Tag: malware
-
RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader
by
in SecurityNewsZscaler ThreatLabz has identified a new malware family, RiseLoader, which specializes in downloading and executing second-stage payloads. Sharing similarities with RisePro, this loader appears to be the work of the... First seen on securityonline.info Jump to article: securityonline.info/risepro-and-privateloader-threat-actors-strike-again-with-riseloader/
-
Biggest Crypto Scam Tactics in 2024 and How to Avoid Them
Stay alert to crypto scams with our guide to 2024’s top threats, including phishing, malware, Ponzi schemes, and… First seen on hackread.com Jump to article: hackread.com/biggest-crypto-scam-tactics-in-2024-avoid-them/
-
Key Raccoon Figure Receives 60-Month U.S. Prison Sentence
by
in SecurityNewsUkrainian Mark Sokolovsky Pleaded Guilty in October. A Ukrainian national who was a key figure in the Raccoon malware-as-a-service criminal operation received a prison sentence of 60 months. The sentence of Mark Sokolovsky includes credit for time already spent in jails following his March 2022 arrest. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/key-raccoon-figure-receives-60-month-us-prison-sentence-a-27096
-
Raccoon Stealer malware operator gets 5 years in prison after guilty plea
by
in SecurityNewsUkrainian national Mark Sokolovsky was sentenced today to five years in prison for his involvement in the Raccoon Stealer malware cybercrime operation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/raccoon-stealer-malware-operator-gets-5-years-in-prison-after-guilty-plea/
-
Vulnerabilities in Azure Data Factory Open Door to Attacks
by
in SecurityNewsAzure Data Factory’s Apache Airflow Integration Flaw Can Expose Cloud Environments. Security researchers say now-resolved vulnerabilities in a Microsoft Azure integration with the Apache Airflow workflow management platform showcase growing sophistication of attackers. Palo Alto Unit 42 researchers said the flaws could allow hackers to deploy malware and steal data. First seen on govinfosecurity.com Jump…
-
FBI Warns of HiatusRAT Malware Targeting Webcams and DVRs
by
in SecurityNews
Tags: malwareKEY SUMMARY POINTS The FBI has issued a Private Industry Notification (PIN) to highlight new malware campaigns targeting… First seen on hackread.com Jump to article: hackread.com/fbi-warns-hiatusrat-malware-targeting-webcams-dvrs/
-
Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign
by
in SecurityNewsKEY SUMMARY POINTS Cybersecurity researchers Dr. Web have uncovered a new and active Linux malware campaign aimed at… First seen on hackread.com Jump to article: hackread.com/hackers-exploit-linux-ebpf-malware-ongoing-campaign/
-
Hackers Exploit Linux eBPF Tech to Host Malware on GitHub and Blogs
by
in SecurityNewsKEY SUMMARY POINTS Cybersecurity researchers Dr. Web have uncovered a new and active Linux malware campaign aimed at… First seen on hackread.com Jump to article: hackread.com/hackers-exploit-linux-ebpf-tech-malware-github-blogs/
-
Thai Police Systems Under Fire From ‘Yokai’ Backdoor
Hackers are abusing legitimate Windows utilities to target Thai law enforcement with a novel malware that is a mix of sophistication and amateurishness. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/thai-police-systems-yokai-backdoor
-
A new ransomware regime is now targeting critical systems with weaker networks
by
in SecurityNews
Tags: access, attack, authentication, breach, control, corporate, credentials, cybercrime, data, defense, exploit, extortion, finance, flaw, fortinet, group, infrastructure, law, lockbit, malware, mfa, network, ransomware, risk, tactics, usa, vmware, vpn, vulnerability, zyxelThe year 2024’s ransomware shake-up, fueled by law enforcement crackdowns on giants like LockBit, has shifted focus to critical operations, with major attacks this year hitting targets like Halliburton, TfL, and Arkansas water plant.A Dragos study for the third quarter of 2024 highlighted a surge in activity from new groups like RansomHub, Play, and Fog,…
-
Attacker Distributes DarkGate Using MS Teams Vishing Technique
by
in SecurityNews
Tags: malwareTrend Micro highlighted a case where an attacker posed as a client on an MS Teams call to distribute DarkGate malware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/attacker-darkgate-teams-vishing/
-
New I2PRAT Malware Using encrypted peerpeer communication to Evade Detections
by
in SecurityNewsCybersecurity experts are sounding the alarm over a new strain of malware dubbed >>I2PRAT,
-
RiseLoader Attack Windows By Employed A VMProtect To Drop Multiple Malware Families
RiseLoader, a new malware family discovered in October 2024, leverages a custom TCP-based binary protocol similar to RisePro for downloading and executing second-stage payloads. Despite RisePro’s development discontinuation in June 2024, RiseLoader’s emergence suggests a potential connection to the threat group behind RisePro and PrivateLoader. The malware often employs VMProtect for code obfuscation and has…
