Collaborate Disseminate
AT&T is battling a modular malware called EwDoor on 5,700 VoIP servers, but it could have a larger wildcard certificate problem. Continue reading AT&T Takes Steps to Mitigate Botnet Found Inside Its Network
Attackers use socially engineered SMS messages and malware to compromise tens of thousands of devices and drain user bank accounts. Continue reading Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users
Links between the tactics and tools demonstrated in attacks suggest a former affiliate has switched loyalties, according to new research. Continue reading Yanluowang Ransomware Tied to Thieflock Threat Actor
Some security researchers say it’s actually Cobalt Strike and not a SmokeLoader variant, but BioBright says in-depth testing shows it’s for real a scary morphic malware that changes its parts and recompiles itself.
Continue reading Shape-Shifting ‘Tardigrade’ Malware Hits Vaccine Makers
Fake merchandise and crypto jacking are among the new ways cybercriminals will try to defraud people flocking online for Black Friday and Cyber Monday. Continue reading New Twists on Gift-Card Scams Flourish on Black Friday
Researcher discovered a “more powerful” variant of an elevation-of-privilege flaw for which Microsoft released a botched patch earlier this month. Continue reading Attackers Actively Target Windows Installer Zero-Day
Opportunistic attackers instantly exploited insecurely exposed services deployed in honeypots by Unit 42 researchers, demonstrating the immediate danger of these typical mistakes. Continue reading Common Cloud Misconfigurations Exploited in Minutes, Report
A hefty slice of data – that of 100K+ current and former employees – was spilled in an “external system breach,” the pizza chain said. Continue reading California Pizza Kitchen Serves Up Employee SSNs in Data Breach
Threat actors are targeting Middle-East-based employees of major corporations in a scam that uses a specific ‘ephemeral’ aspect of the project-management tool to link to SharePoint phishing pages.
Continue reading Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials
Threat actors used malicious emails to target more than 125 people with high-profile TikTok accounts in an attempt to steal info and lock them out. Continue reading Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts