Collaborate Disseminate
The threat group known as TA410 that wields the sophisticated FlowCloud RAT actually has three subgroups operating globally, each with their own toolsets and targets. Continue reading Cyberespionage APT Now Identified as Three Separate Actors
At least five APTs are believed involved with attacks tied ground campaigns and designed to damage Ukraine’s digital infrastructure. Continue reading Cyberattacks Rage in Ukraine, Support Military Operations
Four months after the critical flaw was discovered, attackers have a massive attack surface from which they can exploit the flaw and take over systems, researchers found. Continue reading Millions of Java Apps Remain Vulnerable to Log4Shell
A campaign by APT37 used a sophisticated malware to steal information about sources , which appears to be a successor to Bluelight. Continue reading Nation-state Hackers Target Journalists with Goldbackdoor Malware
Connections that show the cybercriminal teams are working together signal shifts in their respective tactics and an expansion of opportunities to target victims. Continue reading Karakurt Ensnares Conti, Diavol Ransomware Groups in Its Web
Threat actors have developed custom modules to compromise various ICS devices as well as Windows workstations that pose an imminent threat, particularly to energy providers. Continue reading Feds: APTs Have Tools That Can Take Over Critical Infrastructure
The DoJ is charging its founder, 21-year-old Portuguese citizen Diogo Santos Coelho, on six criminal counts, including conspiracy, access device fraud and aggravated identity theft. Continue reading Feds Shut Down RaidForums Hacking Marketplace
Accounting materials from the Italy-based luxury fashion house were leaked online by RansomExx because the company refused to pay. Continue reading Menswear Brand Zegna Reveals Ransomware Attack
Google removed six different malicious Android applications targeting mainly users in the U.K. and Italy that were installed about 15,000 times. Continue reading Google Play Bitten by Sharkbot Info-stealer ‘AV Solution’
Researchers discovered the vulnerability in an API already integrated into many bank systems, which could have defrauded millions of users by giving attackers access to their funds. Continue reading SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts