Malware

From Gmail to Google Drive: How Evasive Panda Exploits Cloud Services with CloudScout

• Cyber Security
• Malware

From Gmail to Google Drive: How Evasive Panda Exploits Cloud Services with CloudScout

Do Son October 30, 2024 0

Uncover the sophisticated cyberespionage toolset CloudScout used by the APT group Evasive Panda to infiltrate networks and exfiltrate data from popular cloud services.

ThreatFabric Reveals Dangerous Upgrades in LightSpy Spyware – 28 Plugins Targeting iOS Devices

• Malware
• Vulnerability

ThreatFabric Reveals Dangerous Upgrades in LightSpy Spyware – 28 Plugins Targeting iOS Devices

Do Son October 29, 2024 0

Discover the intensified threat to iOS users posed by the advanced LightSpy iOS spyware. Stay updated on its capabilities and target vulnerabilities.

PySilon: A Discord Bot Turned Malicious RAT for Data Theft and Surveillance

• Malware

PySilon: A Discord Bot Turned Malicious RAT for Data Theft and Surveillance

Do Son October 29, 2024 0

Learn about the PySilon RAT, a malware variant that exploits Discord Bots to infiltrate systems and collect confidential information.

Divulge, Dedsec, and Duck: The Rise of Advanced Stealer Malware

• Malware

Divulge, Dedsec, and Duck: The Rise of Advanced Stealer Malware

Do Son October 29, 2024 0

CYFIRMA has recently exposed a trio of malicious stealers—Divulge, Dedsec, and Duck Stealer—highlighting their proliferation

UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment

• Cyber Security
• Malware

UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment

Do Son October 29, 2024 0

Uncover the UNC5812 Russian espionage campaign targeting Ukrainian military recruits. Learn how malware and strategic misinformation are used to undermine mobilization efforts.

Cosmos Hub’s LSM: North Korean Development Raises Security Concerns

• Malware

Cosmos Hub’s LSM: North Korean Development Raises Security Concerns

Do Son October 28, 2024 0

Iqlusion's controversial Liquid Staking Module in Cosmos Hub: potential vulnerabilities and involvement of specialists from North Korea.

TeamTNT’s “Docker Gatling Gun” Campaign Targets Exposed Cloud Environments with New Sliver Malware

• Cyber Security
• Malware

TeamTNT’s “Docker Gatling Gun” Campaign Targets Exposed Cloud Environments with New Sliver Malware

Do Son October 28, 2024

New report reveals TeamTNT's large-scale campaign targeting exposed Docker environments. Learn about the Docker Gatling Gun attack and the advanced Sliver malware.

Black Basta Ransomware Group Elevates Social Engineering with Microsoft Teams and Malicious QR Codes

• Cyber Security
• Malware

Black Basta Ransomware Group Elevates Social Engineering with Microsoft Teams and Malicious QR Codes

Do Son October 27, 2024 0

Uncover the latest tactics of the Black Basta ransomware group targeting diverse sectors and geographies. Stay informed about the intensified social engineering campaign.

SolarSys: New Trojan Framework Threatens Brazilian Banking Customers

• Malware

SolarSys: New Trojan Framework Threatens Brazilian Banking Customers

Do Son October 26, 2024 0

Discover SolarSys, a dangerous Trojan framework that poses a serious threat to Brazilian banking customers. Stay informed and protect your online security.

Rekoobe Backdoor and Typosquatting Domains: A Potential Threat to TradingView Users

• Malware

Rekoobe Backdoor and Typosquatting Domains: A Potential Threat to TradingView Users

Do Son October 25, 2024 0

Discover the Rekoobe backdoor: a new cybersecurity threat with ties to APT31. Learn how it uses encrypted files and customized protocols to avoid detection in open directories.

