New “Whiffy Recon” Malware Triangulates Infected Device Location via Wi-Fi Every Minute
By:
Aug 24, 2023THNMalware / Privacy
The SmokeLoader malware is being used to deliver a new Wi-Fi scanning malware strain called Whiffy Recon on compromised Windows machines.
"The new malware strain...
North Korean Affiliates Suspected in $40M Cryptocurrency Heist, FBI Warns
By:
Aug 23, 2023THNCryptocurrency / Cyber Attack
The U.S. Federal Bureau of Investigation (FBI) on Tuesday warned that threat actors affiliated with North Korea may attempt to cash out stolen...
New Variant of XLoader macOS Malware Disguised as ‘OfficeNote’ Productivity App
By:
Aug 22, 2023THNMalware / Endpoint Security
A new variant of an Apple macOS malware called XLoader has surfaced in the wild, masquerading its malicious features under the guise of...
New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools
By:
Microsoft on Thursday disclosed that it found a new version of the BlackCat ransomware (aka ALPHV and Noberus) that embeds tools like Impacket and RemCom to facilitate lateral...
Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks
By:
Aug 17, 2023THNCyber Espionage / Malware
An ongoing campaign targeting ministries of foreign affairs of NATO-aligned countries points to the involvement of Russian threat actors.
The phishing attacks feature PDF...
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons
By:
Aug 17, 2023THNCyber Attack / Malware
An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike beacons on compromised systems....
Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus
By:
A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in Belarus.
"Since 2020, MoustachedBouncer...
Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives
By:
Threat actors are increasingly using a phishing-as-a-service (PhaaS) toolkit dubbed EvilProxy to pull off account takeover attacks aimed at high-ranking executives at prominent companies.
According to Proofpoint, an ongoing...
New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks
By:
Aug 10, 2023THNMalware / Cyber Threat
Malicious actors are using a legitimate Rust-based injector called Freezers to deploy a commodity malware called XWorm in victim environments.
The novel attack chain,...
U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons
By:
Aug 09, 2023THNData Breach / Cyber Attack
The U.K. Electoral Commission on Tuesday disclosed a "complex" cyber attack on its systems that went undetected for over a year, allowing...
