Daily CyberSecurity

Pawn Storm APT Actor: A Persistent Cybersecurity Threat

• Cyber Security
• Malware

Pawn Storm APT Actor: A Persistent Cybersecurity Threat

Do Son January 31, 2024 0

Pawn Storm adopted a unique approach, sending spear-phishing emails with a small information stealer as an attachment

UNC4990: A Threat Actor with a USB Trick up Its Sleeve

• Cyber Security
• Malware

UNC4990: A Threat Actor with a USB Trick up Its Sleeve

Do Son January 30, 2024 0

UNC4990 threat actor utilizes sophisticated tools like EMPTYSPACE, a versatile downloader, and QUIETBOARD, a multifunctional backdoor.

FalseFont Backdoor: A Stealthy Threat to Global Defense Contractors

• Malware

FalseFont Backdoor: A Stealthy Threat to Global Defense Contractors

Do Son January 30, 2024 0

Crafted by the notorious Peach Sandstorm APT, the FalseFont backdoor has been specifically targeting defense contractors across the globe

Exploited in the Wild: The Alarming Hitron DVR Vulnerabilities

• Vulnerability

Exploited in the Wild: The Alarming Hitron DVR Vulnerabilities

Do Son January 30, 2024 0

These vulnerabilities, collectively identified under CVE IDs ranging from CVE-2024-22768 to CVE-2024-23842, have opened a backdoor

The DarkGate Deception: How Microsoft Teams Became a Phishing Playground

• Cyber Security
• Malware

The DarkGate Deception: How Microsoft Teams Became a Phishing Playground

Do Son January 30, 2024 0

The MDR team’s subsequent investigation uncovered over 1,000 “MessageSent” Teams events linked to the external user

Root Access Risk: CVE-2023-6246 Exposes Critical Flaw in Linux’s glibc

• Vulnerability

Root Access Risk: CVE-2023-6246 Exposes Critical Flaw in Linux’s glibc

Do Son January 30, 2024 0

The GNU C Library (glibc), a fundamental component in major Linux distributions, has a critical vulnerability, CVE-2023-6246

Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365

• Cyber Security

Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365

Do Son January 30, 2024 0

Trustwave SpiderLabs has been closely monitoring an upsurge in the use of the Greatness phishing kit, a sophisticated phishing-as-a-service platform

New Trigona Ransomware Threat Actor Uses Mimic Ransomware and BCP Utility in Attacks

• Malware

New Trigona Ransomware Threat Actor Uses Mimic Ransomware and BCP Utility in Attacks

Do Son January 30, 2024 0

A new threat actor, previously known as Trigona ransomware, has been identified as installing Mimic ransomware.

GRIT Report 2023: Unpacking the Surge in Ransomware Attacks

• Cyber Security
• Malware

GRIT Report 2023: Unpacking the Surge in Ransomware Attacks

Do Son January 29, 2024 0

GRIT Ransomware Annual Report 2023 concludes with a forward-looking perspective, anticipating continued evolution in ransomware tactics

CVE-2023-41474: Ivanti Avalanche Directory Traversal Flaw, PoC Published

• Vulnerability

CVE-2023-41474: Ivanti Avalanche Directory Traversal Flaw, PoC Published

Do Son January 29, 2024 0

CVE-2023-41474 can be a gateway to more sinister activities. Unauthenticated attacker could access configuration settings and internal info

CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws

• Vulnerability

CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws

Do Son January 29, 2024 0

three security vulnerabilities have been identified in its systems, two of which are of critical (CVE-2024-22860 and CVE-2024-22862) severity

Data Breach at Ofuji Fishing: 200,000 Customers’ Information Compromised

• Cyber Security
• Data Leak

Data Breach at Ofuji Fishing: 200,000 Customers’ Information Compromised

Do Son January 29, 2024 0

Ofuji Fishing disclosed a potential data breach involving personal customer information, a consequence of a ransomware attack

Critical Alert: CVE-2023-6200 Exploits Linux Kernel with Code Execution Risk

• Vulnerability

Critical Alert: CVE-2023-6200 Exploits Linux Kernel with Code Execution Risk

Do Son January 28, 2024 0

CVE-2023-6200, with a considerable CVSS score of 7.5, this flaw exposes a critical race condition within the handling of ICMPv6 packets

CVE-2024-21326 (CVSS 9.6): One Click Could Compromise Microsoft Edge

• Vulnerability

CVE-2024-21326 (CVSS 9.6): One Click Could Compromise Microsoft Edge

Do Son January 28, 2024 0

The privilege escalation vulnerabilities CVE-2024-21326 (CVSS 9.6) and CVE-2024-21385 (CVSS 8.3) were rated as 'Important.'

From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies

• Cyber Security

From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies

Do Son January 28, 2024 0

The Lazarus Group, a notorious name in the cyber espionage realm, has yet again drawn attention with its recent activities.

HiddenFace Unmasked: ESET’s Deep Dive into MirrorFace’s Complex Malware

• Cyber Security
• Malware

HiddenFace Unmasked: ESET’s Deep Dive into MirrorFace’s Complex Malware

Do Son January 28, 2024 0

HiddenFace, a highly sophisticated backdoor malware developed by the MirrorFace APT group, represents a significant escalation

Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances

• Malware

Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances

Do Son January 28, 2024 0

QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant

From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed

• Malware

From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed

Do Son January 27, 2024 0

Albabat ransomware also replaces the desktop wallpaper with its own, further asserting its control over the compromised system.

Breaking Down CVE-2024-23897: PoC Code Surfaces Just After Jenkins Advisory

• Vulnerability

Breaking Down CVE-2024-23897: PoC Code Surfaces Just After Jenkins Advisory

Do Son January 26, 2024 0

The technical details and proof-of-concept (PoC) code targeting a critical CVE-2024-23897 vulnerability in Jenkins was published

CVE-2023-40547: The Critical Shim Flaw Compromising Linux Bootloaders

• Vulnerability

CVE-2023-40547: The Critical Shim Flaw Compromising Linux Bootloaders

Do Son January 25, 2024 0

Identified with a CVSS score of 8.3, CVE-2023-40547 exposes a remote code execution vulnerability within Shim.

AllaKore RAT: The Trojan Horse Targeting Mexico’s Financial Titans

• Malware

AllaKore RAT: The Trojan Horse Targeting Mexico’s Financial Titans

Do Son January 25, 2024 0

This operation, driven by a financially motivated threat actor, utilizes a modified version of the open-source remote access tool, AllaKore RAT

From Espionage to Ransomware: Iran’s Strategic Assault on the West Revealed

• Cyber Security

From Espionage to Ransomware: Iran’s Strategic Assault on the West Revealed

Do Son January 25, 2024 0

These entities, operating under the veil of legitimate business, are conduits for Iran's cyber espionage and warfare efforts.