Summary : The Pentagon has released its first cybersecurity strategy to enhance the defense industrial base’s resilience against cyberattacks. Key Point : ⭐ The strategy covers fiscal years 2024 through 2027. ⭐ Goals include improving best practices within the industrial base. ⭐ The Cybersecurity Ma…
Summary : KuCoin has been charged with AML violations for allowing cybercriminals to launder billions through their platform. Key Point : ⭐ KuCoin founders charged with AML violations by the U.S. Department of Justice. ⭐ KuCoin failed to implement KYC system and report suspicious activity. ⭐ Platfor…
Summary: The British nuclear site Sellafield is facing prosecution for cybersecurity failures, with concerns raised over information technology security offenses spanning several years. Despite no compromise to public safety, the company is under scrutiny for its cybersecurity shortcomings. Key Poin…
____________________ Summary : Activision recommends enabling 2FA to secure accounts recently stolen by malware. Key Point : ⭐ Infostealer malware campaign collected millions of logins from gaming websites. ⭐ Database contains credentials for several million gamers. ⭐ Activision Blizzard recommends…
Threat Actor: Unknown Victim: Shivaji College – University of Delhi Information: 🌟 The threat actor allegedly breached the database of Shivaji College. 🌟 The compromised data includes student and teacher records, student cards with pictures, surveys, feedback, and additional documents containing Per…
Attackers are increasingly hijacking established YouTube channels (including some with hundreds of thousands of subscribers) to host links that distribute infostealer malware. Recent confirmed families spread this way include Vidar and LummaC2, which use passw…
Passive DNS analysis of a reported phishing domain (lufyfeo[.]org) identified 36 additional domains hosted on the same IP that use 302 redirects to PDFs or scripts, forming infrastructure used in Latrodectus infections. The redirects and artifacts were linked …
Threat Actor: Shiny Hunters Victim: AT&T Information: – The data breach affected 73 million current and former AT&T customers. – AT&T initially denied that the leaked data originated from them. – The leaked data includes names, addresses, phone numbers, social security numbers, and birth dates. – Th…
Jamf Threat Labs analyzed two macOS infostealer campaigns: an Atomic Stealer variant delivered via poisoned sponsored ads mimicking Arc Browser, and a malicious MeetHub application bundling a Rust-based stealer and chainbreaker to dump keychain and wallet data…
Summary : NIST has announced a new consortium to operate the NVD, addressing challenges and improving processes for vulnerability management. Key Point : ⭐ NIST will hand over management of the NVD to an industry consortium ⭐ Challenges within the NVD led to a backlog of unanalyzed CVEs ⭐ NVD Consor…
Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…
Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…
Threat Actor: USDoD Victim: FICO Information: 🌟 USDoD is the threat actor responsible for the alleged leak of FICO’s database. 🌟 FICO is a prominent analytics software company operating in over 90 countries. 🌟 The leaked database contains 170,000 rows in CSV format. 🌟 Personal and professional detai…
“Hey, This Isn’t the Right Site!” Distribution of Malware Exploiting Google Ads Tracking – ASEC BLOG
AhnLab SEcurity intelligence Center (ASEC) has recently detected a malware strain being distributed by using the Google Ads tracking feature. The confirmed cases show that the malware is being distributed by disguising itself as an installer for popular groupware such as Notion and Slack. Once the malware is installed and executed,…
Experience Level required: Beginner In this blog, we will learn how to analyze and deobfuscate Javascript malware. Let’s view the sample code The code has obfuscation with ° and g0 spread throughout, so let’s remove them. We need to take care because g0 is being used here as a variable. So we will r…