Short Summary:
The article discusses a resurgence of malvertising campaigns targeting utility software, particularly focusing on the Mac version of Slack. Threat actors are creating deceptive ads that impersonate legitimate …
Tag: PHISHING
Short Summary
Read More
The article discusses a phishing campaign utilizing the Mamba 2FA phishing kit, which mimics Microsoft 365 login pages and employs advanced techniques to capture user credentials and multi-factor …
Short Summary
Read More
The article discusses a new campaign by the APT group Awaken Likho, targeting Russian government agencies and industrial enterprises. The group has shifted its tactics, now utilizing the …
Short Summary:
The article provides a detailed analysis of PhantomLoader, a malware loader that disguises itself as a legitimate DLL for antivirus software. It is used to deliver a rust-based …
Summary: A spear-phishing email campaign targeting recruiters has been identified, utilizing a JavaScript backdoor known as More_eggs to compromise systems under the pretense of fake job applications. The campaign is …
Date Reported: 2024-10-02 Country: Germany Victim: Traffics | Traffics | traffics.de Additional Information :
Traffics, a company specializing in travel technologies, detected and repelled a cyberattack on its system on…Summary: The APT hacking group FIN7 has created a network of fake AI-powered deepnude generator websites to distribute information-stealing malware to unsuspecting visitors. This sophisticated operation leverages controversial technology to …
Summary: A new ‘FakeUpdate’ campaign in France exploits compromised websites to deliver fake browser and application updates, distributing the WarmCookie backdoor. This cyberattack strategy, employed by the threat group ‘SocGolish’, …
Victim: Ibermutuamur Country : ES Actor: hunters Source: https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/companies/4145715381 Discovered: 2024-10-05 16:31:10.741269 Published: 2024-10-05 16:02:06.000000 Description : Country : Spain – Exfiltraded data : yes – Encrypted data : no …
Cloud Computing Security Insights
Cloud Computing Security Insights SummaryThe video discusses the expected growth of the cloud computing industry, reaching 0 billion in 2024, and highlights the increased security …
Summary: A large-scale fraud campaign has exploited fake trading apps on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims in a scheme …
Victim: Markdom Plastic Products Country : CA Actor: play Source: http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion/topic.php?id=GfWtRnzykCl8eD Discovered: 2024-10-04 22:36:56.849025 Published: 2024-10-04 22:36:55.926608 Description : Canada
Ransomware Victims – ALL Other Victims by play
Ransomware Gang …
Short Summary:
AWS has expanded its AWSCompromisedKeyQuarantine policies to include new actions aimed at preventing the misuse of compromised access keys. This proactive measure is designed to restrict certain actions …
Episode Summary
Episode SummaryThe video discusses the implications of AI advancements on cybersecurity, particularly focusing on phishing as a prevalent issue. The panel, comprising experts in AI and cybersecurity, …
Short Summary:
The article provides an in-depth analysis of the NOOPLDR and NOOPDOOR malware tools, focusing on their capabilities, methods of operation, and persistence mechanisms. It details how these tools …
Victim: CopySmart LLC Country : US Actor: ciphbit Source: Discovered: 2024-10-04 14:58:41.347539 Published: 2024-10-04 14:58:39.312283 Description : CopySmart LLC is a dynamic company specializing in providing innovative document management solutions …
Summary: In August 2024, the North Korean state-sponsored threat actor Andariel targeted three U.S. organizations in a financially motivated attack, although they did not succeed in deploying ransomware. This group, …
DATA BREACH:
A data breach refers to an incident where confidential, sensitive, or protected information is accessed, disclosed, or used by unauthorized individuals. This often involves stolen or leaked databases…
Read More
Summary: Eight suspected cybercriminals were arrested in Côte d’Ivoire as part of Interpol’s Operation Contender 2.0, targeting cybercrime in West Africa. The arrests followed the dismantling of a phishing scam …
1. Short Summary
Read More
The BlueShark APT group has been actively targeting individuals in South Korea during the first half of 2024, utilizing various malware types and spear-phishing tactics disguised as …
Short Summary:
The “Vilsa Stealer” is a newly identified malware discovered on GitHub, known for its efficiency in extracting sensitive data from various applications. It targets browser credentials, crypto wallets, …
Short Summary:
This article discusses a vishing attack that targeted a remote employee in the hospitality sector, leading to unauthorized access to the customer’s network. Darktrace’s anomaly-based threat detection successfully …
Short Summary: North Korea’s APT37 group has been identified conducting a campaign named SHROUDED#SLEEP, utilizing a stealthy PowerShell-based malware called VeilShell. This malware employs advanced evasion techniques to target victims…
Read More
Summary: The article discusses the emerging threat of “phantom domains,” which are active links to unregistered dot-com domains that can be exploited by malicious actors to hijack hyperlinks and deceive …
Short Summary
Read More
This article discusses a sophisticated phishing campaign that utilizes HTML smuggling techniques to deliver malicious payloads. The campaign involves multiple stages of obfuscation and deception, including the use …
Short Summary
Read More
