Attackers Hijack Craigslist Emails to Bypass Security, Deliver Malware
Manipulated Craigslist emails that abuse Microsoft OneDrive warn users that their ads contain “inappropriate content.”
Musical instruments, motorcycle parts and now malware — Craigslist really does have it all.
The Craigslist...
Mozilla Firefox Blocks Malicious Add-Ons Installed by 455K Users
The misbehaving Firefox add-ons were misusing an API that controls how Firefox connects to the internet.
Mozilla’s Firefox team has blocked add-ons that were abusing the proxy API in...
BillQuick Billing App Rigged to Inflict Ransomware
An SQL-injection bug in the BillQuick billing app has not only leaked sensitive information, it’s also let malicious actors execute code and deploy ransomware.
Threat actors are picking apart...
Groove Calls for Cyberattacks on US as REvil Payback
The bold move signals a looming clash between Russian ransomware groups and the U.S.
Following the recent international law enforcement effort that dismantled the infrastructure for the REvil ransomware group,...
REvil Servers Shoved Offline by Governments – But They’ll Be Back, Researchers Say
A multi-country effort has given ransomware gang REvil a taste of its own medicine by pwning its backups and pushing its leak site and Tor payment site offline.
The...
FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks
The infamous Carbanak operator is looking to juice its ransomware game by recruiting IT staff to its fake Bastion Secure “pen-testing” company.
The financially motivated cybercrime gang behind the...
Gigabyte Allegedly Hit by AvosLocker Ransomware
If AvosLocker stole Gigabyte’s master keys, threat actors could force hardware to download fake drivers or BIOS updates in a supply-chain attack a la SolarWinds.
The AvosLocker ransomware gang...
TA551 Shifts Tactics to Install Sliver Red-Teaming Tool
A new email campaign from the threat group uses the attack-simulation framework in a likely leadup to ransomware deployment.
The criminal threat group known as TA551 has added the Sliver...
Geriatric Microsoft Bug Exploited by APT Using Commodity RATs
Disguised as an IT firm, the APT is hitting targets in Afghanistan & India, exploiting a 20-year-old+ Microsoft Office bug that’s as potent as it is ancient.
An APT described...
Google Crushes YouTube Cookie-Stealing Channel Hijackers
Google has caught and brushed off a bunch of cookie-stealing YouTube channel hijackers who were running cryptocurrency scams on, or auctioning off, ripped-off channels.
Google has caught and brushed off...
