Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive information from compromised hosts while stealthily remaining under… Read More »Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware
Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy. The findings come from cybersecurity firm F.A.C.C.T.,… Read More »Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova
A new malicious campaign has been observed making use of malicious Android apps to steal users’ SMS messages since at least February 2022 as part of a large-scale campaign. The… Read More »Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes
Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S. state of Texas over allegations that it illegally collected biometric data… Read More »Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection
As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management (RMM) tools for system administration. However,… Read More »The Power and Peril of RMM Tools
A new iteration of a sophisticated Android spyware called Mandrake has been discovered in five applications that were available for download from the Google Play Store and remained undetected for… Read More »New Mandrake Spyware Found in Google Play Store Apps After Two Years
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors… Read More »Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground
Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses (SMBs) in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla,… Read More »Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware
The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea. The BlackBerry… Read More »New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by “several” ransomware groups to gain elevated permissions and deploy file-encrypting malware. The attacks involve the exploitation… Read More »VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access