Collaborate Disseminate
An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access trojan (RAT) capable of accessing files stored in compromised Windows systems, and downloading… Continue reading Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCs
Two new ransomware-as-service (RaaS) programs have appeared on the threat radar this month, with one group professing to be a successor to DarkSide and REvil, the two infamous ransomware syndicates that went off the grid following major attacks on Colo… Continue reading New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime Forums
A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud.
Dubbed “Vultur” due t… Continue reading New Android Malware Uses VNC to Spy and Steal Passwords from Victims
Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to swiftly weaponize publicly disclosed f… Continue reading Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed into an entirely new botnet as part of a renewed campaign that began in May 2021.
Italy’s CERT-A… Continue reading UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild
A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems…. Continue reading Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers
An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of a years-long social engineering and targeted malware campaig… Continue reading Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees
Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provi… Continue reading Several Bugs Found in 3 Open-Source Software Used by Several Businesses
Cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra email collaboration software that could be potentially exploited to compromise email accounts by sending a malicious message and even achieve a full takeover of the m… Continue reading New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email
Threat actors are increasingly shifting to “exotic” programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts.
“Malware authors are known … Continue reading Hackers Turning to ‘Exotic’ Programming Languages for Malware Development