Brazilian banking institutions have become the target of a new campaign disseminating a specialized variant of the AllaKore remote access trojan (RAT) for Windows, named AllaSenha. This RAT is designed to steal credentials necessary...
A relatively new North Korean cyber group known as Moonstone Sleet has recently been identified as responsible for attacks on the software, information technology, education, and defense industries, utilizing ransomware and other types of...
The U.S. Department of the Treasury has imposed sanctions on a cybercriminal network involving three Chinese nationals and three companies from Thailand. These entities are connected to a major botnet that controls a residential...
Over the past three months, hackers behind the CatDDoS botnet have exploited over 80 known vulnerabilities in various software products to infect devices and incorporate them into their network for conducting Distributed Denial-of-Service (DDoS)...
Fraud on classifieds and marketplaces has become a serious issue due to the emergence of organized criminal groups operating under a “Fraud-as-a-Service” model. These groups continuously refine their methods to steal money and personal...
According to a report by Sucuri, unknown hackers are exploiting obscure WordPress plugins to inject malicious PHP code into victim sites and steal payment data. On May 11, Sucuri specialists discovered a campaign in...
Check Point has reported that cybercriminals are targeting Check Point Remote Access VPN devices as part of an ongoing campaign to breach corporate networks. Remote access is integrated into all Check Point network firewalls....
Cybercriminals are using the Python code of Microsoft’s legendary game “Minesweeper” to conceal malicious scripts in attacks on financial and insurance organizations in Ukraine. This was reported by the research agencies CERT-UA and CSIRT-NBU,...
A new type of malicious software targeting ATMs is rapidly spreading in the digital realm, remarkable for its effectiveness — its success rate, according to its creators, reaches 99%. This malware, named “EU ATM...
MITRE Corporation reported a cyberattack on their nonprofit organization in late December 2023. The attackers exploited zero-day vulnerabilities in Ivanti Connect Secure (ICS) to create counterfeit VMware virtual machines. The perpetrators accessed the vCenter...
New cyber threats often result from the evolution and modification of existing malware. Recent research has revealed that the new malware BLOODALCHEMY, used in attacks on government organizations in South and Southeast Asia, is...
The Chinese hacker group Sharp Panda, known for its cyber espionage campaigns, has begun targeting government organizations in Africa and the Caribbean. This was reported by experts from Check Point in their recent report....
Microsoft has published a new Cyber Signals report, providing fresh insights into the activities of the hacking group Storm-0539 and the sharp rise in gift card thefts ahead of Memorial Day in the United...
The U.S. Environmental Protection Agency (EPA) is intensifying its oversight of critical water infrastructure due to the escalating threat of cyberattacks. Recently, the agency issued a warning urging municipal services to take immediate measures...
Chinese hackers have increasingly leveraged an extensive network of proxies composed of VPS servers and compromised online devices to conduct espionage. These proxy networks consist of Operational Relay Boxes (ORBs), administered by independent cybercriminals...
Rockwell Automation strongly urges its clients to disconnect all ICS control systems not intended for internet connectivity to prevent unauthorized or malicious cyberattacks. This measure is crucial due to escalating geopolitical tensions and increased...
Vulnerability Assessment / Web AppSec
GBounty: Multi-step website vulnerability scanner
November 6, 2024
