Collaborate Disseminate
Malicious actors took advantage of a smart contract upgrade process in the OpenSea NFT marketplace to carry out a phishing attack against 17 of its users that resulted in the theft of virtual assets worth about $1.7 million.
NFTs, short for non-fungib… Continue reading Hackers Stole $1.7 Million Worth of NFTs from Users of OpenSea Marketplace
An advanced persistent threat (APT) group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on Taiwan’s financial sector.
The attacks are said to have first commenced at the end of Novemb… Continue reading Chinese Hackers Target Taiwan’s Financial Trading Sector with Supply Chain Attack
Vulnerable internet-facing Microsoft SQL (MS SQL) Servers are being targeted by threat actors as part of a new campaign to deploy the Cobalt Strike adversary simulation tool on compromised hosts.
“Attacks that target MS SQL servers include attacks to … Continue reading Hackers Backdoor Unpatched Microsoft SQL Database Servers with Cobalt Strike
A new Android banking trojan with over 50,000 installations has been observed distributed via the official Google Play Store with the goal of targeting 56 European banks and carrying out harvesting sensitive information from compromised devices.
Dubbe… Continue reading New Android Banking Trojan Spreading via Google Play Store Targets Europeans
An analysis of SMS phone-verified account (PVA) services has led to the discovery of a rogue platform built atop a botnet involving thousands of infected Android phones, once again underscoring the flaws with relying on SMS for account validation.
SMS… Continue reading Hackers Exploiting Infected Android Devices to Register Disposable Accounts
An investigation into the cyberattack targeting Iranian national media corporation, Islamic Republic of Iran Broadcasting (IRIB), in late January 2022 revealed the deployment of a wiper malware and other custom implants, as the country’s national infr… Continue reading Iranian State Broadcaster IRIB Hit by Destructive Wiper Malware
Researchers have detailed what they call the “first successful attempt” at decrypting data infected with Hive ransomware without relying on the private key used to lock access to the content.
“We were able to recover the master key for generating the … Continue reading Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm
The U.S. Department of Justice (DoJ) earlier this week appointed Eun Young Choi to serve as the first Director of the National Cryptocurrency Enforcement Team (NCET) it established last year.
The NCET was created to tackle the criminal misuse of crypt… Continue reading Justice Department Appoints First Director of National Cryptocurrency Enforcement Team
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday published a repository of free tools and services to enable organizations to mitigate, detect, and respond effectively to malicious attacks and further improve their security p… Continue reading U.S. Cybersecurity Agency Publishes List of Free Security Tools and Services
Patches have been issued to contain a “severe” security vulnerability in UpdraftPlus, a WordPress plugin with over three million installations, that can be weaponized to download the site’s private data using an account on the vulnerable sites.
“All v… Continue reading Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites