Threat Actor: – Unknowns group – CyberDragon group – Cyber Army of Russia group Victim: – Government of Slovenia – NLB (largest commercial bank in Slovenia) – Chamber of Commerce and Industry Information: – The Unknowns group is believed to be behind the series of disruptive DDoS attacks targeting k…
This video tests Windows Defender against various infamous ransomware threats, examining its default protection capabilities and exploring whether additional tweaks and tools, like Defender UI, can enhance its ransomware defense. Key points 🔒 Default Protection: By default, Windows Defender blocked…
____________________ Summary: Vietnam Securities Broker, VNDirect, faces cyberattack leading to trading suspension. Key Point 🛡️: – VNDirect’s data was encrypted by professional hackers. – Only VNDirect was affected, no risk of contagion to other financial organizations. – Restoration process includ…
____________________ Summary: INC Ransom group claims responsibility for attacking NHS Scotland, stealing 3TB of data and leaking sensitive files. Key Point 🛡️: – Attack contained to NHS Dumfries and Galloway – Data stolen includes patients’ medical information – INC Ransom group published snippet o…
____________________ Summary: The ‘Darcula’ phishing-as-a-service operation is a sophisticated and pervasive scam targeting consumers worldwide. Key Point 🦇: – Darcula has created 19,000 phishing domains in cyberattacks against over 100 countries – The platform offers branded phishing campaigns for…
Summary: Apps found on Google Play are turning devices into proxy network nodes without users’ knowledge, posing a security risk. Key Point: 🔒 Apps with hidden proxy network functionality are being removed from Google Play. 🔒 The LumiApps SDK is used to enroll devices in a residential proxy network….
____________________ Summary: Google fixed two zero-day vulnerabilities in Chrome exploited during Pwn2Own 2024. Key Point: 🔒 CVE-2024-2887: High-severity type confusion weakness in WebAssembly. 🔒 CVE-2024-2886: Use-after-free weakness in WebCodecs API. 🔒 Google released patches in Chrome version 12…
Summary : Municipalities in Texas and Georgia are facing disruptions in services due to ransomware attacks. Key Point : 🔒 Gilmer County in Georgia is experiencing a ransomware attack affecting services for its residents. 🔒 Fulton County in Georgia is still restoring critical services after a ransomw…
This article describes how attackers can abuse the SCCM client service CcmExec to hijack every interactive Windows session by modifying SCNotification.exe’s .config to load a malicious AppDomainManager DLL, and introduces CcmPwn which automates both DLL-based …
PyPI temporarily suspended new project creation and user registration after Checkmarx discovered a large typosquatting campaign that uploaded numerous malicious packages whose setup.py executed encrypted, obfuscated payloads at install time. The packages used …
Cyble researchers found the Solana Drainer source code leaked on a cybercrime forum along with detailed deployment instructions, configuration files, and a backend designed to steal seed phrases and report results via Telegram. The leak links the project to MS…
Summary : Trezor’s Twitter account was hijacked by cryptocurrency scammers through a fake Calendly invite, leading to offensive tweets being posted. Despite security precautions, the attackers managed to compromise the account. Key Point : 🔒 Imposter posing as credible entity tricked PR team into cl…
____________________ Summary: CISA has added a new vulnerability to its Known Exploited Vulnerabilities Catalog, emphasizing the importance of timely remediation to protect against cyber threats. Key Point: 🔒 CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability 🔒 Binding Operation…
Threat Actor: – Snatch group Victim: – Miki Travel Information: – Miki Travel is a globally renowned travel company offering various travel services. – Miki Travel has previously suffered a ransomware attack from another threat actor. – The company promptly disclosed the previous attack to their cus…
Mandiant and Google TAG observed that information‑operations infrastructure linked to Yevgeniy Prigozhin (including NAEBC, Cyber Front Z, and GPCI) has persisted after his political downfall and death, with varying degrees of activity and survivability. These …