Article Summary : 🔒 Another city in Florida, St. Cloud, has been hit by a ransomware attack affecting city services. 🚨 City departments are operating as best as possible until the issue is resolved. 💳 In-person payments for Parks and Recreation events are temporarily cash-only. 🚓 Police and Fire Res…
Article Summary: 🔍 Scams targeting consumers are increasing in complexity and volume, with scammers using generative AI and other technologies to create convincing fraud opportunities. 📈 Despite a decrease in individual scam reports, the total money lost has increased, indicating scammers are using…
Remcos RAT samples were delivered inside a .vhd archive that contained a shortcut invoking a PowerShell script (MacOSX.ps1) which chains multiple staged downloads and decodings to ultimately drop a Remcos payload. The chain includes a PNG carrying a base64 VBS…
NoName057(16) has purportedly initiated a series of distributed denial-of-service (DDoS) attacks targeting several Dutch websites in response to the announcement made by the Dutch Defense Ministry regarding the transfer of planes to Ukraine. The alleged cyber assaults were directed towards prominent…
This blog entry discusses the Agenda ransomware group’s use of its latest Rust variant to propagate to VMWare vCenter and ESXi servers….
Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom.However this is not guaranteed and you should never pay! GOOD NEWS Prevention is possible. Following simple cyber security advice…
Ransomware, a phenomenon now very well known, serves one ultimate and obvious purpose: Monetary gain for the cybercriminal(s). However, multiple scenarios are, in fact, possible. Consider any and all of the following: Closing thoughts As we’ve seen, ransomware can serve a plethora of purposes; wheth…
The post demonstrates reliably extracting .NET assembly metadata (MVID, Typelib GUID, assembly name) and using Yara’s dotnet/console modules plus a new Python tool to hunt, cluster and classify .NET malware at scale. The author applied these methods across fam…
AhnLab SEcurity intelligence Center (ASEC) recently discovered the Kimsuky group distributing malware disguised as an installer from a Korean public institution. The malware in question is a dropper that creates the Endoor backdoor, which was also used in the attack covered in the previous post, “TrollAgent That Infects Systems Upon Security…
Dailydarkweb researchers, warn of a concerning development in the realm of cryptocurrency security as a new software dubbed the “Seed Phrase Seeker” emerges on the dark web. This sophisticated tool, priced at a staggering $5,000 per month, poses a significant risk to users of popular hardware and de…
Dailydarkweb researchers warn of a concerning development in the realm of cryptocurrency security as a new software dubbed the “Seed Phrase Seeker” emerges on the dark web. This sophisticated tool, priced at a staggering $5,000 per month, poses a significant risk to users of popular hardware and des…
Google’s new Search Generative Experience (SGE) has been observed recommending low-quality sites that form SEO-poisoning campaigns, use redirect chains, and push visitors into subscribing to browser notifications, fake giveaways, and unwanted Chrome extensions…
Il CERT-AGID ha rilevato l’esistenza di una pagina di phishing mirata agli utenti di Siatel v2.0 – PuntoFisico dell’Agenzia delle Entrate, attiva online dal primo pomeriggio del 21 marzo 2024.
Article Summary: 🔹 Russian state-backed hackers likely behind recent attacks on four small Ukrainian internet providers, disrupting operations for over a week. 🔹 Group known as Solntsepek claimed responsibility for incidents, believed to be behind 2023 cyberattack on Ukraine’s largest telecommunicat…
Article Summary: 🔒 Customers of bankrupt crypto platform BlockFi have been targeted with a convincing phishing email impersonating the platform, resulting in millions being stolen in just five days. 🚨 The latest BlockFi phishing campaign is well-made, impersonating the BlockFi team with no typos and…