A surge in use of malware Smoke Loader by threat group UAC-0006 is highlighted in the first-ever joint research published by Unit 42 and SSSCIP Ukraine.
The post Unit 42 Collaborative Research With Ukraine’s Cyber Agency To Uncover the Smoke Loader Backdoor appeared first on Unit 42….
AhnLab ASEC warns that the Kimsuky group distributed a signed dropper pretending to be an installer for a Korean public institution, which unpacks an encrypted payload and deploys the Endoor backdoor. The dropper extracts src.rar using password “1q2w3e4r”, ins…
Russian hackers launched an electronic warfare attack that disabled the GPS and communications systems of UK Defence Secretary Grant Shapps’ RAF Dassault Falcon 900 jet while flying near Kaliningrad.
The Russian Evilics group has allegedly infiltrated a website belonging to the US Defense Logistics Agency, specifically targeting ASSIST. ASSIST serves as a critical platform for standardization management activities within the Defense Standardization Program (DSP), facilitating the development, co…
Sextortion scam is defined as the crime of blackmailing victims using their sensitive information to inflict great psychological distress and extort them. Victims not only suffer from immediate financial losses but also immense shock and terror, some to the point of having their daily lives severely impacted. Contents DefinitionScamming is defined…
An analysis of an LNK-based malware reveals a multi-layer obfuscation and deobfuscation workflow centered on AutoIt, HTA, and PowerShell for downloading and executing payloads. The report traces dropped HTA and ZIP contents, decodes and cleans the AutoIt scrip…
An announcement published late last week on the firm’s news portal discloses a major cybersecurity incident that has compromised systems and data, including sensitive information of customers.
A threat actor has purportedly put up for sale a database belonging to an American real estate company. The alleged database comprises 1,754,593 lines of data, including personal identity details and Social Security Numbers (SSNs). Additionally, the threat actor claims to possess scans of various do…
Historical domain registration records suggest that the founder of Onerep, Dimitri Shelest, has been involved in numerous people-search services, indicating potential conflicts of interest.
AsukaStealer is a C++ information stealer that collects system details, browser credentials, screenshots, and targeted files before exfiltrating them to a C2 server using HTTP GET/POST calls with custom headers. The malware uses XOR/base64 obfuscation for C2 a…
Fujitsu, one of Japan’s leading technology conglomerates, has detected a significant security breach within its systems, revealing that malicious actors have infiltrated its infrastructure and potentially compromised customer data. With a workforce of 124,000 employees and an annual revenue of $23.9…
The victims were lured into slavery with false job offers and were forced to adopt fake identities to extract money from their victims through promises of cryptocurrency wins, investments, and romance.
Researchers have demonstrated a new acoustic side-channel attack on keyboards that can deduce user input based on their typing patterns, even in poor conditions, such as environments with noise.
MediaWorks, a company based in New Zealand, says it is investigating an alleged security incident after a hacker claimed to have stolen the data of just over 2.4 million people and began targeting individuals for extortion payments.
Moldovan national Sandu Boris Diaconu was sentenced to 42 months in federal prison for operating the E-Root cybercrime marketplace, which facilitated the sale of compromised computer credentials.