Bleeping Computer
Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.
Bleeping Computer
Financially motivated cybercriminals abuse the Windows Quick Assist feature in social engineering attacks to deploy Black Basta ransomware payloads on victims' networks.
.webp)
Cyber Security News
The well-known advanced persistent threat (APT) group Turla, which is based in Russia, is said to be going after the European Ministry.
The Hacker News
Two new backdoors, LunarWeb and LunarMail, have targeted a European ministry of foreign affairs and its diplomatic missions in the Middle East
The Cyber Express
Cyble Research and Intelligence Labs (CRIL) researchers have uncovered a new SideCopy campaign. The threat actor group has previously been
CSO
CISA advisory includes indicators of compromise and TTPs that can be used for threat hunting.
Bleeping Computer
Cloud technology is changing how IT departments function, and getting certified in it can help advance your career. These nine Microsoft Azure exam prep courses put you on the path for $39.99, $77 off the $117 MSRP.
Cyber Security News
Recent email campaigns distribute DanaBot malware through two document types: those using equation editor exploits and those containing
The Hacker News
The notorious FIN7 hacking group is at it again! This time, they're using malicious Google ads to trick users into downloading malware disguised as le
Infosecurity News
Well-funded cybercriminals are adopting more sophisticated techniques, creating a need for defenders to stay informed about the evolving threat landscape
Cyber Security News
Hackers take advantage of sponsored Google Ads as they provide an excellent chance to quickly reach a large audience.
Bleeping Computer
The full 2024 Windows PowerShell Certification Bundle is worth $78, but you can get it for just $16.97 if you order by 11:59 pm Pacific on 5/12.
Cyber Security News
Hackers exploit the weaponized shortcut files due to their ability to execute malicious code without the knowledge of the user being targeted.
The Hacker News
A newer version of the Hijack Loader malware has been observed with updated anti-analysis techniques to evade detection.
The Hacker News
APT42, an Iranian state-backed hacking group, is leveling up its social engineering tactics. They're posing as journalists and event organizers to bui
SC Magazine
Large language models (LLM) provide context that could expose overlooked threats.
SecurityWeek
Iranian state-sponsored group APT42 is targeting NGOs, government, and intergovernmental organizations with two new backdoors.
Bleeping Computer
The Iranian state-backed threat actor tracked as APT42 is employing social engineering attacks, including posing as journalists, to breach corporate networks and cloud environments of Western and Middle Eastern targets.
Bleeping Computer
Microsoft has confirmed that it won't provide an automated fix for a known issue causing 0x80070643 errors when installing recent Windows Recovery Environment (WinRE) updates.
CSO
Mandiant observed several malicious campaigns with threat actors impersonating journalists and harvesting the victim’s cloud environment credentials.
Cyber Security News
In a sophisticated cyberattack that unfolded over 29 days, cybersecurity analysts have meticulously traced the steps of threat actors from the initial infection with IcedID malware to the eventual deployment of Dagon Locker ransomware. The detailed account of this cyber intrusion provides a chilling example of how quickly and stealthily cybercriminals can compromise an organization’s […]
The DFIR Report
Key Takeaways In August 2023, we observed an intrusion that started with a phishing campaign using PrometheusTDS to distribute IcedID. IcedID dropped and executed a Cobalt Strike beacon, which was … Read More
Cyber Security News
Black hat SEO methods are used by hackers to manipulate search engine rankings and make malicious or fraudulent websites more visible.
The Hacker News
This article takes you through a real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration.
SecurityWeek
A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide.
The Hacker News
A suspected Vietnamese hacking group is leveraging CDN cache to distribute malware undetected.
SC Magazine
A new CryptBot variant targets password managers and authentication apps in the new campaign.
Bleeping Computer
A threat actor has been using a content delivery network cache to store information-stealing malware in an ongoing campaign targeting systems U.S., the U.K., Germany, and Japan.
The Hacker News
Hackers linked to Russia have been exploiting a Windows bug for YEARS to deploy GooseEgg malware for escalating attack access.
Cyber Security News
Citrix's uberAgent, a sophisticated monitoring tool used to enhance performance and security across Citrix platforms, has been identified as having a critical vulnerability.
The Hacker News
North Korea's state-linked hackers are enhancing their operations with advanced artificial intelligence tools.
Bleeping Computer
You rarely root for a cybercriminal, but a new malware campaign targeting child exploiters doesn't make you feel bad for the victims.
The Hacker News
A new variant of the RedLine Stealer malware has been discovered, utilizing Lua bytecode for stealth and effectiveness.
Infosecurity News
A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024
SC Magazine
despite a pause in the rise of ransomware, organizations are failing to take the steps necessary to adequately defend themselves against the increase in attacks to come.
