Microsoft is warning of a widespread credential phishing campaign that leverages open redirector links in email communications as a vector to trick users into visiting malicious websites while effectively bypassing security software. Attackers combine these …
Microsoft Warns of Widespread Phishing Attacks Using Open Redirects Read More »
A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet …
New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits Read More »
A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sensitive data stored in a variety of apps, …
Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software Read More »
Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what’s known …
Dutch Police Arrest Two Hackers Tied to “Fraud Family” Cybercrime Ring Read More »
An advanced persistent threat (APT) actor has been tracked in a new campaign deploying Android malware via the Syrian e-Government Web Portal, indicating an upgraded arsenal designed to compromise victims. Full article
Cybersecurity researchers on Tuesday lifted the lid on a previously undocumented malware strain dubbed “MosaicLoader” that singles out individuals searching for cracked software as part of a global campaign. The attackers behind MosaicLoader created a …
This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection Read More »
Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetected since 2005. Tracked as CVE-2021-3438 (CVSS score: 8.8), the issue concerns …
16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers Read More »
The Cyberspace Administration of China (CAC) has issued new stricter vulnerability disclosures regulations that mandate security researchers uncovering critical flaws in computer systems to mandatorily disclose them first-hand to the government authorities within two days …
China’s New Law Requires Researchers to Report All Zero-Day Bugs to Government Read More »
A sweeping and “highly active campaign” that originally set its sights on Myanmar has broadened its focus to strike a number of targets located in the Philippines, according to new research. Russian cybersecurity firm Kaspersky, …
China’s Cyberspies Targeting Southeast Asian Government Entities Read More »
Spanish law enforcement agencies on Wednesday arrested 16 individuals belonging to a criminal network in connection with operating two banking trojans as part of a social engineering campaign targeting financial institutions in Europe. The arrests …
16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain Read More »
Microsoft on Tuesday disclosed that the latest string of attacks targeting SolarWinds Serv-U managed file transfer service with a now-patched remote code execution (RCE) exploit is the handiwork of a Chinese threat actor dubbed “DEV-0322.” …
Chinese Hackers Exploit Latest SolarWinds 0-Day to Target U.S. Defense Firms Read More »
A sophisticated social engineering attack undertaken by an Iranian-state aligned actor targeted think tanks, journalists, and professors with an aim to solicit sensitive information by masquerading as scholars with the University of London’s School of …
Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East Read More »