Collaborate Disseminate
Commercially developed FinFisher surveillanceware has been upgraded to infect Windows devices using a UEFI (Unified Extensible Firmware Interface) bootkit that leverages a trojanized Windows Boot Manager, marking a shift in infection vectors that allow… Continue reading New FinSpy Malware Variant Infects Windows Systems With UEFI Bootkit
Opportunistic threat actors have been found actively exploiting a recently disclosed critical security flaw in Atlassian Confluence deployments across Windows and Linux to deploy web shells that result in the execution of crypto miners on compromised s… Continue reading Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns
A new advanced trojan sold on Russian-speaking underground forums comes with capabilities to steal users’ accounts on popular online video game distribution services, including Steam, Epic Games Store, and EA Origin, underscoring a growing threat to th… Continue reading New BloodyStealer Trojan Steals Gamers’ Epic Games and Steam Accounts
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads and steal sensitive information from Active Directory Federation Services (AD FS) servers.
The… Continue reading Microsoft Warns of FoggyWeb Malware Targeting Active Directory FS Servers
State-sponsored hackers affiliated with Russia are behind a new series of intrusions using a previously undocumented implant to compromise systems in the U.S., Germany, and Afghanistan.
Cisco Talos attributed the attacks to the Turla advanced persisten… Continue reading Russian Turla APT Group Deploying New Backdoor on Targeted Systems
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan called ERMAC that targets Poland and has its roots in the infamous Cerberus malware, according to the latest research.
“The new trojan already has ac… Continue reading New Android Malware Steals Financial Data from 378 Banking and Wallet Apps
Cybersecurity researchers have charted the evolution of Jupyter, a .NET infostealer known for singling out healthcare and education sectors, which make it exceptional at defeating most endpoint security scanning solutions.
The new delivery chain, spott… Continue reading A New Jupyter Malware Version is Being Distributed via MSI Installers
Google on Friday rolled out an emergency security patch to its Chrome web browser to address a security flaw that’s known to have an exploit in the wild.
Tracked as CVE-2021-37973, the vulnerability has been described as use after free in Portals API, … Continue reading Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability
Network security company SonicWall has addressed a critical security vulnerability affecting its Secure Mobile Access (SMA) 100 series appliances that can permit remote, unauthenticated attackers to gain administrator access on targeted devices remotel… Continue reading SonicWall Issues Patches for a New Critical Flaw in SMA 100 Series Devices
A new advanced persistent threat (APT) has been behind a string of attacks against hotels across the world, along with governments, international organizations, engineering companies, and law firms.
Slovak cybersecurity firm ESET codenamed the cyber es… Continue reading A New APT Hacker Group Spying On Hotels and Governments Worldwide