US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor
By: Ravie Lakshmanan
State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal...
440GB of data from US-based temporary staffing agency leaked on hacker forum
A 440GB archive that purportedly belongs to Automation Personnel Services, a US-based temporary employment agency, has been leaked on a popular hacker forum. Automation Personnel Services says the post-breach...
Mount Locker Ransomware Offering Double Extortion Scheme to Other Hackers
By: Ravie Lakshmanan
A relatively new ransomware strain behind a series of breaches on corporate networks has developed new capabilities that allow it to broaden the scope of its targeting...
Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen
By: Ravie Lakshmanan
FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor"...
Animal Jam data breach: 100,000 de-hashed user records leaked, 900,000 more sold on hacker...
A database containing 900,000 user records from the free-to-play game Animal Jam is being sold on hacker forums, with another 100,000 records leaked as a proof-of-concept sample.Animal Jam is...
Phishing Campaign Targets 200M Microsoft 365 Accounts
A well-organized email spoofing campaign has been seen targeting financial services, insurance, healthcare, manufacturing, utilities, and telecom.A large-scale phishing campaign is targeting 200 million Microsoft 365 users around the...
Hackers-For-Hire Group Develops New ‘PowerPepper’ In-Memory Malware
By: Ravie Lakshmanan
Cybersecurity researchers on Thursday disclosed details of a previously undiscovered in-memory Windows backdoor developed by a hacker-for-hire operation that can execute remotely malicious code and steal sensitive...
Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution
By: Ravie Lakshmanan
A global spear-phishing campaign has been targeting organizations associated with the distribution of COVID-19 vaccines since September 2020, according to new research.
Attributing the operation to a nation-state...
TrickBot Malware Gets UEFI/BIOS Bootkit Feature to Remain Undetected
By: Ravie Lakshmanan
TrickBot, one of the most notorious and adaptable malware botnets in the world, is expanding its toolset to set its sights on firmware vulnerabilities to potentially deploy...
