Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service
In this blog post we will describe:
How attackers use the Background Intelligent Transfer Service (BITS)
Forensic techniques for detecting attacker activity with data format specifications
Public release of the BitsParser tool
A...
CopperStealer Malware Targets Facebook and Instagram Business Accounts
A previously undocumented password and cookie stealer has been compromising accounts of big guns like Facebook, Apple, Amazon and Google since 2019 and then using them for cybercriminal activity.
A...
Bogus Android Clubhouse App Drops Credential-Swiping Malware
The malicious app spreads the BlackRock malware, which steals credentials from 458 services – including Twitter, WhatsApp, Facebook and Amazon.
Researchers are warning of a fake version of the popular...
$4,000 COVID-19 ‘Relief Checks’ Cloak Dridex Malware
The American Rescue Act is the latest zeitgeisty lure being circulated in an email campaign.
Cybercriminals have wasted no time in hopping on the American Rescue Plan – the COVID-19...
Trojanized Xcode Project Slips MacOS Malware to Apple Developers
In a new campaign, threat actors are bundling macOS malware in trojanized Apple Xcode developer projects.
Cybercriminals are targeting Apple developers with a trojanized Xcode project, which once launched...
Mimecast: SolarWinds Attackers Stole Source Code
A new Mimecast update reveals the SolarWinds hackers accessed several “limited” source code repositories.
Hackers who compromised Mimecast networks as part of the SolarWinds espionage campaign have swiped some...
Latest Mirai Variant Targets SonicWall, D-Link and IoT Devices
A new Mirai variant is targeting known flaws in D-Link, Netgear and SonicWall devices, as well as newly-discovered flaws in unknown IoT devices.
A new variant of the Mirai...
PYSA Ransomware Pillages Education Sector, Feds Warn
A major spike of attacks against higher ed, K-12 and seminaries in March has prompted the FBI to issue a special alert.
The FBI has issued a warning about an...
REvil Group Claims Slew of Ransomware Attacks
The threat group behind the Sodinokibi ransomware claimed to have recently compromised nine organizations.
The REvil ransomware threat group is on a cyberattack tear, claiming over the past two weeks...
Cyberattacks See Fundamental Changes, A Year into COVID-19
A year after COVID-19 was officially determined to be a pandemic, the methods and tactics used by cybercriminals have drastically changed.
COVID-19-related phishing emails, brute-force attacks on remote workers, and...