Security Affairs
BlackBerry reported that financially motivated group FIN7 targeted the IT department of a large U.S. carmaker with spear-phishing attacks.
Cyber Security News
Redline Stealer is a powerful information-stealing malware and hackers often exploit this stealthy stealer to gain unauthorized access to a
Bleeping Computer
The financially motivated threat actor FIN7 targeted a large U.S. car maker with spear-phishing emails for employees in the IT department to infect systems with the Anunak backdoor.
The Hacker News
If you use Fortinet FortiClient EMS, patch NOW. Hackers are actively using a new exploit
The Hacker News
TA558 hackers are using steganography to hide and distribute malware like Agent Tesla, FormBook, Remcos RAT, LokiBot.
Bleeping Computer
A new campaign conducted by the TA558 hacking group is concealing malicious code inside images using steganography to deliver various malware tools onto targeted systems.
Cyber Security News
The weekly cybersecurity news wrap-up provides readers with the latest information on emerging risks, vulnerabilities, ways to reduce them, and harmful schemes to help make defensive measures proactive.
CSO
Researcher that helped compile the knowledge base of common misconfigurations in SCCM releases scanner MisconfigurationManager.ps1.
The Hacker News
MuddyWater, linked to Iran's MOIS, strikes again with DarkBeatC2. Our latest blog unpacks the latest tactics in cyber warfare.
Security Affairs
TA547 group is targeting dozens of German organizations with an information stealer called Rhadamanthys, Proofpoint warns.
SC Magazine
A PowerShell script used to deploy the infostealer contains unusually specific comments, researchers say.
Computerworld
Although there have been no reports of zero-day flaws, Microsoft’s April Patch Tuesday release included 149 updates.
DarkReading
Attackers have compromised an 8-year-old version of the cloud platform to distribute various malware that can take over infected systems.
The Hacker News
TA547 hacker group adopts new tactics, possibly harnessing the power of generative AI, to deploy the Rhadamanthys info stealer in attacks on German or
CyberNews
Cybercriminals impersonating legitimate German companies are attacking organizations in the country.
DarkReading
It's finally happening: Rather than just for productivity and research, threat actors are using LLMs to write malware. But companies need not worry just yet.
Infosecurity News
Proofpoint said this is the first time the threat actor has been seen using LLM-generated PowerShell scripts
Bleeping Computer
A threat actor is using a PowerShell script that was likely created with the help of an artificial intelligence system such as OpenAI's ChatGPT, Google's Gemini, or Microsoft's CoPilot.
DarkReading
Various anti-detection features, including use of ScrubCrypt antivirus-evasion tool, fuel an attack that aims to take over Microsoft Windows machines.
Bleeping Computer
Threat actors are abusing GitHub automation features and malicious Visual Studio projects to push a new variant of the "Keyzetsu" clipboard-hijacking malware and steal cryptocurrency payments.
Bleeping Computer
Today is Microsoft's April 2024 Patch Tuesday, which includes security updates for 150 flaws and sixty-seven remote code execution bugs.
Security Affairs
Researchers discovered a sophisticated multi-stage attack that leverages ScrubCrypt to drop VenomRAT along with many malicious plugins.
Bleeping Computer
Researchers have discovered two techniques that could enable attackers to bypass audit logs or generate less severe entries when downloading files from SharePoint.
Cyber Security News
Threat actors have been discovered to be exploiting a Fortinet Forticlient EMS vulnerability for installing unauthorized RMM tools and
The Hacker News
Cybersecurity experts uncover a sophisticated multi-stage attack! 🛡️ Malware including Venom RAT, Remcos RAT, and more deployed via invoice-themed ph
DarkReading
With a complex attack chain and a Telegram C2, CoralRaider targets victims in Asian countries — and appears to have accidentally infected itself.
SC Magazine
Varonis researchers say until Microsoft issues a patch, companies should watch their SharePoint environments for unusual activity.
Cyber Security News
A recent phishing campaign targeting Latin America utilized emails with ZIP attachments containing an HTML file disguised as an invoice using
The Hacker News
Latin America targeted in new phishing attack. Emails contain malicious HTML files disguised as invoices.
Bleeping Computer
Microsoft is now using a Windows driver to prevent users from changing the Windows 10 and Windows 11 default browser manually or through software.
Bleeping Computer
Microsoft has fixed a known issue causing 0x80073cf2 errors when using the System Preparation (Sysprep) tool after installing November Windows 10 updates.
The Hacker News
CoralRaider, a suspected Vietnamese threat actor, has been on the prowl since May 2023, targeting Asia and Southeast Asia with malware aimed at steali
Bleeping Computer
Recent high-profile malware attacks teach us lessons on limiting malware risks at organizations. Learn more from Blink Ops about what these attacks taught us.
