Collaborate Disseminate
A new malware campaign targeting Afghanistan and India is exploiting a now-patched, 20-year-old flaw affecting Microsoft Office to deploy an array of commodity remote access trojans (RATs) that allow the adversary to gain complete control over the comp… Continue reading ‘Lone Wolf’ Hacker Group Targeting Afghanistan and India with Commodity RATs
The financially motivated FIN7 cybercrime gang has masqueraded as yet another fictitious cybersecurity company called “Bastion Secure” to recruit unwitting software engineers under the guise of penetration testing in a likely lead-up to a ransomware sc… Continue reading Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks
A newly identified rootkit has been found with a valid digital signature issued by Microsoft that’s used to proxy traffic to internet addresses of interest to the attackers for over a year targeting online gamers in China.
Bucharest-headquartered cyber… Continue reading Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild
A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbitrary code on targeted systems, underscoring how vulnerabilities in such software could beсome… Continue reading Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer
Three JavaScript libraries uploaded to the official NPM package repository have been unmasked as crypto-mining malware, once again demonstrating how open-source software package repositories are becoming a lucrative target for executing an array of att… Continue reading Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices
The U.S. Commerce Department on Wednesday announced new rules barring the sales of hacking software and equipment to authoritarian regimes and potentially facilitate human rights abuse for national security (NS) and anti-terrorism (AT) reasons.
The man… Continue reading U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes
Since at least late 2019, a network of hackers-for-hire have been hijacking the channels of YouTube creators, luring them with bogus collaboration opportunities to broadcast cryptocurrency scams or sell the accounts to the highest bidder.
That’s accord… Continue reading Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts
Two Eastern European nationals have been sentenced in the U.S. for offering “bulletproof hosting” services to cybercriminals, who used the technical infrastructure to distribute malware and attack financial institutions across the country between 2009 … Continue reading Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals
A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems.
The vulnerability (CVE-2021-0186, CVSS score: 8… Continue reading Researchers Break Intel SGX With New ‘SmashEx’ CPU Attack Technique
A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting “highly specific information” from mobile communication infrastructure, such as subscriber info… Continue reading LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019