A new Rust-based information stealer malware called Fickle Stealer has been observed being delivered via multiple attack chains with the goal of harvesting sensitive information from compromised hosts. Fortinet FortiGuard… Read More »New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration
Cybersecurity researchers have uncovered a new evasive malware loader named SquidLoader that spreads via phishing campaigns targeting Chinese organizations. AT&T LevelBlue Labs, which first observed the malware in late April… Read More »Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations
Crypto exchange Kraken revealed that an unnamed security researcher exploited an “extremely critical” zero-day flaw in its platform to steal $3 million in digital assets and refused to return them.… Read More »Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain… Read More »Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on social media with information stealer malware and… Read More »Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) files for virtual private networks (VPNs) to deliver a command-and-control… Read More »New Threat Actor ‘Void Arachne’ Targets Chinese Users with Malicious VPN Installers
Are your tags really safe with Google Tag Manager? If you’ve been thinking that using GTM means that your tracking tags and pixels are safely managed, then it might be… Read More »New Case Study: Unmanaged GTM Tags Become a Security Nightmare
Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances. Both shortcomings… Read More »Mailcow Mail Server Flaws Expose Servers to Remote Code Execution
A controversial proposal put forth by the European Union to scan users’ private messages for detection child sexual abuse material (CSAM) poses severe risks to end-to-end encryption (E2EE), warned Meredith… Read More »Signal Foundation Warns Against EU’s Plan to Scan Private Messages for CSAM
Threat actors are luring unsuspecting users with free or pirated versions of commercial software to deliver a malware loader called Hijack Loader, which then deploys an information stealer known as… Read More »Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer