Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution
Apr 19, 2023Ravie LakshmananSandbox / Software Security A fresh round of patches has been made available for the vm2 JavaScript library to address two critical…
Category: TheHackerNews
YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader
Apr 18, 2023Ravie LakshmananThreat Intelligence / Cyber Risk Cybersecurity researchers have detailed the inner workings of a highly evasive loader named “in2al5d p3in4er” (read: invalid…
Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads
Apr 18, 2023Ravie LakshmananMobile Security / Hacking A new Android malware strain named Goldoson has been detected in the official Google Play Store spanning more…
Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access
Apr 18, 2023Ravie LakshmananCyber Threat / Malware The Iranian threat actor known as MuddyWater is continuing its time-tested tradition of relying on legitimate remote administration…
LockBit Ransomware Now Targeting Apple macOS Devices
Apr 18, 2023Ravie LakshmananEncryption / Malware Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple’s…
New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware
Apr 17, 2023Ravie LakshmananFinancial Security / Malware A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware,…
Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose
Apr 17, 2023Ravie LakshmananSurveillance / Privacy Israeli spyware vendor QuaDream is allegedly shutting down its operations in the coming days, less than a week after…
What’s the Difference Between CSPM & SSPM?
Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) are frequently confused. The similarity of the acronyms notwithstanding, both security solutions focus on…
FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks
Apr 17, 2023Ravie Lakshmanan A new strain of malware developed by threat actors likely affiliated with the FIN7 cybercrime group has been put to use…
Master the Art of Dark Web Intelligence Gathering
Apr 17, 2023The Hacker NewsCybersecurity / Webinar The Deep, Dark Web – The Underground – is a haven for cybercriminals, teeming with tools and resources…
Google Uncovers APT41’s Use of Open Source GC2 Tool to Target Media and Job Sites
Apr 17, 2023Ravie LakshmananCyber Threat / Cloud Security A Chinese nation-state group targeted an unnamed Taiwanese media organization to deliver an open source red teaming…
Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration
Apr 17, 2023Ravie LakshmananRansomware / Cyber Attack Threat actors associated with the Vice Society ransomware gang have been observed using a bespoke PowerShell-based tool to…