Collaborate Disseminate
Researchers have exposed the work of Exotic Lily, a full-time cybercriminal initial-access group that uses phishing to infiltrate organizations’ networks for further malicious activity. Continue reading Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops
Five percent of the databases are vulnerable to threat actors: It’s a gold mine of exploit opportunity in thousands of mobile apps, researchers say.
Continue reading Misconfigured Firebase Databases Exposing Data in Mobile Apps
CaddyWiper is one in a barrage of data-wiping cyber-attacks to hit the country since January as the war on the ground with Russia marches on. Continue reading Another Destructive Wiper Targets Organizations in Ukraine
Denso confirmed that cybercriminals leaked stolen, classified information from the Japan-based car-components manufacturer after an attack on one of its offices in Germany.
Continue reading Pandora Ransomware Hits Giant Automotive Supplier Denso
The credential-stealing trash panda is using the chat app to store and update C2 addresses as crooks find creative new ways to distribute the malware.
Continue reading Raccoon Stealer Crawls Into Telegram
FinCEN warns financial institutions to beware of unusual cryptocurrency payments or illegal transactions Russia may use to evade restrictions imposed due to its invasion of Ukraine.
Continue reading Russia May Use Ransomware Payouts to Avoid Sanctions
Also on the rise: DDoS attacks against Ukrainian sites and phishing activity capitalizing on the conflict, with China’s Mustang Panda targeting Europe.
Continue reading Russian APTs Furiously Phish Ukraine – Google
The ‘TLStorm’ vulnerabilities, found in APC Smart-UPS products, could allow attackers to cause both cyber and physical damage by taking down critical infrastructure. Continue reading Zero-Click Flaws in Widely Used UPS Devices Threaten Critical Infratructure
Researchers said a Jan. 27 attack that aired footage of opposition leaders calling for assassination of Iran’s Supreme Leader was a clumsy and unsophisticated wiper attack. Continue reading Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code
Threat actors are infiltrating the increasingly popular collaboration app to attach malicious files to chat threads that drop system-hijacking malware.
Continue reading Microsoft Teams Targeted With Takeover Trojans