Emotet Malware Makes a Comeback with New Evasion Techniques
By:
Jan 24, 2023Ravie LakshmananCyber Threat / Cyber Crime
The Emotet malware operation has continued to refine its tactics in an effort to fly under the radar, while also acting...
Chinese Hackers Utilize Golang Malware in DragonSpark Attacks to Evade Detection
By:
Jan 24, 2023Ravie LakshmananCyber Espionage / Golang
Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics to go past security...
Gamaredon Group Launches Cyberattacks Against Ukraine Using Telegram
By:
Jan 20, 2023Ravie LakshmananCyber War / Cyber Attack
The Russian state-sponsored cyber espionage group known as Gamaredon has continued its digital onslaught against Ukraine, with recent attacks leveraging the...
Mailchimp Suffers Another Security Breach Compromising Some Customers’ Information
By:
Jan 19, 2023Ravie LakshmananEmail Security / Security Breach
Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal...
Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa
By:
Jan 18, 2023Ravie LakshmananCyber Threat / Malware
An ongoing campaign dubbed Earth Bogle is leveraging geopolitical-themed lures to deliver the NjRAT remote access trojan to victims across the Middle...
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware
By:
Jan 17, 2023Ravie LakshmananThreat Response / Malware
New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub Codespaces to deliver malware...
New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild
By:
Jan 16, 2023Ravie LakshmananThreat Landscape / Malware
Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)'s Hive multi-platform malware...
Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident
By:
Jan 14, 2023Ravie LakshmananDevOps / Data Security
DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee's laptop and leveraged malware to steal their two-factor authentication-backed...
Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability
By:
Jan 14, 2023Ravie LakshmananServer Security / Patch Management
A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability that has come under...
Beware: Tainted VPNs Being Used to Spread EyeSpy Surveillanceware
By:
Jan 13, 2023Ravie LakshmananVPN / Surveillanceware
Tainted VPN installers are being used to deliver a piece of surveillanceware dubbed EyeSpy as part of a malware campaign that started in...
