Collaborate Disseminate
The platform’s Content Delivery Network and core features are being used to send malicious files—including RATs–across its network of 150 million users, putting corporate workplaces at risk. Continue reading Threat Actors Abuse Discord to Push Malware
Chicago-based Ferrara acknowledged an Oct. 9 attack that encrypted some systems and disrupted production. Continue reading Ransomware Sinks Teeth into Candy-Corn Maker Ahead of Halloween
Disguised as an IT firm, the APT is hitting targets in Afghanistan & India, exploiting a 20-year-old+ Microsoft Office bug that’s as potent as it is ancient. Continue reading Geriatric Microsoft Bug Exploited by APT Using Commodity RATs
An advisory by the CISA, FBI and NSA reveals hallmark tactics of and shares defense tips against the cybercriminal group that’s picked up where its predecessor DarkSide left off. Continue reading Feds Warn BlackMatter Ransomware Gang is Poised to Strike
First appearing in March, the group has been leveraging ProxyShell against targets in 10 countries and employs a variety of malware to steal data from compromised networks. Continue reading New APT ChamelGang Targets Russian Energy, Aviation Orgs
Certificate misconfigurations of the EAP protocol in Eduroam (and likely other networks globally) threaten Android and Windows users. Continue reading Thousands of University Wi-Fi Networks Expose Log-In Credentials
A campaign is stealing one-time password tokens to gain access to PayPal, Apple Pay and Google Pay, among others. Continue reading Threat Actors Weaponize Telegram Bots to Compromise PayPal Accounts
Microsoft is warning that the Nobelium APT is compromising single-sign-on servers to install a post-exploitation backdoor that steals data and maintains network persistence. Continue reading SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor
One of the bugs, which affects macOS as well as older versions of iPhones, could allow an attacker to execute arbitrary code with kernel privileges. Continue reading Apple Patches 3 More Zero-Days Under Active Attack
Discovery of BulletProofLink—which provides phishing kits, email templates, hosting and other tools—sheds light on how wannabe cybercriminals can get into the business. Continue reading Large-Scale Phishing-as-a-Service Operation Exposed