Your blog category
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat. “These attacks are opportunistic in nature, targeting users seeking popular business software,”… Read More »Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware
A new type of malware called UULoader is being used by threat actors to deliver next-stage payloads like Gh0st RAT and Mimikatz. The Cyberint Research Team, which discovered the malware,… Read More »New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia
According to recent research on employee offboarding, 70% of IT professionals say they’ve experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to… Read More »How to Automate the Hardest Parts of Employee Offboarding
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. “Attackers can use Xeon… Read More »Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks
Cybersecurity researchers have discovered new infrastructure linked to a financially motivated threat actor known as FIN7. The two clusters of potential FIN7 activity “indicate communications inbound to FIN7 infrastructure from… Read More »Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with North Korea. The security vulnerability, tracked as CVE-2024-38193… Read More »Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
OpenAI on Friday said it banned a set of accounts linked to what it said was an Iranian covert influence operation that leveraged ChatGPT to generate content that, among other… Read More »OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated with cloud and social media applications. “Multiple security… Read More »Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts
A 27-year-old Russian national has been sentenced to over three years in prison for peddling financial information, login credentials, and other personally identifying information (PII) on a now-defunct dark web… Read More »Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web
Cybersecurity researchers have shed light on a sophisticated information stealer campaign that impersonates legitimate brands to distribute malware like DanaBot and StealC. The activity cluster, orchestrated by Russian-speaking cybercriminals and… Read More »Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware