Sitting Ducks DNS Attack Hijacked 35k Domains
Threat actors have been exploiting the attack vector known as Sitting Ducks since at least 2019 to conduct malware delivery, phishing, brand impersonation, and data…
Category: CyberSecurityNews
SLUBStick Linux Vulnerability Let Attackers Gain Full System Control
Security researchers have discovered a severe vulnerability in the Linux kernel that could allow attackers to gain full control over affected systems. Dubbed “SLUBStick,” the…
UNC4393 Actors Behind BASTA Ransomware Exploited via Partnerships
In mid-2022, Mandiant’s Managed Defense first uncovered UNC4393, the primary user of BASTA ransomware. This financially motivated threat cluster has attacked over 40 business entities…
Car For Sale – Hackers Use Fake Car Ads to Deliver Backdoor Malware
A Russian threat actor known as Fighting Ursa (also referred to as APT28, Fancy Bear, and Sofacy) has been identified in a new campaign that…
Fake Google Authenticator Sites Spreading DeerStealer Malware
Researchers from ANY RUN identified a malware distribution campaign dubbed DeerStealer that leverages deceptive websites masquerading as legitimate Google Authenticator download pages. The initial discovered…
Tricky OneDrive Phishing Campaign Tricks Users To Execute PowerShell Script
A sophisticated phishing campaign targets Microsoft OneDrive users, employing social engineering to trick victims into executing malicious PowerShell scripts. The attack leverages a false sense…
Leading Silver Producer Fresnillo PLC Suffer Cyberattack
Fresnillo PLC, the world’s largest primary silver producer, and Mexico’s largest gold producer has announced that it has been the target of a significant cybersecurity…
DEV#POPPER Attacking developers via New Social Engineering Tactics
Threat actors masquerade as interviewers and send a ZIP file (onlinestoreforhirog.zip) to candidates as part of a fake interview, which contains legitimate files and a…
Threat Actors Exploiting ChatGPT’s Sora AI Excitement To Deliver Malware
Threat actors exploit AI to make their attacks more effective through automation, scanning large data sets for security gaps and creating intricate phishing scams that…
New widespread phishing campaign Attacking Users With malware
Phishing campaigns intensified in May 2024, with Poland bearing the brunt of attacks, accounting for 80% of over 26,000 protected users, as Italy and Romania…
Hackers Abuse TryCloudflare Service To Bypass Detection & Deliver Malware
Cybercriminals increasingly leverage the TryCloudflare Tunnel to deliver Remote Access Trojans (RATs) in financially motivated attacks. TryCloudflare is a tool for developers to experiment with…
Microsoft Edge Vulnerability Let Attackers Execute Arbitrary Code
Microsoft has released a critical security update for its Edge browser to address multiple vulnerabilities, including a severe validation flaw that could allow attackers to…