Collaborate Disseminate
A never-before-seen remote access trojan dubbed ZuoRAT has been singling out small office/home office (SOHO) routers as part of a sophisticated campaign targeting North American and European networks.
The malware “grants the actor the ability to pivot… Continue reading ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks
Entities located in Afghanistan, Malaysia, and Pakistan are in the crosshairs of an attack campaign that targets unpatched Microsoft Exchange Servers as an initial access vector to deploy the ShadowPad malware.
Russian cybersecurity firm Kaspersky, wh… Continue reading APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor
The latest version of the OpenSSL library has been discovered as susceptible to a remote memory-corruption vulnerability on select systems.
The issue has been identified in OpenSSL version 3.0.4, which was released on June 21, 2022, and impacts x64 sy… Continue reading OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability
A previously unknown Android banking trojan has been discovered in the wild, targeting users of the Spanish financial services company BBVA.
Said to be in its early stages of development, the malware — dubbed Revive by Italian cybersecurity firm Cleaf… Continue reading New Android Banking Trojan ‘Revive’ Targeting Users of Spanish Financial Services
The Black Basta ransomware-as-a-service (RaaS) syndicate has amassed nearly 50 victims in the U.S., Canada, the U.K., Australia, and New Zealand within two months of its emergence in the wild, making it a prominent threat in a short window.
“Black Bas… Continue reading Cybersecurity Experts Warn of Emerging Threat of “Black Basta” Ransomware
CODESYS has released patches to address as many as 11 security flaws that, if successfully exploited, could result in information disclosure and a denial-of-service (DoS) condition, among others.
“These vulnerabilities are simple to exploit, and they… Continue reading Critical Security Flaws Identified in CODESYS ICS Automation Software
Following the footsteps of Austria and France, the Italian Data Protection Authority has become the latest regulator to find the use of Google Analytics to be non-compliant with E.U. data protection regulations.
The Garante per la Protezione dei Dati … Continue reading Italy Data Protection Authority Warns Websites Against Use of Google Analytics
A malware-as-a-service (Maas) dubbed Matanbuchus has been observed spreading through phishing campaigns, ultimately dropping the Cobalt Strike post-exploitation framework on compromised machines.
Matanbuchus, like other malware loaders such as BazarLo… Continue reading Researchers Warn of ‘Matanbuchus’ Malware Campaign Dropping Cobalt Strike Beacons
A suspected ransomware intrusion attempt against an unnamed target leveraged a Mitel VoIP appliance as an entry point to achieve remote code execution and gain initial access to the environment.
The findings come from cybersecurity firm CrowdStrike, w… Continue reading Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack
A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices.
Additionally, necessary changes have been implemented… Continue reading Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware