Chinese APT Debuts Sepulcher Malware in Spear-Phishing Attacks

The RAT has been distributed in various campaigns over the past six months, targeting both European officials and Tibetan dissidents. Continue reading Chinese APT Debuts Sepulcher Malware in Spear-Phishing Attacks

Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws

Two flaws – one of them yet to be fixed – are afflicting a third-party plugin used by Magento e-commerce websites. Continue reading Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws

FBI: Ring Smart Doorbells Could Sabotage Cops

While privacy advocates have warned against Ring’s partnerships with police, newly unearthed documents reveal FBI concerns about ‘new challenges’ smart doorbell footage could create for cops. Continue reading FBI: Ring Smart Doorbells Could Sabotage Cops

Apple Accidentally Notarizes Shlayer Malware Used in Adware Campaign

The notarized malware payloads were discovered in a recent MacOS adware campaign, disguised as Adobe Flash Player updates. Continue reading Apple Accidentally Notarizes Shlayer Malware Used in Adware Campaign

Magecart’s Success Paves Way For Cybercriminal Credit Card ‘Sniffer’ Market

Magecart’s successes have led to threat actors actively advertising ‘sniffers’ that can be injected into e-commerce websites in order to exfiltrate payment cards. Continue reading Magecart’s Success Paves Way For Cybercriminal Credit Card ‘Sniffer’ Market