Security researchers caught a new phishing campaign that tried to deliver the BazarBackdoor malware by using the multi-compression technique and masking it as an image file. The multi-compression or nested archive method is not new …
BazarBackdoor sneaks in through nested RAR and ZIP archives Read More »
Google security researchers shared more information on four security vulnerabilities, also known as zero-days, unknown before they discovered them being exploited in the wild earlier this year. The four security flaws were found by Google Threat Analysis …
Google: Russian SVR hackers targeted LinkedIn users with Safari zero-day Read More »
Kaspersky researchers have revealed an ongoing and large-scale advanced persistent threat (APT) campaign with hundreds of victims from Southeast Asia, including Myanmar and the Philippines government entities. This cluster of APT activity, tracked as LuminousMoth …
Chinese cyberspies’ wide-scale APT campaign hits Asian govt entities Read More »
The Trickbot botnet malware that often distributes various ransomware strains, continues to be the most prevalent threat as its developers update the VNC module used for remote control over infected systems. Its activity has been …
Trickbot updates its VNC module for high-value targets Read More »
The U.S. Department of Justice (DoJ) has charged an individual for engaging in insider trading on the darknet. Greece-based Apostolos Trovias, known as the “The Bull” frequently used encrypted messaging services and the dark web for …
US indicts dark web user ‘The Bull’ for insider trading Read More »
The infrastructure and websites for the REvil ransomware operation have mysteriously gone offline as of last night. The REvil ransomware operation, aka Sodinokibi, operates through numerous clear web and dark web sites used as ransom …
REvil ransomware gang’s web sites mysteriously shut down Read More »
Hackers compromised gambling sites to deliver a new remote access trojan (RAT) called BIOPASS that enables watching the victim’s computer screen in real time by abusing popular live-streaming software. Apart from the unusual feature, which …
New BIOPASS malware live streams victim’s computer screen Read More »
Interpol (International Criminal Police Organisation) Secretary General Jürgen Stock urged police agencies and industry partners to work together to prevent what looks like a future ransomware pandemic. Secretary General Stock added that the best tactic …
Interpol urges police to unite against ‘potential ransomware pandemic’ Read More »
The REvil ransomware gang is increasing the ransom demands for victims encrypted during Friday’s Kaseya ransomware attack. When conducting an attack against a business, ransomware gangs, such as REvil, typically research a victim by analyzing …
REvil is increasing ransoms for Kaseya ransomware attack victims Read More »
The zero-day vulnerability used to breach on-premise Kaseya VSA servers was in the process of being fixed, just as the REvil ransomware gang used it to perform a massive Friday attack. The vulnerability had been …
Kaseya was fixing zero-day just as REvil ransomware sprung their attack Read More »
World-leading chemical distribution company Brenntag has shared additional info on what data was stolen from its network by DarkSide ransomware operators during an attack from late April 2021 that targeted its North America division. Brenntag is the …
US chemical distributor shares info on DarkSide ransomware data theft Read More »
A massive REvil ransomware attack affects multiple managed service providers and their clients through a reported Kaseya supply-chain attack. Starting this afternoon, the REvil ransomware gang targeted approximately six large MSPs, with thousands of customers, …
REvil ransomware hits 200 companies in MSP supply-chain attack Read More »