Collaborate Disseminate
The ‘ModifiedElephant’ threat actors are technically unimpressive, but they’ve evaded detection for a decade, hacking human rights advocates’ systems with dusty old keyloggers and off-the-shelf RATs.
Continue reading Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
A memory issue affects myriad iPhone, iPad and MacOS devices and allows attackers to execute arbitrary code after processing malicious web content.
Continue reading Apple Patches Actively Exploited WebKit Zero Day
The attacks, which lead to 2FA defeat and account takeover, have accelerated by several hundred percent in one year, leading to thousands of drained bank accounts. Continue reading Sharp SIM-Swapping Spike Causes $68M in Losses
The now-patched flaw that led to the ForcedEntry exploit of iPhones was exploited by both NSO Group and a different, newly detailed surveillance vendor.
Continue reading QuaDream, 2nd Israeli Spyware Firm, Weaponizes iPhone Bug
The popular bridge, which connects Ethereum, Solana blockchain & more, was shelled out by it’s-not-saying. Wormhole is trying to negotiate with the attacker. Continue reading Wormhole Crypto Platform: ‘Funds Are Safe’ After $314M Heist
The warning follows a Citizen Lab report that found the official, mandatory app has an encryption flaw that “can be trivially sidestepped.” Besides burners, here are more tips on staying cyber-safe at the Games. Continue reading FBI: Use a Burner Phone at the Olympics
The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2.
Continue reading Lazarus APT Uses Windows Update to Spew Malware
The sweetened deal came on the same day that Trustwave SpiderLabs published a new way to bypass Outlook security to deliver malicious links to victims.
Continue reading Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
The blockchain is shockingly secure, but the platforms that interact with it are a paradise for hackers and scammers. Continue reading This Is Why There’s Been So Many NFT and Crypto Hacks
Attackers increasingly are spoofing the courier DHL and using socially engineered messages related to packages to trick users into downloading Trickbot and other malicious payloads.
Continue reading Shipment-Delivery Scams a Fav Way to Spread Malware