Collaborate Disseminate
Microsoft has disclosed details of a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices on a victim’s network to further propagate spam emails and widen the infection pool.
The tech giant said the attacks manif… Continue reading Hackers Using Device Registration Trick to Attack Enterprises with Lateral Phishing
Taiwanese company QNAP has warned customers to secure network-attached storage (NAS) appliances and routers against a new ransomware variant called DeadBolt.
“DeadBolt has been widely targeting all NAS exposed to the Internet without any protection an… Continue reading QNAP Warns of DeadBolt Ransomware Targeting Internet-Facing NAS Devices
The notorious Lazarus Group actor has been observed mounting a new campaign that makes use of the Windows Update service to execute its malicious payload, expanding the arsenal of living-off-the-land (LotL) techniques leveraged by the APT group to fur… Continue reading North Korean Hackers Using Windows Update Service to Infect PCs with Malware
A cyberespionage group with ties to North Korea has resurfaced with a stealthier variant of its remote access trojan called Konni to attack political institutions located in Russia and South Korea.
“The authors are constantly making code improvements,… Continue reading North Korean Hackers Return with Stealthier Variant of KONNI RAT Malware
Microsoft this week revealed that it had fended off a record number of distributed denial-of-service (DDoS) attacks aimed at its customers in 2021, three of which surpassed 2.4 terabit per second (Tbps).
One of the DDoS attacks took place in November,… Continue reading Microsoft Mitigated Record-Breaking 3.47 Tbps DDoS Attack on Azure Customers
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of Banco do Brasil, Loja Integrada, Mercado Bitcoin, Mercado Livre, and Mercado Pago.
First doc… Continue reading Chaes Banking Trojan Hijacks Chrome Browser with Malicious Extensions
Researchers from the Bitdefender Mobile Threats team said they have intercepted more than 100,000 malicious SMS messages attempting to distribute Flubot malware since the beginning of December.
“Findings indicate attackers are modifying their subject … Continue reading Widespread FluBot and TeaBot Malware Campaigns Targeting Android Devices
A new, sophisticated phishing attack has been observed delivering the AsyncRAT trojan as part of a malware campaign that’s believed to have commenced in September 2021.
“Through a simple email phishing tactic with an HTML attachment, threat attackers … Continue reading Hackers Using New Evasive Technique to Deliver AsyncRAT Malware
Apple on Wednesday released iOS 15.3 and macOS Monterey 12.2 with a fix for the privacy-defeating bug in Safari, as well as to contain a zero-day flaw, which it said has been exploited in the wild to break into its devices.
Tracked as CVE-2022-22587, … Continue reading Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability
An initial access broker group tracked as Prophet Spider has been linked to a set of malicious activities that exploits the Log4Shell vulnerability in unpatched VMware Horizon Servers.
According to new research published by BlackBerry Research & I… Continue reading Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon Servers