Military personnel from Middle East countries are the target of an ongoing surveillanceware operation that delivers an Android data-gathering tool called GuardZoo. The campaign, believed to have commenced as early… Read More »GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel
Clear Web vs. Deep Web vs. Dark Web Threat intelligence professionals divide the internet into three main components: Clear Web – Web assets that can be viewed through public search… Read More »HUMINT: Diving Deep into the Dark Web
Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K., and the U.S. have released a joint advisory about a China-linked cyber espionage group called APT40, warning… Read More »Cybersecurity Agencies Warn of China-linked APT40’s Rapid Exploit Adaptation
Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a “complex and persistent” supply chain… Read More »Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories
An emerging ransomware-as-a-service (RaaS) operation called Eldorado comes with locker variants to encrypt files on Windows and Linux systems. Eldorado first appeared on March 16, 2024, when an advertisement for… Read More »New Ransomware-as-a-Service ‘Eldorado’ Targets Windows and Linux Systems
An analysis of information-stealing malware logs published on the dark web has led to the discovery of thousands of consumers of child sexual abuse material (CSAM), indicating how such information… Read More »Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites
A previously undocumented advanced persistent threat (APT) group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control (C2) and data exfiltration. Cybersecurity firm Kaspersky,… Read More »New APT Group “CloudSorcerer” Targets Russian Government Entities
Events like the recent massive CDK ransomware attack – which shuttered car dealerships across the U.S. in late June 2024 – barely raise public eyebrows anymore. Yet businesses, and the… Read More »5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy
Financial institutions in Latin America are being threatened by a banking trojan called Mekotio (aka Melcoz). That’s according to findings from Trend Micro, which said it recently observed a surge… Read More »Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries
Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or… Read More »Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service