The Emotet malware is now distributed through malicious Windows App Installer packages that pretend to be Adobe PDF software. Emotet is a notorious malware infection that spreads through phishing emails and malicious attachments. Once installed, …
Emotet now spreads via fake Adobe Windows App Installer packages Read More »
Nickolas Sharp, a former employee of networking device maker Ubiquiti, was arrested and charged today with data theft and attempting to extort his employer while posing as a whistleblower and an anonymous hacker. As alleged, …
Former Ubiquity dev charged for trying to extort his employer Read More »
34-year-old Russian Aleksandr Grichishkin, the founder of a bulletproof hosting service, was sentenced to 60 months in prison for allowing cybercrime gangs to use the platform in attacks targeting US financial institutions between 2008 to …
Bulletproof hosting founder imprisoned for helping cybercrime gangs Read More »
Mozilla has addressed a critical memory corruption vulnerability affecting its cross-platform Network Security Services (NSS) set of cryptography libraries. NSS can be used to develop security-enabled client and server apps with support for SSL v3, TLS, PKCS …
Mozilla fixes critical bug in cross-platform cryptography library Read More »
Europol has announced the arrest of 1,803 money mules out of 18,351 identified following an international money-laundering crackdown operation codenamed “EMMA 7.” As its name suggests, this was the seventh EMMA (European Money Mule Action) …
Europol: 18k money mules caught laundering money from online fraud Read More »
Three APT hacking groups from India, Russia, and China, were observed using a novel RTF (rich text format) template injection technique in their recent phishing campaigns. This technique is a simple yet effective method to …
State-backed hackers increasingly use RTF injection for phishing Read More »
Researchers analyzed the security of four popular smartwatches for children and found pre-installed downloaders, weak passwords, and unencrypted data transmissions. The analysis demonstrates that most of these devices arbitrarily collect and periodically transmit sensitive data …
Smartwatches for children are a privacy and security nightmare Read More »
A recently discovered botnet is attacking unpatched AT&T enterprise network edge devices using exploits for a four-year-old critical severity Blind Command Injection security flaw. The botnet, dubbed EwDoor by researchers at Qihoo 360’s Network Security Research Lab …
EwDoor botnet targets AT&T network edge devices at US firms Read More »
DNA Diagnostics Center (DDC), an Ohio-based DNA testing company, has disclosed a hacking incident that affects 2,102,436 persons. The incident resulted in a confirmed data breach that occurred between May 24, 2021, and July 28, …
DNA testing firm discloses data breach affecting 2.1 million people Read More »
An affiliate of the recently discovered Yanluowang ransomware operation is focusing its attacks on U.S. organizations in the financial sector using BazarLoader malware in the reconnaissance stage. Based on observed tactics, techniques, and procedures, the threat actor …
Yanluowang ransomware operation matures with experienced affiliates Read More »
Cannazon, one of the largest dark web marketplaces for buying marijuana products, shut down last week after suffering a debilitating distributed denial of service attack. As the admins explained in a message signed with the …
Dark web market Cannazon shuts down after massive DDoS attack Read More »
A stealthy hacking group named WIRTE has been linked to a government-targeting campaign conducting attacks since at least 2019 using malicious Excel 4.0 macros. The primary targeting scope includes high-profile public and private entities in …
Stealthy WIRTE hackers target governments in the Middle East Read More »