-
Google’s New XRefer Tool To Analyze More Complex Malware Samples
XRefer, an IDA Pro plugin, enhances binary analysis with a persistent companion view by employing Gemini-powered cluster analysis to decompose binaries into functional units, providing high-level architectural overviews akin to viewing a city’s districts. Simultaneously, it offers a context-aware view that dynamically updates based on the analyst’s code location, which presents relevant artifacts from both…
-
Hackers Exploit Linux SSH Servers Using Screen hping3 Tools With >>cShell<< Bot
by
in SecurityNews
Tags: attack, cyber, data-breach, exploit, hacker, intelligence, linux, malware, monitoring, service, toolThe AhnLab Security Intelligence Center (ASEC) has detected a new strain of malware targeting poorly protected Linux SSH servers. This malware, named >>cShell,
-
Neue IOCONTROL-Malware bei Angriffen auf kritische Infrastruktur entdeckt
by
in SecurityNewsEine neue Malware namens IOCONTROL befällt Geräte des Internet of Things (IoT) und OT/SCADA-Systeme, die von kritischen Infrastrukturen in den USA und Israel genutzt werden. First seen on 8com.de# Jump to article: www.8com.de#
-
Hackers Attacking Linux SSH Servers DDoS Bot cShell Using Screen hping3 Tools
by
in SecurityNews
Tags: attack, cyber, data-breach, ddos, exploit, hacker, intelligence, linux, malware, monitoring, service, toolThe AhnLab Security Intelligence Center (ASEC) has detected a new strain of malware targeting poorly protected Linux SSH servers. This malware, named >>cShell,
-
HiatusRAT Campaign Targets Web Cameras and DVRs: FBI Warns of Rising IoT Exploits
The FBI, in collaboration with CISA, has issued a new alert regarding the HiatusRAT malware campaign. The latest iteration of the campaign has shifted its focus to Internet of Things... First seen on securityonline.info Jump to article: securityonline.info/hiatusrat-campaign-targets-web-cameras-and-dvrs-fbi-warns-of-rising-iot-exploits/
-
Espionage Campaign Targets Turkish Defense Industry
by
in SecurityNewsAPT Group Uses Sophisticated Attack Chain to Deploy WmRAT and MiyaRAT. A suspected South Asian threat actor targeted a Turkish defense organization, deploying malware via a RAR archive and using alternate data streams to deliver remote access Trojans. The group previously targeted multiple countries including China, India, Pakistan and Bangladesh. First seen on govinfosecurity.com Jump…
-
Espionage Campaign Targets Turkish Defense Industry
by
in SecurityNewsAPT Group Uses Sophisticated Attack Chain to Deploy WmRAT and MiyaRAT. A suspected South Asian threat actor targeted a Turkish defense organization, deploying malware via a RAR archive and using alternate data streams to deliver remote access Trojans. The group previously targeted multiple countries including China, India, Pakistan and Bangladesh. First seen on govinfosecurity.com Jump…
-
‘Bitter’ cyberspies target defense orgs with new MiyaRAT malware
by
in SecurityNewsA cyberespionage threat group known as ‘Bitter’ was observed targeting defense organizations in Turkey using a novel malware family named MiyaRAT. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/bitter-cyberspies-target-defense-orgs-with-new-miyarat-malware/
-
That cheap webcam? HiatusRAT may be targeting it, FBI warns
by
in SecurityNewsWebcams have been a key part of business and home offices everywhere, especially since the COVID pandemic hit. But they are not often high-quality products, especially if used only sporadically, as many consumers and remote workers are content with a cheap one from China. This not only causes regular hardware problems, but it can also be…
-
Ongoing malware attack campaign sets sights on YouTubers
by
in SecurityNewsFirst seen on scworld.com Jump to article: www.scworld.com/brief/ongoing-malware-attack-campaign-sets-sights-on-youtubers
-
Google, Amnesty International uncover new surveillance malware
by
in SecurityNewsFirst seen on scworld.com Jump to article: www.scworld.com/news/google-amnesty-international-uncover-new-surveillance-malware
-
FBI Warns of HiatusRAT Targeting Vulnerable IoT Devices
by
in SecurityNewsMalware Targets Vulnerable Web Cameras and DVRs Worldwide. Hackers are deploying brute force attacks and using unpatched vulnerabilities to target Chinese-manufactured web cameras and DVRs, the FBI is warning. Targets include a range of organizations in Taiwan and at least one U.S. government server. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-warns-hiatusrat-targeting-vulnerable-iot-devices-a-27081
-
Winnti-Like ‘Glutton’ Backdoor Targets Cybercriminals
by
in SecurityNewsMalware Exploits Cybercrime Ecosystem for Profit. Hackers are using a variant of a backdoor that’s the hallmark of a Chinese threat actor suspected of ties to Beijing in order to target the cybercriminal underground. The malware t shares near-complete similarity with a backdoor exclusively used by the Winnti Group. First seen on govinfosecurity.com Jump to…