Collaborate Disseminate
A modified version of the WhatsApp messaging app for Android has been trojanized to intercept text messages, serve malicious payloads, display full-screen ads, and sign up device owners for unwanted premium subscriptions without their knowledge.
“The T… Continue reading Modified Version of WhatsApp for Android Spotted Installing Triada Trojan
A previously undisclosed “zero-click” exploit in Apple’s iMessage was abused by Israeli surveillance vendor NSO Group to circumvent iOS security protections and target nine Bahraini activists.
“The hacked activists included three members of Waad (a sec… Continue reading Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group
Cybersecurity researchers on Tuesday took the wraps off four up-and-coming ransomware groups that could pose a serious threat to enterprises and critical infrastructure, as the ripple effect of a recent spurt in ransomware incidents show that attackers… Continue reading Researchers Warn of 4 Emerging Ransomware Groups That Can Cause Havoc
More than 38 million records from 47 different entities that rely on Microsoft’s Power Apps portals platform were inadvertently left exposed online, bringing into sharp focus a “new vector of data exposure.”
“The types of data varied between portals, i… Continue reading 38 Million Records Exposed from Microsoft Power Apps of Dozens of Organisations
ShinyHunters, a notorious cybercriminal underground group that’s been on a data breach spree since last year, has been observed searching companies’ GitHub repository source code for vulnerabilities that can be abused to stage larger scale attacks, an … Continue reading Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group
Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could result in the deployment of malicious web shells, coin miners, ransomware, and other trojans.
Tha… Continue reading Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems
The U.S. Cybersecurity and Infrastructure Security Agency is warning of active exploitation attempts that leverage the latest line of “ProxyShell” Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ranso… Continue reading WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service (DDoS) attack recorded to date.
The attack, launched via a Mirai botnet, is said to have target… Continue reading Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps
ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017.
“The adoption of ShadowPad significantly reduces the costs of d… Continue reading ShadowPad Malware is Becoming a Favorite Choice of Chinese Espionage Groups
A Nigerian threat actor has been observed attempting to recruit employees by offering them to pay $1 million in bitcoins to deploy Black Kingdom ransomware on companies’ networks as part of an insider threat scheme.
“The sender tells the employee that … Continue reading Cybercrime Group Asking Insiders for Help in Planting Ransomware