The cybercrime group called GhostSec has been linked to a Golang variant of a ransomware family called GhostLocker. “TheGhostSec and Stormous ransomware groups are jointly conducting double extortion ransomware attacks on… Read More »Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
VMware has released patches to address four security flaws impacting ESXi, Workstation, and Fusion, including two critical flaws that could lead to code execution. Tracked as CVE-2024-22252 and CVE-2024-22253, the vulnerabilities… Read More »VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws
The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) sanctioned two individuals and five entities associated with the Intellexa Alliance for their role in “developing, operating, and distributing”… Read More »U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists
North Korean threat actors have exploited the recently disclosed security flaws in ConnectWise ScreenConnect to deploy a new malware called TODDLERSHARK. According to a report shared by Kroll with The Hacker… Read More »Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware
The threat actor known as TA577 has been observed using ZIP archive attachments in phishing emails with an aim to steal NT LAN Manager (NTLM) hashes. The new attack chain “can be… Read More »Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
More than 225,000 logs containing compromised OpenAI ChatGPT credentials were made available for sale on underground markets between January and October 2023, new findings from Group-IB show. These credentials were… Read More »Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets
A new DNS threat actor dubbed Savvy Seahorse is leveraging sophisticated techniques to entice targets into fake investment platforms and steal funds. “Savvy Seahorse is a DNS threat actor who convinces victims… Read More »Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams
Startups and scales-ups are often cloud-first organizations and rarely have sprawling legacy on-prem environments. Likewise, knowing the agility and flexibility that cloud environments provide, the mid-market is predominantly running in… Read More »What is Exposure Management and How Does it Differ from ASM?
A new pair of security vulnerabilities have been disclosed in JetBrains TeamCity On-Premises software that could be exploited by a threat actor to take control of affected systems. The flaws,… Read More »Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers
Cybercriminals are using a network of hired money mules in India using an Android-based application to orchestrate a massive money laundering scheme. The malicious application, called XHelper, is a “key tool… Read More »How Cybercriminals are Exploiting India’s UPI for Money Laundering Operations