Meow, a ransomware group that emerged in 2022, has gained attention for its unique operational model and rising victim count. It is often linked to Meow Leaks, which …
Short Summary:
The article discusses a sophisticated credential phishing scheme targeting Microsoft accounts via legitimate Zoom Docs links. Threat actors exploit the trust associated with Zoom to trick users into …
Short Summary
Read More
Silent Push research reveals that the FIN7 threat group is employing new tactics, including the use of an AI “DeepNude Generator” across multiple websites to distribute malware. The …
Short Summary: Proofpoint researchers uncovered a campaign impersonating Royal Mail to distribute Prince ransomware, a variant available on GitHub. The campaign, which occurred in mid-September, targeted individuals in the UK…
Read More
Summary: The Rhadamanthys information stealer has introduced advanced features, including AI-driven optical character recognition for extracting cryptocurrency wallet seed phrases from images, making it a significant threat to cryptocurrency users. …
Short Summary:
The article details various email payloads used in phishing attempts, specifically focusing on different types of attachments and the malware associated with them. The payloads target multiple users …
Short Summary:
Key Group, also known as keygroup777, is a financially motivated ransomware group that primarily targets Russian users. They utilize various ransomware builders, including Chaos and Annabelle, and communicate …
Summary: The UK’s National Cyber Security Centre (NCSC) has issued a warning about Iranian cyber threats, specifically a spear phishing campaign attributed to Iran’s Islamic Revolutionary Guard Corps (IRGC). This …
Short Summary:
Read More
Cyble Research and Intelligence Labs (CRIL) uncovered a sophisticated attack that utilizes legitimate tools like Visual Studio Code and GitHub. The attack begins with a disguised .LNK file …
Summary: Recent analyses reveal that the Patchwork APT group has initiated a sophisticated cyber campaign utilizing a new backdoor called “Nexe” to target Chinese entities, employing advanced evasion tactics. This …
Summary: A new malware campaign, Lumma Stealer, is targeting League of Legends fans during the World Championship, tricking users into downloading malicious software disguised as the game. The campaign has …
Summary: Threat actors are exploiting public interest in the scandal surrounding Sean “Diddy” Combs to distribute spyware disguised as files that claim to reveal deleted social media posts. Researchers have …
Summary: Cyber criminals are increasingly exploiting platforms like Atlassian to conduct sophisticated phishing attacks targeting law firms and corporations in Australia and the APAC region, aiming to steal employee credentials. …
Summary: DragonForce ransomware is rapidly expanding its Ransomware-as-a-Service (RaaS) operations, posing a significant global threat to businesses through sophisticated double extortion tactics. Companies are urged to enhance their cybersecurity measures …
Short Summary
Read More
UserSec is a pro-Russian hacktivist group that emerged in early 2023, targeting Western governments and critical infrastructure, particularly those affiliated with NATO and Ukraine. Utilizing Telegram for coordination …
Short Summary:
Trend Micro’s MDR team successfully mitigated a more_eggs infection, which was initiated through a spear-phishing email that tricked a recruitment officer into downloading a malicious file disguised as …
Victim: verco.co.uk Country : GB Actor: threeam Source: http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onionpost.php?id=40 Discovered: 2024-09-30 19:49:44.375579 Published: 2024-09-30 19:49:43.875231 Description : William Vere & Sons was founded in 1912 by the great-grandfather of Richard …
Short Summary
Read More
XWorm is a newly discovered versatile malware tool that allows attackers to access sensitive information, gain remote access, and deploy additional malware. Its multifaceted nature has led to …
Summary: Microsoft has reported a multi-staged attack by the threat actor Storm-0501, which compromised hybrid cloud environments leading to data exfiltration, credential theft, and ransomware deployment across various sectors in …
Summary: DCRat, a modular remote access Trojan (RAT) offered as malware-as-a-service, has been delivered through innovative techniques such as HTML smuggling, targeting Russian-speaking users. This blog analyzes the methods used …
Introduction
Read More
In light of the escalating frequency and complexity of ransomware attacks, are security leaders confident in their organization’s defenses? According to Group-IB’s Hi-Tech Crime Trends 2023/2024 Report, ransomware will have …
Victim: www.contegritygroup.com Country : US Actor: ransomhub Source: http://ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion/1308ea43-8e3f-4c7d-b467-2b13a80dd931/ Discovered: 2024-09-28 18:08:28.237340 Published: 2024-09-28 10:32:57.000000 Description : Contegrity Group, Inc. specializes in professional development and organizational consulting. They focus on …
Summary: An advanced threat actor known as SloppyLemming, with ties to India, is utilizing various cloud services for credential harvesting and malware delivery, primarily targeting government and law enforcement entities …
Summary: Researchers have identified a malicious email campaign targeting French users that utilizes generative AI to create and deliver AsyncRAT malware. This trend highlights the increasing reliance of less technical …
Summary and Keypoints
Short SummaryThe video discusses recent cyber security incidents, including the arrest of a member of the cybercrime group Scattered Spider, the emergence of a new hacker …