Collaborate Disseminate
The trojanized Craftsart Cartoon Photo Tools app is available in the official Android app store, but it’s actually spyware capable of stealing any and all information from victims’ social-media accounts. Continue reading Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts
The latest is a fresher version of the ransomware pro-Ukraine researcher ContiLeaks already released, but it’s reportedly clunkier code.
Continue reading Conti Ransomware V. 3, Including Decryptor, Leaked
A ransomware attack struck Bridgestone Americas, weeks after another Toyota supplier experienced the same and a third reported some kind of cyber hit.
Continue reading Bridgestone Hit as Ransomware Torches Toyota Supply Chain
The Russian invasion of Ukraine has coincided with the jamming of airplane navigation systems and hacks on the SATCOM networks that empower critical infrastructure. Continue reading Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure
A DarkHotel phishing campaign breached luxe hotel networks, including Wynn Palace and the Grand Coloane Resort in Macao, a new report says. Continue reading DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data
The Russian-speaking APT behind the NotPetya attacks and the Ukrainian power grid takedown could be setting up for additional sinister attacks, researchers said. Continue reading Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet
Researchers have exposed the work of Exotic Lily, a full-time cybercriminal initial-access group that uses phishing to infiltrate organizations’ networks for further malicious activity. Continue reading Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops
In the latest software supply-chain attack, the code maintainer added malicious code to the hugely popular node-ipc library to replace files with a heart emoji and a peacenotwar module.
Continue reading Dev Sabotages Popular NPM Package to Protest Russian Invasion
Five percent of the databases are vulnerable to threat actors: It’s a gold mine of exploit opportunity in thousands of mobile apps, researchers say.
Continue reading Misconfigured Firebase Databases Exposing Data in Mobile Apps
It’s about time, AttackIQ’s Jonathan Reiber said about 24H/72H report deadlines mandated in the new spending bill. As it is, visibility into adversary behavior has been muck. Continue reading Reporting Mandates to Clear Up Feds’ Hazy Look into Threat Landscape – Podcast