MuddyWater APT has continued targeting government and private sectors since 2017 and resumed spear-phishing campaigns in February 2024 with new techniques. The group now leverages in-house tools and compromised accounts to deliver MSI-based payloads via ZIPs a…
A macOS stealer has been found camouflaged inside a partially obfuscated AppleScript and Bash payload delivered via a DMG trojan. The campaign uses phishing, masquerading as legitimate apps, and memory-based execution to steal credentials and sensitive data. #…
Check Point Research details a technical analysis of the Linux variant of DinodasRAT, tracked as Linodas, describing its separate codebase, multiple persistence methods, C2 communication, modular filter component, and extensive remote-control commands. The rep…
https://washwoodheathpcn.nhs.uk/saudi.txt notified by Awham
https://alphamedicalpractice.nhs.uk/saudi.txt notified by Awham
Threat Actor: Unknown Victim: Mashvisor Information: 🌟 The threat actor claims responsibility for selling a database sourced from Mashvisor. 🌟 The attack occurred in March 2024. 🌟 The compromised data includes sensitive CRM data. 🌟 The compromised data consists of 1,359 million records. 🌟 The price…
Threat Actor: Unknown threat actor Victim: 16 companies (names not provided) Information: 🌟 The threat actor is offering unauthorized access to 16 companies. 🌟 The compromised entities include small-scale enterprises and medium-scale corporations. 🌟 The sectors of the compromised companies include H…
Threat Actor: Unknown Victim: Mexican Government Information: 🌟 Unauthorized domain administrator access to a prominent entity within the Mexican government. 🌟 Access extends to more than 1000 employee accounts, including domain administrator and enterprise-level credentials. 🌟 The compromised syste…
Open-source software’s adaptive nature ensures its durability, relevance, and compatibility with new technologies. When I started digging deeper into the open-source cybersecurity ecosystem, I discovered an engaged community of developers working to find practical solutions to many problems, one of…
Images Editing Tools ICO to PNG ICO Converter Image to Base64 Base64 to Image Flip Image Rotate Image Image Enlarger Image Cropper Image Resizer Image Converter JPG to PNG PNG to JPG JPG Converter WebP to JPG A Custom Link Website Management Tools HTML Decode HTML Encode URL Decode URL Encode HTML B…
ABSTRACT This document will help and guide you to start your first threat hunting based on MITRE ATT&CK Tactics. Reconnaissance Objective: Identify potential reconnaissance activity on the network Description: Reconnaissance is an important phase of an attack, where the attacker gathers informat…
Windows Event Logs mindmap provides a simplified view of Windows Event logs and their capacities that enables defenders to enhance visibility for different purposes: Log collection (eg: into a SIEM) Threat hunting Forensic / DFIR Troubleshooting Scheduled tasks: Event ID 4697 , This event generates…
Google recently announced the release of Magika, an “AI-powered file-type identification system”. I tested this on a corpus of nearly 125k files to see how it fared. Why? File type detection is useful in a number of places, such as: Anti-spam – detecting unwanted attachments, for example those with…
An overview of CVE-2024-3094, a vulnerability in XZ Utils, and information about how to mitigate.
The post Threat Brief: Vulnerability in XZ Utils Data Compression Library Impacting Multiple Linux Distributions (CVE-2024-3094) appeared first on Unit 42….
AT&T confirmed that a data breach impacted 73 million current and former customers after its data were leaked on a cybercrime forum. In March 2024, more than 70,000,000 records from an unspecified division of AT&T were leaked onto Breached forum, vx-underground researchers reported. The researchers confirmed that the leaked data is legitimate, however, it is […]