North Korean Hacking Group Targets Diplomats, Forgoes Malware
A North Korean cyber-operations group has increased its focus on cyber espionage and targeting diplomats and regional experts, using captured user credentials to fuel phishing attacks and only rarely...
Microsoft Exchange Server Flaws Now Exploited for BEC Attacks
Threat actors are using a couple of dangerous, new tactics to exploit the so-called ProxyShell set of vulnerabilities in on-premises Exchange Servers that Microsoft patched earlier this year —...
‘PerSwaysion’ Phishing Campaign Still Ongoing, and Pervasive
A phishing kit that has been used in thousands of attacks worldwide has been active for significantly longer than previously thought — and it continues to pose a potent...
Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials
Threat actors are targeting Middle-East-based employees of major corporations in a scam that uses a specific ‘ephemeral’ aspect of the project-management tool to link to SharePoint phishing pages.
A long-term...
FBI: FatPipe VPN Zero-Day Exploited by APT for 6 Months
The bureau’s flash alert said an APT has been exploiting the flaw to compromise FatPipe router clustering and load balancer products to breach targets’ networks.
A threat actor has been...
