Malware

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed

• Malware

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed

Do Son November 29, 2024 0

Stay informed about the latest supply chain attack on cryptocurrency wallets via PyPI. Discover the malicious aiocpa package and steps to enhance your security.

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited

• Malware
• Vulnerability

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited

Do Son November 28, 2024 0

Beware of the critical vulnerability CVE-2024-11667 in Zyxel firewalls. Learn how attackers are exploiting it to deploy Helldown ransomware.

Evasive Malware Campaign Leverages CleverSoar Installer & Nidhogg Rootkit

• Cyber Security
• Malware

Evasive Malware Campaign Leverages CleverSoar Installer & Nidhogg Rootkit

Do Son November 28, 2024 0

Discover the newly identified CleverSoar installer and its targeted espionage efforts. Explore the advanced evasion techniques and malicious components used in this sophisticated malware campaign.

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed

• Malware

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed

Do Son November 28, 2024 0

Beware of a targeted campaign against crypto developers. Learn about the malicious npm packages and the risk they pose to cryptocurrency wallet credentials and sensitive data.

Godot Engine Compromised: Malware Distributed via GodLoader

• Malware

Godot Engine Compromised: Malware Distributed via GodLoader

Do Son November 28, 2024 0

Discover how cybercriminals are leveraging the Godot game engine to distribute malware. Learn about the GodLoader technique and how it evades detection.

Credit Card Skimmer Malware Uncovered: Targeting Magento Checkout Pages

• Malware

Credit Card Skimmer Malware Uncovered: Targeting Magento Checkout Pages

Do Son November 28, 2024 0

Stay informed about the latest threat to Magento websites: credit card skimmer malware. Learn how it works and how to protect yourself.

PixPirate Resurfaces: Spreading via WhatsApp and Expanding Beyond Brazil

• Malware

PixPirate Resurfaces: Spreading via WhatsApp and Expanding Beyond Brazil

Do Son November 27, 2024 0

Discover the resurgence of PixPirate malware targeting financial services through WhatsApp. Learn how this highly sophisticated threat has expanded its reach globally.

35 Million Devices Vulnerable: Matrix DDoS Campaign Highlights Growing IoT Threat

• Cyber Security
• Malware
• Vulnerability

35 Million Devices Vulnerable: Matrix DDoS Campaign Highlights Growing IoT Threat

Do Son November 27, 2024 0

Unveiling the Matrix DDoS campaign: Aqua Nautilus researchers reveal a new threat actor leveraging accessible tools to launch large-scale cyberattacks.

Elpaco Ransomware: A New Threat Actor Leverages CVE-2020-1472 for Global Attacks

• Malware
• Vulnerability

Elpaco Ransomware: A New Threat Actor Leverages CVE-2020-1472 for Global Attacks

Do Son November 27, 2024 0

Learn about the new Elpaco ransomware variant and its sophisticated customization features. Discover how it exploits vulnerabilities and leverages legitimate software tools.

ANEL Backdoor Reactivated in Earth Kasha Cyber-Espionage Campaign

• Cyber Security
• Malware

ANEL Backdoor Reactivated in Earth Kasha Cyber-Espionage Campaign

Do Son November 27, 2024 0

Discover the ANEL backdoor's resurgence and the evolving capabilities of the Earth Kasha cyber-espionage group.

XorBot Botnet Resurfaces with Advanced Evasion and Exploits, Threatens IoT Devices

• Malware
• Vulnerability

XorBot Botnet Resurfaces with Advanced Evasion and Exploits, Threatens IoT Devices

Do Son November 27, 2024 0

Discover the resurgence of the XorBot botnet, a potent threat to IoT devices worldwide. Learn about its advanced anti-detection mechanisms and wide range of exploits.

Year-Long Supply Chain Attack: Malicious NPM Package Compromises Cryptocurrency Wallets

• Malware

Year-Long Supply Chain Attack: Malicious NPM Package Compromises Cryptocurrency Wallets

Do Son November 27, 2024 0

Uncover the year-long NPM supply chain attack involving the malicious @0xengine/xmlrpc package. Learn how it combined cryptocurrency mining with data theft.