North Korean Cyber Espionage Group Tenacious Pungsan Compromises Open-Source Repositories with Backdoored npm Packages

• Cyber Security
• Malware

North Korean Cyber Espionage Group Tenacious Pungsan Compromises Open-Source Repositories with Backdoored npm Packages

Do Son October 24, 2024 0

Uncover the malicious activities of the Tenacious Pungsan group. Learn how they target developers through name-squatting attacks on popular npm packages.

Ransomware Threat Escalates as Scattered Spider and RansomHub Combine Forces

• Cyber Security
• Malware

Ransomware Threat Escalates as Scattered Spider and RansomHub Combine Forces

Do Son October 24, 2024 0

Discover the concerning collaboration between Scattered Spider and RansomHub, resulting in a dangerous escalation of ransomware activities.

New Rust-Based Embargo Ransomware Threatens US Companies with Advanced Attack Techniques

• Malware

New Rust-Based Embargo Ransomware Threatens US Companies with Advanced Attack Techniques

Do Son October 23, 2024 0

Learn about Embargo, a rising ransomware group targeting US companies. Discover their sophisticated techniques and the use of Rust programming language for versatile attacks.

New WarmCookie/BadSpace Malware Targets Organizations

• Malware

New WarmCookie/BadSpace Malware Targets Organizations

Do Son October 23, 2024 0

Explore WarmCookie, a highly adaptive malware family that targets organizations across sectors. Learn about its range of functionalities and infection methods.

1,700 Banks, 45 Countries: Grandoreiro Trojan Expands its Reach

• Malware

1,700 Banks, 45 Countries: Grandoreiro Trojan Expands its Reach

Do Son October 22, 2024 0

Get insights into the global reach of Grandoreiro banking trojan. Discover how this potent malware is targeting 1,700 banks and 276 cryptocurrency wallets, posing a threat to financial institutions worldwide.

Virtual Hard Drives: The New Bypass for Secure Email Gateways and Antivirus Scanners

• Malware

Virtual Hard Drives: The New Bypass for Secure Email Gateways and Antivirus Scanners

Do Son October 22, 2024 0

Learn about a critical vulnerability in Secure Email Gateways and Antivirus scanners. Find out how to protect your organization from malicious VHD files.

Cryptojacking Alert: Hackers Exploit gRPC and HTTP/2 to Deploy Miners

• Malware

Cryptojacking Alert: Hackers Exploit gRPC and HTTP/2 to Deploy Miners

Do Son October 22, 2024 0

Discover how cybercriminals use gRPC over h2c to deploy SRBMiner on Docker servers and mine XRP cryptocurrency.

Exposed Docker APIs Under Attack: New Malware Campaign Deploys “perfctl”

• Malware

Exposed Docker APIs Under Attack: New Malware Campaign Deploys “perfctl”

Do Son October 22, 2024 0

Discover the cyberattack campaign targeting Docker Remote API servers and the deployment of the perfctl malware.

Bumblebee Loader Resurfaces with New Infection Chain

• Malware

Bumblebee Loader Resurfaces with New Infection Chain

Do Son October 21, 2024 0

Explore the Bumblebee loader and its role in cybercrime. Learn about its new infection chain and the risks it poses to organizations.

Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS

• Malware
• Vulnerability

Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS

Do Son October 21, 2024 0

Discover the latest tactics of the Akira ransomware group and how they have evolved to target both Windows and Linux hosts.

MaaS in Action: How Lumma Stealer Employs Advanced Delivery Techniques

• Malware

MaaS in Action: How Lumma Stealer Employs Advanced Delivery Techniques

Do Son October 21, 2024 0

Explore the advanced delivery techniques and deceptive tactics employed by Lumma Stealer, an insidious information-stealing malware.

GHOSTPULSE Evolves: Malware Now Hides in Image Pixels, Evading Detection

• Malware

GHOSTPULSE Evolves: Malware Now Hides in Image Pixels, Evading Detection

Do Son October 20, 2024 0

Uncover the latest tactics of GHOSTPULSE malware: discover how this evolving threat hides its payload within pixel structures.