Collaborate Disseminate
Russian cybercriminals are advertising a new macOS malware, Banshee Stealer, capable of stealing passwords, browser data, and crypto wallets.
The post New Banshee Stealer macOS Malware Priced at $3,000 Per Month appeared first on SecurityWeek.
Continue reading New Banshee Stealer macOS Malware Priced at $3,000 Per Month
Security experts are ratcheting up the urgency for Windows admins to patch a wormable, pre-auth remote code execution vulnerability in the Windows TCP/IP stack.
The post Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw appeared … Continue reading Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw
Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days.
The post Windows Update Flaws Allow Undetectable Downgrade Attacks appeared first on SecurityWeek.
Continue reading Windows Update Flaws Allow Undetectable Downgrade Attacks
Chinese group StormBamboo spotted delivering Windows and macOS malware by compromising an ISP and using DNS poisoning.
The post Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning appeared first on SecurityWeek.
Continue reading Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning
The BlankBot Android trojan exfiltrates user data, executes C&C commands, and supports custom injections, keylogging, and screen recording.
The post New BlankBot Android Trojan Can Steal User Data appeared first on SecurityWeek.
Continue reading New BlankBot Android Trojan Can Steal User Data
Threat actors are abusing Cloudflare’s TryCloudflare feature to create one-time tunnels for the distribution of remote access trojans.
The post Cloudflare Tunnels Abused for Malware Delivery appeared first on SecurityWeek.
Continue reading Cloudflare Tunnels Abused for Malware Delivery
Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories.
The post Network of 3,000 GitHub Accounts Used for Malware Distribution appeared first on SecurityWeek.
Continue reading Network of 3,000 GitHub Accounts Used for Malware Distribution
A fresh Mandiant report documents North Korea’s APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
The post Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine appeared first on SecurityWe… Continue reading Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine
Google has announced improved protections for Chrome users when downloading files from the internet.
The post Google Boosts Chrome Protections Against Malicious Files appeared first on SecurityWeek.
Continue reading Google Boosts Chrome Protections Against Malicious Files
Sygnia discovered what it believes to be a variant of the GhostEmperor infection chain leading to the Demodex rootkit – which was first seen and described in 2021.
The post Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident appeared firs… Continue reading Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident