Summary: SAP has released 14 new security notes addressing critical vulnerabilities, including two with a CVSS score of 9.9, during its January 2025 Patch Day. Organizations are urged to apply these patches promptly to mitigate potential exploitation by threat actors. Threat Actor: Unknown | unknown…
Tag: SPYWARE
This article outlines the process of analyzing malware samples as a Cyber Threat Intelligence Analyst at PandaProbe Intelligence. The steps include downloading malware samples, conducting automated and manual analyses, correlating findings with global threat i…
Summary: A federal judge ruled that NSO Group, a spyware manufacturer, violated laws by hacking WhatsApp users, marking a significant moment for privacy advocates. However, experts suggest the ruling may not significantly impact NSO’s operations or set a strong legal precedent for future cases again…
Summary: Several governments in Central Asia and Latin America have acquired Russian wiretapping technology, enhancing their surveillance capabilities and potentially enabling Russian intelligence access to intercepted communications. This development raises concerns about civil liberties and the ri…
Summary: The Banshee macOS information stealer has been updated to target systems using the Russian language, expanding its reach, according to cybersecurity firm Check Point. Initially launched in mid-2024, the malware continues to pose threats despite the leak of its source code. Threat Actor: Rus…
Summary: The Pall Mall Process, initiated to combat the proliferation of commercial hacking tools, faces skepticism regarding its effectiveness in changing the trade and use of these tools. Despite growing concerns over the threats posed by commercial cyber intrusion capabilities (CCICs), significan…
Summary: Google has released the January 2025 Android security updates addressing 36 vulnerabilities, including five critical remote code execution bugs. The updates are divided into two parts, with the first patching various components and the second focusing on specific hardware vulnerabilities. T…
In an increasingly complex digital landscape, the emergence of various types of malware continues to be a significant concern for internet users. One such malware that has recently captured widespread attention is EAGERBEE. Known for its sophisticated capabilities, EAGERBEE has become a hot top…
Summary: A new Android spyware called “FireScam” masquerades as a fake Telegram Premium app to steal sensitive data from victims’ devices. This campaign highlights the evolving tactics of threat actors who exploit legitimate applications and services to distribute malware. Threat Actor: Unknown | Fi…
Mongolia is experiencing an alarming increase in ransomware attacks, as highlighted by recent data from Ransom Monitor. Multiple domains, including government and healthcare services, have fallen victim to notorious threat actors such as funksec and darkvault. This escalating threat underscores the…
Summary: A new Android malware named FireScam has been identified as an information stealer and spyware, capable of harvesting sensitive information from various applications. It is distributed through a phishing website disguised as the legitimate ‘Telegram Premium’ application, targeting devices r…
In an increasingly connected digital era, macOS has become an enticing target for cybercriminals. From exploiting vulnerabilities that allow malicious applications to access sensitive data without user consent to sophisticated malware attacks targeting cryptocurrency assets, these threats underscore…
In 2024, cybercriminals remained relentless, prompting analysts to enhance defenses and provide vital insights. Key events included critical vulnerabilities in ScreenConnect, the emergence of new ransomware variants, and targeted attacks on human rights activi…
### #DigitalDefense #ThreatIntelligence #CyberAwareness Summary: This week’s cybersecurity update highlights significant threats and vulnerabilities impacting various sectors, emphasizing the need for vigilance and proactive measures to safeguard digital environments. Key developments include high-s…
The report delves into FireScam, a sophisticated Android malware disguised as a Telegram Premium app, highlighting its distribution methods, operational features, and implications for user security. The findings underscore the urgent need for enhanced cybersec…