Collaborate Disseminate
APT attackers are using a security vulnerability in ManageEngine Desktop Central to take over servers, deliver malware and establish network persistence. Continue reading FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
The incident occurred last weekend at the popular chain of restaurants, hotels and breweries, which is still facing disruptions.
Continue reading Conti Gang Suspected of Ransomware Attack on McMenamins
The new tool manipulates Windows Registry in unique ways to evade security detections and is likely being used by ransomware groups for initial network access.
Continue reading ‘DarkWatchman’ RAT Shows Evolution in Fileless Malware
Not only is the jaw-dropping flaw in the Apache Log4j logging library ubiquitous; Apache’s blanket of a quickly baked patch for Log4Shell also has holes.
Continue reading Apache’s Fix for Log4Shell Can Lead to DoS Attacks
The focused attacks aimed at cyberespionage and lateral movement appear to hint at further ambitions by the group, including supply-chain threats. Continue reading ‘Seedworm’ Attackers Target Telcos in Asia, Middle East
The threat group, first identified in June, focuses solely on data exfiltration and subsequent extortion, and has already targeted 40 victims since September. Continue reading ‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware
The powerful devices leveraged by the Meris botnet have weaknesses that make them easy to exploit, yet complex for organizations to track and secure, researchers said. Continue reading How MikroTik Routers Became a Cybercriminal Target
The botnet, which resurfaced last month on the back of TrickBot, can now directly install Cobalt Strike on infected devices, giving threat actors direct access to targets.
Continue reading Emotet’s Behavior & Spread Are Omens of Ransomware Attacks
One year after the disruptive supply-chain attacks, researchers have observed two new clusters of activity from the Russia-based actors that signal a significant threat may be brewing.
Continue reading SolarWinds Attackers Spotted Using New Tactics, Malware
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio. Continue reading Threat Group Takes Aim Again at Cloud Platform Provider Zoho