Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure

North Korean state-sponsored hackers Lazarus Group have been exploiting a ManageEngine ServiceDesk vulnerability (CVE-2022-47966) to target internet backbone infrastructure and healthcare institutions in Europe and the US. The group leveraged the vulne… Continue reading Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure

Cloud hosting firms hit by devastating ransomware attack

Danish cloud hosting firms CloudNordic and Azero – both owned by Certiqa Holding – have suffered a ransomware attack that resulted in most customer data being stolen and systems and servers rendered inaccessible. The CloudNordic and Azero r… Continue reading Cloud hosting firms hit by devastating ransomware attack

Ötzi the Iceman doesn’t look like museum displays, says new genomic study

Ötzi the Iceman is one of the most well-studied individuals in human history, but there always seems to be more to learn about him. A new genomic study has now found that he didn’t look the way previous studies had imagined him – instead he was bald, h… Continue reading Ötzi the Iceman doesn’t look like museum displays, says new genomic study

Zimbra users in Europe, Latin America face phishing threat

ESET researchers have uncovered a mass-spreading phishing campaign aimed at collecting Zimbra account users’ credentials. Zimbra Collaboration is an open-core collaborative software platform, a popular alternative to enterprise email solutions. About t… Continue reading Zimbra users in Europe, Latin America face phishing threat

SpyNote Spyware Returns with SMS Phishing Against Banking Customers

By Habiba Rashid
In its recent attack campaign, SpyNote Spyware is sending victims fake SMS messages urging them to install a new certified banking app.
This is a post from HackRead.com Read the original post: SpyNote Spyware Returns with SMS Phishing … Continue reading SpyNote Spyware Returns with SMS Phishing Against Banking Customers

Chinese hackers forged authentication tokens to breach government emails

Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing key, the company has revealed on Tuesday. “The threat … Continue reading Chinese hackers forged authentication tokens to breach government emails

SmugX: Chinese Hackers Targeting Embassies in Europe

By Deeba Ahmed
The researchers believe that the SmugX attack is an extension of a previously discovered campaign linked to Mustang Panda.
This is a post from HackRead.com Read the original post: SmugX: Chinese Hackers Targeting Embassies in Europe
Continue reading SmugX: Chinese Hackers Targeting Embassies in Europe