SMOKEDHAM Backdoor: UNC2465’s Stealth Weapon for Extortion and Ransomware Campaigns

• Cyber Security
• Malware

SMOKEDHAM Backdoor: UNC2465’s Stealth Weapon for Extortion and Ransomware Campaigns

Do Son November 27, 2024 0

Learn about the SMOKEDHAM backdoor and its role in the activities of threat actor UNC2465. Discover how this highly adaptable tool is used in extortion and ransomware operations.

ESET Unveils “Bootkitty”: The First UEFI Bootkit Targeting Linux Systems

• Linux
• Malware

ESET Unveils “Bootkitty”: The First UEFI Bootkit Targeting Linux Systems

Do Son November 27, 2024 0

ESET researchers unveil Bootkitty, a UEFI bootkit targeting Linux. Find out how it operates and why it signals a new chapter in UEFI threats.

Privacy and Financial Security at Risk: McAfee Labs Warns of SpyLoan Applications

• Android
• Data Leak
• Malware

Privacy and Financial Security at Risk: McAfee Labs Warns of SpyLoan Applications

Do Son November 26, 2024 0

Protect your privacy and financial security from SpyLoan apps. McAfee Labs reveals the risks of these predatory loan apps exploiting social engineering tactics.

CVE-2024-21887 and More: How Earth Estries APT Group Exploits VPNs & Servers

• Cyber Security
• Malware
• Vulnerability

CVE-2024-21887 and More: How Earth Estries APT Group Exploits VPNs & Servers

Do Son November 26, 2024 0

Learn about the Earth Estries APT group, a significant cyber espionage actor targeting critical sectors and industries worldwide.

CyberVolk: The Hacktivist Collective Blurring Lines Between Activism, Ransomware, and Geopolitics

• Cyber Security
• Malware

CyberVolk: The Hacktivist Collective Blurring Lines Between Activism, Ransomware, and Geopolitics

Do Son November 26, 2024 0

Uncover the activities and alliances of CyberVolk, the pro-Russian hacktivist collective posing a significant threat in the cybercrime world.

Cybersecurity Alert: MUT-8694 Supply Chain Attack Targets npm and PyPI Ecosystems

• Cyber Security
• Malware

Cybersecurity Alert: MUT-8694 Supply Chain Attack Targets npm and PyPI Ecosystems

Do Son November 26, 2024 0

Uncover the supply chain attack by MUT-8694. Learn how this enigmatic threat actor targeted Windows users using malicious npm and PyPI packages.

Lazarus Group Exploits xattr with “RustyAttr” to Evade Detection

• Malware

Lazarus Group Exploits xattr with “RustyAttr” to Evade Detection

Do Son November 25, 2024 0

Discover the stealthy technique used by the Lazarus Group: RustyAttr. Learn how this method leverages macOS metadata to conceal malicious payloads.

Malicious npm Packages Exploiting Typosquatting to Inject SSH Backdoors

• Malware

Malicious npm Packages Exploiting Typosquatting to Inject SSH Backdoors

Do Son November 25, 2024 0

Beware of malicious npm packages disguising themselves as popular libraries. Learn how these packages inject SSH backdoors into developer systems.

Russia-Linked TAG-110 Launches Cyberespionage Campaign Across Asia and Europe

• Cyber Security
• Malware

Russia-Linked TAG-110 Launches Cyberespionage Campaign Across Asia and Europe

Do Son November 24, 2024 0

Uncover the cyberespionage campaign attributed to TAG-110. Learn about the Russia-aligned threat group targeting organizations and their motives.

WolfsBane: Gelsemium APT Group’s Linux Backdoor Debut

• Cyber Security
• Malware

WolfsBane: Gelsemium APT Group’s Linux Backdoor Debut

Do Son November 24, 2024 0

Unveiling WolfsBane: The Linux counterpart to Gelsevirine backdoor revealed by ESET researchers. Learn about the evolution of the Gelsemium APT group and their shift in strategy.