Malware

Poortry EDR Killer Evolves, Now Wipes Security Software From Windows Systems

• Malware

Poortry EDR Killer Evolves, Now Wipes Security Software From Windows Systems

Do Son August 27, 2024 0

Explore the threat of Poortry: a malicious toolset designed to undermine endpoint detection and response (EDR) software on Windows systems. Learn how it bypasses security measures and adapts to evade detection.

macOS Backdoor “HZ Rat” Targets Users of DingTalk and WeChat

• Malware

macOS Backdoor “HZ Rat” Targets Users of DingTalk and WeChat

Do Son August 27, 2024 0

Learn about the emergence of HZ Rat backdoor on macOS, targeting DingTalk and WeChat users. Stay vigilant against this new threat.

SonicWall Warns: New Malware Targets Gmail

• Malware

SonicWall Warns: New Malware Targets Gmail

Do Son August 27, 2024 0

Protect your Gmail account from malware attacks. Learn about a newly discovered executable that targets Gmail and compromises user accounts.

Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717)

• Cyber Security
• Malware
• Vulnerability

Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717)

Do Son August 27, 2024 0

The VersaMem web shell, uncovered by Black Lotus Labs, is a sophisticated tool specifically designed to exploit Versa Director servers

Pidgin Users Beware! Malicious Plugin Discovered with Keylogger

• Malware

Pidgin Users Beware! Malicious Plugin Discovered with Keylogger

Do Son August 26, 2024 0

Learn about the recent Pidgin keylogger incident and the risks associated with third-party plugins. Stay informed and protect your online privacy.

Cheana Stealer Targets VPN Users Across Windows, Linux, and macOS in Sophisticated Phishing Campaign

• Malware

Cheana Stealer Targets VPN Users Across Windows, Linux, and macOS in Sophisticated Phishing Campaign

Do Son August 25, 2024 0

Protect yourself from the Cheana Stealer, a malicious tool targeting VPN users. Learn how to recognize and defend against this new cyber threat.

Malicious Browser Extension Hijacks Solana Transactions

• Malware

Malicious Browser Extension Hijacks Solana Transactions

Do Son August 25, 2024 0

Discover the incident involving the Bull Checker browser extension on the Solana platform and learn how users lost their funds.

China-Nexus Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399)

• Cyber Security
• Malware
• Vulnerability

China-Nexus Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399)

Do Son August 25, 2024 0

Learn about the sophisticated tactics and impact of the Velvet Ant cyber attack on Cisco switches. Discover how they exploited a zero-day vulnerability to gain control and facilitate data theft.

Cyberattack on Magento: Hackers Inject Skimmer, Card Data Stolen

• Malware

Cyberattack on Magento: Hackers Inject Skimmer, Card Data Stolen

Do Son August 25, 2024 0

Discover the details of a cyberattack on Magento platform: how hackers injected a skimmer to steal payment card data.

PEAKLIGHT Malware: A New Stealthy Memory-Only Threat Emerges

• Malware

PEAKLIGHT Malware: A New Stealthy Memory-Only Threat Emerges

Do Son August 24, 2024 0

Unveiling PEAKLIGHT: A sophisticated memory-only dropper and downloader delivering stealthy malware-as-a-service infostealers.

Qilin Ransomware: Beyond Encryption, a New Threat of Credential Theft

• Malware

Qilin Ransomware: Beyond Encryption, a New Threat of Credential Theft

Do Son August 24, 2024 0

Find out how the Qilin ransomware group is using a new approach to steal credentials from Google Chrome. Stay vigilant and protect your data.

New PostgreSQL Threat: PG_MEM Malware Strikes Databases

• Cyber Security
• Malware

New PostgreSQL Threat: PG_MEM Malware Strikes Databases

Do Son August 23, 2024 0

Beware of PG_MEM: a new malware targeting PostgreSQL. Learn how this sophisticated threat exploits and mines cryptocurrency.

NGate Android Malware Steals NFC Payment Data at ATMs

• Malware

NGate Android Malware Steals NFC Payment Data at ATMs

Do Son August 22, 2024 0

Uncover the new NGate malware: attackers target Czech bank customers through infected Android devices, stealing payment card data.

TodoSwift: North Korean Cybercriminals Use Bitcoin Lure to Spread macOS Malware

• Malware

TodoSwift: North Korean Cybercriminals Use Bitcoin Lure to Spread macOS Malware

Do Son August 22, 2024 0

Find out how the TodoSwift malware poses a threat to macOS users. Explore its origins in North Korea and its ties to the notorious BlueNoroff group

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors

• Cyber Security
• Malware

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors

Do Son August 21, 2024 0

Stay informed about the ongoing threat of Log4Shell. Learn how this vulnerability is being exploited by threat actors and the impact it has on global cybersecurity.

Beyond the Ransom: Inside the Mind of Brain Cipher Ransomware Group

• Cyber Security
• Malware

Beyond the Ransom: Inside the Mind of Brain Cipher Ransomware Group

Do Son August 21, 2024 0

Discover the impact of the Brain Cipher ransomware attack on Indonesian government agencies. Learn about the hackers, their ransom demands, and the unexpected release of the decryptor.

Styx Stealer: The Evolved Threat to Your Crypto and Data

• Cyber Security
• Malware

Styx Stealer: The Evolved Threat to Your Crypto and Data

Do Son August 21, 2024 0

Discover the dangerous Styx Stealer malware, derived from Phemedrone Stealer. Find out about its advanced capabilities and critical operational security mistake.

North Korean Hackers Upgrade Arsenal with MoonPeak RAT

• Cyber Security
• Malware

North Korean Hackers Upgrade Arsenal with MoonPeak RAT

Do Son August 21, 2024 0

Uncover the latest cybersecurity threat from North Korea: MoonPeak RAT (UAT-5394) reveals new TTPs and potential links to Kimsuky.

Trojanized MSIX Installers: NUMOZYLOD Malware Exploits Popular Software

• Malware

Trojanized MSIX Installers: NUMOZYLOD Malware Exploits Popular Software

Do Son August 20, 2024 0

Stay informed about the NUMOZYLOD malware distribution campaign and learn how to protect yourself from this opportunistic threat.

Unseen Msupedge Malware Exploits PHP Flaw CVE-2024-4577 in Taiwanese University Cyberattack

• Cyber Security
• Malware
• Vulnerability

Unseen Msupedge Malware Exploits PHP Flaw CVE-2024-4577 in Taiwanese University Cyberattack

Do Son August 20, 2024 0

Uncover Backdoor.Msupedge, a sophisticated malware found in a recent cyberattack. Learn how it uses DNS tunneling for its covert communication.

TA453 Deploys New BlackSmith Malware Toolset in Phishing Attack on Religious Figure

• Cyber Security
• Malware

TA453 Deploys New BlackSmith Malware Toolset in Phishing Attack on Religious Figure

Do Son August 20, 2024 0

Discover the sophisticated tactics used by the Iranian-backed threat actor TA453 in their latest phishing campaign. Learn how they impersonated a think tank to target a high-profile individual.

New Infostealer “Ailurophile” Discovered, Poses Significant Risk to User Privacy

• Malware

New Infostealer “Ailurophile” Discovered, Poses Significant Risk to User Privacy

Do Son August 19, 2024 0

Learn about Ailurophile, a powerful information-stealing malware with Vietnamese origins. Find out how it's being customized and used by cybercriminals.