SHEETCREEP C# RAT Abuses Google Sheets API as C2 to Target Diplomatic Organizations
A newly identified remote access trojan named SHEETCREEP is making headlines for its clever use of Google Sheets as a hidden communication channel between attackers…
Author: Cybernoz
Cybersecurity Improved Detection But Exposed a New Problem
For many years cybersecurity has focused on improving detection. New tools promise deeper visibility, faster response, and stronger protection. Organisations have invested heavily in platforms…
Hackers Abuse NinjaOne RMM Agent to Gain Remote Access to Brazilian Organizations
An active phishing campaign that weaponizes a legitimate NinjaOne Remote Monitoring and Management (RMM) agent to gain persistent remote access to Brazilian organizations. Rather than…
Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case
A major international operation has led to the complete shutdown of a cryptocurrency laundering service, AudiA6, and the arrest of its operators in Batumi, Georgia.…
Cybercriminals are moving away from mass phishing campaigns
Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that…
Fake verification pages are stealing Steam accounts from players
Online gamers should watch out for a convincing scam that aims to steal your Steam account. The scam uses fake FACEIT verification pages that look…
Rethinking MDR as Attackers and Defenders Embrace AI
For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn’t staff around the clock, couldn’t…
ING increases use of AI in mortgage application process
Dutch bank ING is removing laborious manual processing for mortgage applications through an increased use of its latest artificial intelligence (AI) agent. The bank is…
Thai Gambling SEO Poisoning Hits 163 Organizations Globally
A large-scale Thai gambling SEO poisoning operation has compromised 163 organizations across more than 30 countries by exploiting abandoned cloud DNS delegations, according to research from Cyble Research &…
FIFA World Cup 2026 Scams: Fake Domains Target Fans
The FIFA World Cup 2026 may not kick off until June 11, 2026, but cybercriminals have already begun exploiting anticipation surrounding the tournament. Security researchers…
Federal Parliamentary Computer Network set for its “most significant” upgrade
The federal Parliamentary Computer Network (PCN) will receive its “most significant” upgrade since being built, targeting improvements in information security and cyber resilience. The Department…
Ivanti Sentry Exploitation Attempts Hitting Honeypots
The US Cybersecurity and Infrastructure Security Agency (CISA) flagged a recently patched Ivanti Sentry vulnerability as exploited, but Ivanti says the activity was observed only…