Collaborate Disseminate
A months-long cyber espionage campaign undertaken by a Chinese nation-state group targeted several entities with reconnaissance malware so as to glean information about its victims and meet its strategic goals.
“The targets of this recent campaign spa… Continue reading Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks
As many as three disparate but related campaigns between March and Jun 2022 have been found to deliver a variety of malware, including ModernLoader, RedLine Stealer, and cryptocurrency miners onto compromised systems.
“The actors use PowerShell, .NET … Continue reading Hackers Use ModernLoader to Infect Systems with Stealers and Cryptominers
Akasa Air, India’s newest commercial airline, exposed the personal data belonging to its customers that the company blamed on a technical configuration error.
According to security researcher Ashutosh Barot, the issue is rooted in the account registra… Continue reading India’s Newest Airline Akasa Air Found Leaking Passengers’ Personal Information
The U.S. Federal Bureau of Investigation (FBI) on Monday warned of cyber criminals increasingly exploiting flaws in decentralized finance (DeFi) platforms to plunder cryptocurrency.
“The FBI has observed cyber criminals exploiting vulnerabilities in t… Continue reading FBI Warns Investors to Take Precautions with Decentralized Financial Platforms
The U.S. Federal Trade Commission (FTC) on Monday said it filed a lawsuit against Kochava, a location data broker, for collecting and selling precise geolocation data gathered from consumers’ mobile devices.
The complaint alleges that the U.S. company… Continue reading FTC Sues Data Broker Over Selling Location Data for Hundreds of Millions of Phones
A new ransomware strain written in Golang dubbed “Agenda” has been spotted in the wild, targeting healthcare and education entities in Indonesia, Saudi Arabia, South Africa, and Thailand.
“Agenda can reboot systems in safe mode, attempts to stop many … Continue reading New Golang-based ‘Agenda Ransomware’ Can Be Customized For Each Victim
A Turkish-speaking entity called Nitrokod has been attributed to an active cryptocurrency mining campaign that involves impersonating a desktop application for Google Translate to infect over 111,000 victims in 11 countries since 2019.
“The malicious… Continue reading Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software
Twilio, which earlier this month became a sophisticated phishing attack, disclosed last week that the threat actors also managed to gain access to the accounts of 93 individual users of its Authy two-factor authentication (2FA) service.
The communicat… Continue reading Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, including a high-severity security flaw affecting industrial automation so… Continue reading CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
Iranian state-sponsored actors are leaving no stone unturned to exploit unpatched systems running Log4j to target Israeli entities, indicating the vulnerability’s long tail for remediation.
Microsoft attributed the latest set of activities to the umbr… Continue reading Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations