A state-sponsored North Korean threat actor tracked as TA406 was recently observed deploying custom info-stealing malware in espionage campaigns. The particular actor is attributed as one of several groups known as Kimsuky (aka Thallium). TA406has left traces …
North Korean cyberspies target govt officials with custom malware Read More »
There’s some unusual activity brewing on Russian-speaking cybercrime forums, where hackers appear to be reaching out to Chinese counterparts for collaboration. These attempts to enlist Chinese threat actors are mainly seen on the RAMP hacking …
Russian ransomware gangs start collaborating with Chinese hackers Read More »
The Emotet malware kicked into action yesterday after a ten-month hiatus with multiple spam campaigns delivering malicious documents to mailboxes worldwide. Emotet is a malware infection that is distributed through spam campaigns with malicious attachments. …
Here are the new Emotet spam campaigns hitting mailboxes worldwide Read More »
The Microsoft Threat Intelligence Center (MSTIC) has presented an analysis of the evolution of several Iranian threat actors at the CyberWarCon 2021, and their findings show increasingly sophisticated attacks. Since September 2020, Microsoft has been tracking …
Microsoft warns of the evolution of six Iranian hacking groups Read More »
The data for approximately 7 million Robinhood customers stolen in a recent data breach are being sold on a popular hacking forum and marketplace. Last week, Robinhood disclosed a data breach after one of its …
7 million Robinhood user email addresses for sale on hacker forum Read More »
A new hacker group named Moses Staff has recently claimed responsibility for numerous attacks against Israeli entities, which appear politically motivated as they do not make any ransom payment demands. The threat actors have repeatedly …
Moses Staff hackers wreak havoc on Israeli orgs with ransomless encryptions Read More »
The Federal Bureau of Investigation (FBI) email servers were hacked to distribute spam email impersonating FBI warnings that the recipients’ network was breached and data was stolen. The emails pretended to warn about a “sophisticated …
FBI system hacked to email ‘urgent’ warning about fake cyberattacks Read More »
The GravityRAT remote access trojan is being distributed in the wild again, this time under the guise of an end-to-end encrypted chat application called SoSafe Chat. This particular RAT (remote access trojan) targets predominately Indian users, being …
Fake end-to-end encrypted chat app distributes Android spyware Read More »
Hackers stayed hidden for nine months on a server holding customer information for a Queensland water supplier, illustrating the need of better cyberdefenses for critical infrastructure. SunWater is Australian government-owned water supplier responsible for operating 19 …
Hackers undetected on Queensland water supplier server for 9 months Read More »
Bait attacks are on the rise, and it appears that actors who distribute this special kind of phishing emails prefer to use Gmail accounts to conduct their attacks. According to a report by Barracuda, who …
Gmail accounts are used in 91% of all baiting email attacks Read More »
wo Android apps available on the Google Play store have been found to contain malware this week. These apps are called ‘Smart TV remote’ and ‘Halloween Coloring’, with the former having been downloaded over at …
Careful: ‘Smart TV remote’ Android app on Google Play is malware Read More »
A hacker-for-hire group called Void Balaur has been stealing emails and highly-sensitive information for more than five years, selling it to customers with both financial and espionage goals. With more than 3,500 targets spread across …
Void Balaur hackers-for-hire sell stolen mailboxes and private data Read More »