Your blog category
Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. “Perfctl is… Read More »New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking
Threat actors with ties to North Korea have been observed delivering a previously undocumented backdoor and remote access trojan (RAT) called VeilShell as part of a campaign targeting Cambodia and… Read More »North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks
INTERPOL has announced the arrest of eight individuals in Côte d’Ivoire and Nigeria as part of a crackdown on phishing scams and romance cyber fraud. Dubbed Operation Contender 2.0, the… Read More »INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa
A new wave of international law enforcement actions has led to four arrests and the takedown of nine servers linked to the LockBit (aka Bitwise Spider) ransomware operation, marking the… Read More »LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Endpoint Manager (EPM) that the company patched in May to its Known Exploited Vulnerabilities (KEV)… Read More »Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch
A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB.… Read More »Fake Trading Apps Target Victims Globally via Apple App Store and Google Play
A spear-phishing email campaign has been observed targeting recruiters with a JavaScript backdoor called More_eggs, indicating persistent efforts to single out the sector under the guise of fake job applicant… Read More »Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals
A previously undocumented threat actor called CeranaKeeper has been linked to a string of data exfiltration attacks targeting Southeast Asia. Slovak cybersecurity firm ESET, which observed campaigns targeting governmental institutions… Read More »China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration
Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 (CVSS… Read More »Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
A little over a dozen new security vulnerabilities have been discovered in residential and enterprise routers manufactured by DrayTek that could be exploited to take over susceptible devices. “These vulnerabilities… Read More »Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities