Ozzy Osbourne NFTs Used to Bite Off Chunk of Crypto Coin
A discarded Discord vanity URL for CryptoBatz was hijacked by cybercriminals to drain cryptocurrency wallets.
Continue reading Ozzy Osbourne NFTs Used to Bite Off Chunk of Crypto Coin
Category Archives: Web Security
Segway Hit by Magecart Attack Hiding in a Favicon
Visitors who shopped on the company’s eCommerce website in January will likely find their payment-card data heisted, researchers warned. Continue reading Segway Hit by Magecart Attack Hiding in a Favicon
New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks
A pro-democracy Hong Kong site was used to launch watering-hole attacks that planted a powerful macOS backdoor that researchers dubbed DazzleSpy.
Continue reading New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks
AdSanity, AccessPress Plugins Open Scads of WordPress Sites to Takeover
A critical security bug and a months-long, ongoing supply-chain attack spell trouble for WordPress users. Continue reading AdSanity, AccessPress Plugins Open Scads of WordPress Sites to Takeover
Linux Servers at Risk of RCE Due to Critical CWP Bugs
The two flaws in Control Web Panel – a popular web hosting management software used by 200K+ servers – allow code execution as root on Linux servers.
Continue reading Linux Servers at Risk of RCE Due to Critical CWP Bugs
MoleRats APT Launches Spy Campaign on Bankers, Politicians, Journalists
State-sponsored cyberattackers are using Google Drive, Dropbox and other legitimate services to drop spyware on Middle-Eastern targets and exfiltrate data. Continue reading MoleRats APT Launches Spy Campaign on Bankers, Politicians, Journalists
Surge in Malicious QR Codes Sparks FBI Alert
QR codes have become a go-to staple for contactless transactions of all sorts during the pandemic, and the FBI is warning cybercriminals are capitalizing on their lax security to steal data and money, and drop malware. Continue reading Surge in Malicious QR Codes Sparks FBI Alert
Dark Souls 3 Servers Shut Down Due to Critical RCE Bug
The bug can allow attackers to remotely execute code on gamers’ computers. The devs temporarily deactivated PvP servers across multiple affected versions. Continue reading Dark Souls 3 Servers Shut Down Due to Critical RCE Bug
Unusual ‘Donald Trump’ Packer Malware Delivers RATs, Infostealers
The ‘DTPacker’ downloader used fake Liverpool Football Club sites as lures for several weeks, a report finds. Continue reading Unusual ‘Donald Trump’ Packer Malware Delivers RATs, Infostealers
The Internet’s Most Tempting Targets
What attracts the attackers? David “moose” Wolpoff, CTO at Randori, discusses how to evaluate your infrastructure for juicy targets. Continue reading The Internet’s Most Tempting Targets