeting Indian users. Learn how this sophisticated malware steals financial information through phishing campaigns.

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

• Malware

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

Do Son December 14, 2024 0

Discover the threats posed by the sophisticated malware strain IOCONTROL. Learn about its targeting of industrial control systems and IoT devices.

DCOM Upload & Execute: A New Backdoor Technique Unveiled

• Malware
• Vulnerability

DCOM Upload & Execute: A New Backdoor Technique Unveiled

Do Son December 13, 2024 0

Uncover a powerful new DCOM lateral movement attack: the DCOM Upload & Execute technique. Learn how attackers exploit DCOM interfaces for remote code execution.

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

• Malware
• Vulnerability
• Windows

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

Do Son December 13, 2024 0

Discover the hidden cybersecurity risks of Microsoft UI Automation. Learn how attackers can exploit this framework to bypass modern EDR systems and exfiltrate sensitive data.

Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome

• Cyber Security
• Malware

Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome

Do Son December 12, 2024 0

Uncover the sophisticated Android spyware BoneSpy and PlainGnome, attributed to the Russian APT group Gamaredon. Learn about their surveillance capabilities and the link to the Russian Federal Security Service (FSB).

High-Profile Organizations in Southeast Asia Hit by Targeted Cyberattacks

• Cyber Security
• Malware

High-Profile Organizations in Southeast Asia Hit by Targeted Cyberattacks

Do Son December 12, 2024 0

Unveiling a sophisticated cyber campaign targeting high-profile organizations in Southeast Asia. Discover the tactics and tools used by this China-based attacker.

Modular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623)

• Malware
• Vulnerability

Modular Java Backdoor Emerges in Cleo Exploitation Campaign (CVE-2024-50623)

Do Son December 12, 2024 0

Discover a sophisticated modular Java-based RAT deployed in a multi-stage attack targeting Cleo file transfer software.

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

• Cyber Security
• Malware

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

Do Son December 12, 2024 0

Learn about the targeted attack by APT-C-60 on a Japanese organization in 2024, using legitimate services and evasive tactics.

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

• Data Leak
• Malware

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

Do Son December 12, 2024 0

Uncover the secrets of EagleMsgSpy, a powerful surveillance tool used by law enforcement agencies in China. Find out how it extracts sensitive information from mobile devices.

Zloader Trojan Employs Novel DNS Tunneling Protocol for Enhanced Evasion

• Malware

Zloader Trojan Employs Novel DNS Tunneling Protocol for Enhanced Evasion

Do Son December 11, 2024 0

Learn about the new evolution of Zloader: version 2.9.4.0 introduces a custom DNS tunneling protocol for sophisticated C2 communications.

Malicious npm Package Mimics ESLint Plugin, Steals Sensitive Data

• Malware

Malicious npm Package Mimics ESLint Plugin, Steals Sensitive Data

Do Son December 11, 2024 0

Find out how attackers weaponized trust in the open-source ecosystem with a typosquatting attack on @typescript-eslint/eslint-plugin.

Android Users Targeted: AppLite Trojan Disguised as Popular Apps

• Malware

Android Users Targeted: AppLite Trojan Disguised as Popular Apps

Do Son December 11, 2024 0

Beware of AppLite: a dangerous banking trojan targeting Android devices. Learn how this sophisticated malware steals credentials and takes control of infected devices.

Operation Digital Eye: Chinese APT Exploits Visual Studio Code Tunnels in High-Stakes Espionage Campaign

• Cyber Security
• Malware

Operation Digital Eye: Chinese APT Exploits Visual Studio Code Tunnels in High-Stakes Espionage Campaign

Do Son December 11, 2024 0

Uncover the details of Operation Digital Eye, a sophisticated cyberespionage campaign targeting IT service providers in Southern Europe.

UAC-0185 APT Leverages Social Engineering to Target Ukrainian Defense Industrial Base

• Cyber Security
• Malware

UAC-0185 APT Leverages Social Engineering to Target Ukrainian Defense Industrial Base

Do Son December 10, 2024 0

Alert: UAC-0185 (UNC4221) APT group targets Ukraine's defense industry. Discover the tactics behind the phishing campaign and how to protect sensitive systems.

MoqHao Malware Targets Apple IDs and Android Devices Using iCloud and VK Platforms

• Cyber Security
• Malware

MoqHao Malware Targets Apple IDs and Android Devices Using iCloud and VK Platforms

Do Son December 10, 2024 0

Stay informed about the latest MoqHao malware campaign targeting Android and iOS users. Discover the tactics used to deceive users and deliver phishing pages.

SpyNote RAT Targets High-Value Individuals in Southern Asia

• Cyber Security
• Malware

SpyNote RAT Targets High-Value Individuals in Southern Asia

Do Son December 9, 2024 0

Discover the threats posed by SpyNote Remote Administration Tool (RAT) and how it infiltrated targeted systems using disguised Android payloads.

Meeten Malware: AI-Powered Cyber Campaign Targets Web3 Professionals

• Malware

Meeten Malware: AI-Powered Cyber Campaign Targets Web3 Professionals

Do Son December 9, 2024 0

Uncover the highly sophisticated Meeten malware campaign targeting professionals in the Web3 space. Learn how this cross-platform information stealer compromises macOS and Windows devices.

Activation Context Hijacking: “Eclipse” PoC Weaponizes Trusted Processes

• Malware
• Open Source Tool
• Technology

Activation Context Hijacking: “Eclipse” PoC Weaponizes Trusted Processes

Do Son December 8, 2024 0

Learn about Activation Context Hijack and how Eclipse, a proof-of-concept tool, allows attackers to load and execute arbitrary DLLs within a target process.

Mauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604)

• Malware
• Vulnerability

Mauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604)

Do Son December 8, 2024 0

Stay informed about the latest cyber threat: Mauri ransomware exploiting a critical vulnerability (CVE-2023-46604) in Apache ActiveMQ.

The Rise of Mac Malware: 2024 Threat Report Reveals Alarming Trends

• Malware

The Rise of Mac Malware: 2024 Threat Report Reveals Alarming Trends

Do Son December 8, 2024 0

Discover the alarming rise of macOS malware in 2024. Learn about the growing variety and accessibility of malware, including Malware-as-a-Service (MaaS) and AI-powered threats.