Malware

FIN8 Resurfaces with New Sardonic Backdoor

August 27th, 2021 0

In its latest attack, FIN8 is infiltrating companies to carry out surveillance and obtain privilege escalation to deploy a payload of malware called Sardonic.

Malware

New variant of PRISM Backdoor 'WaterDrop' targets Linux systems

August 26th, 2021 0

According to researchers, the PRISM backdoor has been on their radar for more than 3.5 years.

Malware

Konni RAT variant targeting Russia in ongoing attack campaign

August 24th, 2021 0

So far, Konni RAT has managed to evade detection as only 3 security solutions on VirusTotal were able to detect the malware.

Malware

HolesWarm crypto malware hits unpatched Linux, Windows servers

August 20th, 2021 0

Researchers are calling the HolesWarm the "king of vulnerability exploitation" as the malware has already exploited 20 known Linux and Windows vulnerabilities in just a month.

Malware

Threat actors using CAPTCHA to evade phishing, malware detection

August 19th, 2021 0

According to researchers, cybercriminals are abusing legitimate challenge and response services like Google’s reCAPTCHA) or deploying customized fake CAPTCHA-like validation.

Malware

New Trickbot attack setup fake 1Password installer to extract data

August 16th, 2021 0

The fake 1Password installer is used to launch Cobalt Strike helping the attackers collect information about multiple systems in the network.

Malware

Fake Brave browser website dropped malware, thanks to Google Ads

August 4th, 2021 0

Threat actors used Google Ads to buy top search results on Google to advertise fake Brave browser websites which delivered malware as the browser's download file.

Malware

Crooks using phony call centers to spread ransomware via BazaCall attacks

July 30th, 2021 0

In BazaCall, a "vishing-like" method is used in which victims are told to call a particular phone number or their subscription will expire.

Malware

Crippling attack on Iranian trains linked to Meteor file wiper malware

July 30th, 2021 0

The Meteor file wiper malware is linked to a cyberattack that took place on July 9th, 2021 on the Iranian railway system and transport ministry.

Malware

Hackers posed as aerobics instructors in malware attack on defense contractors

July 28th, 2021 0

Iranian hackers used social media platforms especially Facebook to target employees of an aerospace defense contractor to steal their login credentials.