Do Son The attackers exploited a known flaw in Microsoft Exchange Server, known as ProxyShell, to inject the keylogger into the server’s main page
Malware
Security researchers at Intego have uncovered a new variant of the "Cuckoo" Mac malware, a strain of the notorious Atomic macOS Stealer
A new report reveals a disturbing trend in cyber attacks: the increasing use of Microsoft OneNote files to deliver malicious payloads
A new wave of cyberattacks targeting financial institutions has been uncovered, with the notorious Metamorfo banking Trojan at its center
Cybersecurity researchers at Elastic Security Labs have issued a warning about the increasing prominence of LATRODECTUS, a malware loader
The North Korean state-sponsored group Springtail (also known as Kimsuky) has added a new Linux backdoor, dubbed Gomir, to its arsenal
This novel use of Tesseract is part of a broader strategy by ViperSoftX to install additional malware strains, including Quasar RAT
A recent analysis by S-RM, a global cybersecurity consultancy, has shed light on the escalating sophistication of...
Each tasked with managing activities and establishing communication with compromised IPs to facilitate the distribution of XMRig cryptominers
The campaign, dubbed UNK_SweetSpecter, utilizes a Remote Access Trojan (RAT) known as SugarGh0st to infiltrate systems and exfiltrate sensitive data
The campaign exploits GitHub, a legitimate platform for software development, to distribute various malware families
Forcepoint's X-Labs research team has uncovered a sophisticated and stealthy phishing campaign orchestrated by the notorious Darkgate malware
A widespread malvertising campaign is actively targeting individuals searching for popular utilities like WinSCP and PuTTY
Microsoft Threat Intelligence has uncovered a sophisticated ransomware campaign orchestrated by the cybercriminal group Storm-1811
The payloads involved in the exploitation were identified as PureCrypter, which has previously been documented by Any Run
Proofpoint uncovered a massive campaign distributing LockBit Black ransomware through millions of emails via the Phorpiex botnet
The EDR diagram confirms the presence of these commands, leading to the download of the DanaBot malware from the command-and-control server
Ebury is used to deploy additional malware, including malicious Apache and nginx modules that facilitate web traffic redirection
This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan
Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks
The malicious package, disguised as a fork of the widely used "requests" library, contained a hidden Go binary embedded within a PNG image
CRIL published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to Venus ransomware