Collaborate Disseminate
Researchers have unearthed a new remote access trojan (RAT) for Linux that employs a never-before-seen stealth technique that involves masking its malicious actions by scheduling them for execution on February 31st, a non-existent calendar day.
Dubbed… Continue reading CronRAT: A New Linux Malware That’s Scheduled to Run on February 31st
Israel’s Ministry of Defense has dramatically restricted the number of countries to which cybersecurity firms in the country are allowed to sell offensive hacking and surveillance tools to, cutting off 65 nations from the export list.
The revised list… Continue reading Israel Bans Sales of Hacking and Surveillance Tools to 65 Countries
Threat actors have been found using a previously undocumented JavaScript malware strain that functions as a loader to distribute an array of remote access Trojans (RATs) and information stealers.
HP Threat Research dubbed the new, evasive loader “RATD… Continue reading This New Stealthy JavaScript Loader Infecting Computers with Malware
A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a new PowerShell-based information stealer designed to harvest extensive details fro… Continue reading Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware
Attackers are actively making efforts to exploit a new variant of a recently disclosed privilege escalation vulnerability to potentially execute arbitrary code on fully-patched systems, once again demonstrating how adversaries move quickly to weaponiz… Continue reading Warning — Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain access to sensitive information.
The more severe of the issues concerns an arbitrary file read … Continue reading VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
Multiple security weaknesses have been disclosed in MediaTek system-on-chips (SoCs) that could have enabled a threat actor to elevate privileges and execute arbitrary code in the firmware of the audio processor, effectively allowing the attackers to c… Continue reading Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally
Apple has sued NSO Group and its parent company Q Cyber Technologies in a U.S. federal court holding it accountable for illegally targeting users with its Pegasus surveillance tool, marking yet another setback for the Israeli spyware vendor.
The Cuper… Continue reading Apple Sues Israel’s NSO Group for Spying on iPhone Users With Pegasus Spyware
A threat actor known for striking targets in the Middle East has evolved its Android spyware yet again with enhanced capabilities that allow it to be stealthier and more persistent while passing off as seemingly innocuous app updates to stay under the… Continue reading APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users
At least 9.3 million Android devices have been infected by a new class of malware that disguises itself as dozens of arcade, shooter, and strategy games on Huawei’s AppGallery marketplace to steal device information and victims’ mobile phone numbers.
… Continue reading Over 9 Million Android Phones Running Malware Apps from Huawei’s AppGallery