Fake AI editor ads on Facebook push password-stealing malware
Image: MidjourneyA Facebook malvertising campaign targets users searching for AI image editing tools and steals their credentials by tricking them into installing fake apps that…
Month: August 2024
SLUBStick Linux Vulnerability Let Attackers Gain Full System Control
Security researchers have discovered a severe vulnerability in the Linux kernel that could allow attackers to gain full control over affected systems. Dubbed “SLUBStick,” the…
APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure
Aug 02, 2024Ravie LakshmananCyber Espionage / Malware A Russia-linked threat actor has been linked to a new campaign that employed a car for sale as…
Cryptonator seized for laundering ransom payments, stolen crypto
U.S. and German law enforcement seized the domain of the crypto wallet platform Cryptonator, used by ransomware gangs, darknet marketplaces, and other illicit services, and…
UNC4393 Actors Behind BASTA Ransomware Exploited via Partnerships
In mid-2022, Mandiant’s Managed Defense first uncovered UNC4393, the primary user of BASTA ransomware. This financially motivated threat cluster has attacked over 40 business entities…
Sensitive Illinois Voter Data Exposed by Contractor’s Unsecured Databases
Databases containing sensitive voter information from multiple counties in Illinois were openly accessible on the internet, revealing 4.6 million records that included driver’s license numbers…
New Panamorfi DDoS Attack Exploits Misconfigured Jupyter Notebooks
“Panamorfi,” a new DDoS attack, exploits Discord, Minecraft, and Jupyter Notebooks. Cybersecurity researchers warn of this threat targeting misconfigured Jupyter Notebooks, urging data scientists and…
Scammers are impersonating cryptocurrency exchanges, FBI warns
The Federal Bureau of Investigation (FBI) issued a public service announcement warning the public about scammers impersonating cryptocurrency exchange employees to steal funds. There are…
APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack
Aug 02, 2024Ravie LakshmananCyber Espionage / Malware A Taiwanese government-affiliated research institute that specializes in computing and associated technologies was breached by nation-state threat actors…
DuckDuckGo blocked in Indonesia over porn, gambling search results
Privacy-focused search engine DuckDuckGo has been blocked in Indonesia by its government after citizens reportedly complained about pornographic and online gambling content in its search…
Car For Sale – Hackers Use Fake Car Ads to Deliver Backdoor Malware
A Russian threat actor known as Fighting Ursa (also referred to as APT28, Fancy Bear, and Sofacy) has been identified in a new campaign that…
Russian ransomware criminals earn $500 million
In recent reports, our Cybersecurity Insiders have detailed how hackers have been generating revenue through cyberattacks such as ransomware. However, a new report reveals that…