GitHub comments abused to push password stealing malware masked as fixes
GitHub is being abused to distribute the Lumma Stealer information-stealing malware as fake fixes posted in project comments. The campaign was first reported by a…
Author: Cybernoz
The Evolution of Device Recognition to Attack Fraud at-Scale
Fraud prevention today is like a game of whack-a-mole. When one fraudster or attack method is stamped out, another arises to take its place. Similarly,…
Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCE
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)SonicWall has patched…
North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit
North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit Pierluigi Paganini August 31, 2024 North Korea-linked APT exploited the recently patched Google…
North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit
Aug 31, 2024Ravie LakshmananRootkit / Threat Intelligence A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day…
‘Time-Travelling’ Software Could Bankrupt Hackers
31 Aug ‘Time-Travelling’ Software Could Bankrupt Hackers Posted at 09:46h in Blogs by Di Freeze This week in cybersecurity from the editors at Cybercrime Magazine…
Black Basta Cybersecurity Advisory: Endpoint Protection for Healthcare
Recent studies have estimated that as many as 90% of successful cyberattacks and 70% of data breaches originate at the endpoint. This growing issue is especially…
New Voldemort Malware Uses Google Sheets to Target Key Sectors Globally
The Voldemort Malware campaign is spreading globally with over 20,000 phishing emails to more than 70 organizations, with a peak of 6,000 emails sent in…
Taylor Swift Concert Terror Plot Was Thwarted by Key CIA Tip
Pavel Durov, the founder and CEO of the communication app Telegram, was arrested in France on Saturday as part of an investigation into his and…
City Of Columbus Secures Restraining Order Over Breach Data
The city of Columbus has obtained a temporary restraining order against cybersecurity expert David L. Ross Jr., also known as Connor Goodwolf, in a bid…
Researchers Track ManticoraLoader Malware To Ares Developer
ManticoraLoader, a new malware-as-a-service (MaaS), was observed on the cybercriminal XSS forum being distributed by ‘DarkBLUP,’ an alias that was previously used to distribute malware…
Former Polish Official Charged With Misuse Of Funds To Buy Pegasus Spyware
From refusing to cooperate with spyware abuse investigations to cracking down on its blatant misuse, Poland has come a full circle. The Polish prosecutor’s office…