Bleeping Computer
Azure and other cloud tools are becoming more important every day for IT. These nine Azure exam prep certification courses get you up to speed for $31.99, $85 off the $117 MSRP with code SECURE20 at checkout, now through 11:59 PM PST on April 7th.
DarkReading
UNAPIMON works by meticulously disabling hooks in Windows APIs for detecting malicious processes.
The DFIR Report
Key Takeaways We provide a range of services, one of which is our Threat Feed, specializing in monitoring Command and Control frameworks like Cobalt Strike, Metasploit, Sliver, Viper, Mythic, Havoc, … Read More
.webp)
Cyber Security News
Hackers have been found leveraging weaponized virtual hard disk (VHD) files to deploy the notorious Remote Control Software (RAT), Remcos.
The Cyber Express
WarzoneRAT, the notorious Remote Administration Tool (RAT) malware, made a comeback despite the FBI's efforts to dismantle its operations earlier
.webp)
Cyber Security News
Agenda ransomware group, also known by its aliases Qilin and Water Galura, has been ramping up its attacks on a global scale.
_Igor_Golovnov_Alamy.jpg?disable=upscale&width=1200&height=630&fit=crop)
DarkReading
A new and improved variant of the group's malware combines fileless infection, BYOVD, and more to cause havoc in virtual environments.
Bleeping Computer
The German national cybersecurity authority warned on Tuesday that it found at least 17,000 Microsoft Exchange servers in Germany exposed online and vulnerable to one or more critical security vulnerabilities.
Trend Micro
This blog entry discusses the Agenda ransomware group's use of its latest Rust variant to propagate to VMWare vCenter and ESXi servers.
The Hacker News
Kimsuky shifts tactics, now using CHM files to deliver malware, targeting sensitive data globally.
.png)
Cyber Security News
cybersecurity news will keep you posted on the latest developments, exposures, advances, occurrences, threats, and narratives in this field.
Bleeping Computer
Don't miss your chance to save on The 2024 Windows PowerShell Certification Bundle, which is on sale for just $19.99 (reg. $78).
CyberNews
North Korea’s nuclear threats are now being exploited by North Korean hackers known as Kimsuky as a lure for victims to open malicious payloads.
Security Affairs
Multiple threat actors are exploiting the recently disclosed JetBrains TeamCity flaw CVE-2024-27198 in attacks in the wild.
Cyber Security News
Researchers from Perception Point identified a new malware campaign, PhantomBlu, targeting US organizations that use novel techniques to deploy NetSupport RAT, a remote access trojan, by exploiting legitimate features of Microsoft Office document templates via OLE manipulation. It allows the attackers to evade detection and gain control of victim machines for various malicious activities, including […]
DarkReading
Russia's government is pretending to be other governments in emails, with an eye toward stealing strategic intel.
SC Magazine
Jasmin ransomware, SparkRAT and XMRig cryptominers were dropped post-exploitation of CVE-2024-27198.
The Hacker News
New phishing attacks target US organizations. Hackers use NetSupport RAT to steal data & control computers.
DarkReading
Kimsuky-attributed campaign uses eight steps to compromise systems — from initial execution to downloading additional code from Dropbox, and executing code to establish stealth and persistence.
Trend Micro
CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.
The Hacker News
New cyberattack campaign, DEEP#GOSU, uses PowerShell & VBScript to target Windows systems.
The Hacker News
Researchers uncover a sophisticated malware campaign using fake Google Sites pages and HTML smuggling to distribute AZORult, a notorious info stealer.
Trend Micro
Since early 2022, we have been monitoring an APT campaign that targets several government entities worldwide, with a strong focus in Southeast Asia, but also seen targeting Europe, America, and Africa.
Security Affairs
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
.webp)
Cyber Security News
With our weekly cybersecurity news summary, explore and learn about the most recent developments in the cybersecurity field.
Computerworld
Microsoft released 61 Patch Tuesday updates for March, with no reports of public disclosures or other zero-days.
.webp)
Cyber Security News
Cybercriminals have been distributing a new strain of malware, dubbed FakeBat, by exploiting the trust in MSIX installer files.
Computerworld
Microsoft released 61 Patch Tuesday updates for March, with no reports of public disclosures or other zero-days.
.webp)
Cyber Security News
Cybercriminals have launched a sophisticated campaign targeting individuals and utilizing weaponized PDF files to deploy dangerous RATs.
.jpg)
The Hacker News
RedCurl cybercrime group found exploiting Windows Program Compatibility Assistant for malicious activities. This sophisticated method allows attackers
The Hacker News
A new DarkGate malware campaign uses a recently patched #MicrosoftWindows flaw (CVE-2024-21412) to deploy malicious software via bogus installers.
.webp)
Cyber Security News
A new malicious campaign has been unveiled, targeting the vast user base of the online gaming platform Roblox.
Loading more articles....