Collaborate Disseminate
Bitcoin ATM manufacturer General Bytes confirmed that it was a victim of a cyberattack that exploited a previously unknown flaw in its software to plunder cryptocurrency from its users.
“The attacker was able to create an admin user remotely via CAS a… Continue reading Hackers Stole Crypto from Bitcoin ATMs by Exploiting Zero-Day Vulnerability
Organizations in the Spanish-speaking nations of Mexico and Spain are in the crosshairs of a new campaign designed to deliver the Grandoreiro banking trojan.
“In this campaign, the threat actors impersonate government officials from the Attorney Gene… Continue reading New Grandoreiro Banking Malware Campaign Targeting Spanish Manufacturers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday moved to add a critical SAP security flaw to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
The issue in question is CVE-2022-22536, w… Continue reading CISA Adds 7 New Actively Exploited Vulnerabilities to Catalog
The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers.
The improvements also include a n… Continue reading DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities
A financially motivated cybercrime group has been linked to an ongoing wave of attacks aimed at hospitality, hotel, and travel organizations in Latin America with the goal of installing malware on compromised systems.
Enterprise security firm Proofpoi… Continue reading Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations
Google’s cloud division on Thursday disclosed it mitigated a series of HTTPS distributed denial-of-service (DDoS) attacks which peaked at 46 million requests per second (RPS), making it the largest such recorded to date.
The attack, which occurred on … Continue reading Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second
Retail giant Amazon patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on a user’s device to access sensitive information and camera recordings.
The Ring app for Android has … Continue reading New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings
A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads like Cobalt Strike and Metasploit, likely since 2015.
“It can also deliver ‘add-on packages’ s… Continue reading Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware
The Chinese advanced persistent threat (APT) actor tracked as Winnti has targeted at least 13 organizations geographically spanning across the U.S, Taiwan, India, Vietnam, and China against the backdrop of four different campaigns in 2021.
“The target… Continue reading China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year
The malware loader known as Bumblebee is being increasingly co-opted by threat actors associated with BazarLoader, TrickBot, and IcedID in their campaigns to breach target networks for post-exploitation activities.
“Bumblebee operators conduct intensi… Continue reading Hackers Using Bumblebee Loader to Compromise Active Directory Services