93% of IT professionals believe security threats are increasing in volume or severity, a significant rise from 47% last year, according to Thales. The number of enterprises experiencing ransomware attacks surged by over 27% in the past year. Despite this escalating threat, less than half of organiza…
A threat actor claiming to offer network and mail access to an Indian Software Company. This company, known for its web hosting services, has become a target for malicious actors aiming to exploit sensitive data. With revenue totaling $462 million, the company’s network and client websites represent…
A threat actor has emerged, claiming to offer unauthorized access to the WordPress admin of an American shopping website. The actor revealed that an average of 75 orders were placed per day on the website over the past year. It’s stated that all accesses are acquired from exchange installations, wit…
In a concerning development, a threat actor has emerged, claiming to offer unauthorized access to the database of a leading American financial company. With an annual revenue reaching a staggering $5 billion, the company’s database likely contains a wealth of sensitive financial information. The thr…
We unravel the details of two large-scale StrelaStealer campaigns from 2023 and 2024. This email credential stealer has a new variant delivered through zipped JScript.
The post Large-Scale StrelaStealer Campaign in Early 2024 appeared first on Unit 42….
This proof of value study showcases the effectiveness of detecting DNS exfiltration and Command and Control (C2) communications through Suspicious Domain feeds and Threat Insight technology, utilized by two distinct customers: a large retail company and an edu…
According to allegations, a series of DDoS attacks orchestrated by UserSec and the Cyber Army of Russia have been revealed, aiming to disrupt the operations of multiple Luxembourg websites. Reportedly, prominent targets of these purported attacks include Luxembourg’s Lux-Airport, Ministry of Foreign…
A hacker allegedly connected to the People’s Republic of China has been exploiting two popular vulnerabilities to attack U.S. defense contractors, U.K. government entities and institutions in Asia. A new report from Google-owned security firm Mandiant spotlighted the work of a threat actor the…
With the recent launch of our first standalone cybersecurity product, eSentire Threat Intelligence, we thought we…
Cisco Talos and CERT.NGO mapped a full post-compromise kill chain used by the Russian actor Turla, showing Microsoft Defender exclusions, BAT-based service creation, and deployment of the TinyTurla-NG (TTNG) implant. The actors used a custom Chisel beacon (hou…
Tenable Research discovered a one-click account takeover vulnerability in the AWS Managed Workflows Apache Airflow service that could have allowed full takeover of a victim’s web management panel of the Airflow instance. The discovery of this now-resolved vulnerability reveals a broader problem of m…
As AI gets baked into enterprise tech stacks, AI applications are becoming prime targets for cyber attacks. In response, many cybersecurity teams are adapting existing cybersecurity practices to mitigate these new threats. One such practice measure is red teaming: the effort to expose weaknesses in…
Insikt Group analyzes cyber threat and geopolitical trends observed throughout 2023 and provides a comprehensive overview of the cyber threat landscape.
Android devices are being targeted by an info‑stealer distributed via WhatsApp messages that impersonate traffic authorities and trick users into installing a malicious APK named “Vahan Parivahan.” Once installed, the app requests SMS/contacts/phone permission…
This is an web about website security. It discusses different types of malware that can infect websites. The web article provides information on how to protect your website from these threats. Some of the important points from this web article are that attackers often target the .htaccess file to hi…