Specialists at Security Research Labs (SRLabs) have developed a decryptor, the Black Basta Buster, which exploits a vulnerability in the encryption algorithm of the Black Basta ransomware program, enabling victims to recover their files...
According to a report presented by CloudSEK, a new hacking method enables hackers to exploit the OAuth 2.0 authorization protocol functionality to compromise Google accounts. This technique maintains valid sessions by regenerating cookie files,...
The Chinese cybersecurity firm QiAnXin has identified a new campaign by the Lazarus group, which employs npm packages to launch supply chain attacks through a multi-tiered loading method to conceal the traces of their...
In the ever-evolving landscape of cyber threats, the Lazarus Group stands as a formidable name, notorious for its sophisticated attacks and elusive tactics. Recently, Cisco Talos discovered their new campaign, dubbed “Operation Blacksmith,” has...
In the shadowy world of cyber espionage, the Kimsuky threat group, believed to be backed by North Korea, stands out for its persistent and evolving tactics. Active since 2013, Kimsuky initially focused on South...
In the ever-evolving landscape of cyber threats, a new and disturbing method of iPhone hacking has emerged, catching both users and cybersecurity experts off-guard. This technique, leveraging third-party custom keyboards, represents a significant shift...
The ransomware group ALPHV/BlackCat has claimed to have gained access to the data of companies Roblox and Twitch. This breach is reportedly a consequence of hacking Tipalti, a provider of accounting software solutions. ALPHV...
In the ever-evolving landscape of cybersecurity threats, a new and concerning campaign has emerged, known as the Cactus Ransomware Campaign. This campaign, as observed and analyzed by Arctic Wolf Labs, marks a novel method...
VirusTotal has introduced a new study actively exploring the potential of large language models, including neural networks, for identifying and automatically analyzing malicious code. This advancement is poised to save time for experts, focusing...
Security researchers at Cybereason have identified a new variant of the ransomware “DJVU,” masquerading as free software. According to security expert Ralph Villanueva, perpetrators employ a well-known attack scheme, but this time, it involves...
Since its emergence in April 2022, the cybercriminal group Black Basta has extorted no less than $100 million in ransoms from its victims, as evidenced by joint research conducted by Corvus Insurance and the...
One of the most popular tools for hacking cryptocurrency wallets, Inferno Drainer, announced its definitive closure. On November 26, the service team, in a statement published on Telegram, declared that “time for us to...
Trend Micro has uncovered a malicious Chrome extension named ParaSiteSnatcher, primarily targeting users in Latin America, specifically in Brazil. This extension empowers malefactors to track, manipulate, and purloin sensitive information from various sources, encompassing financial...
In the ever-evolving landscape of cyber threats, a new menace has emerged, capturing the attention of IBM X-Force researchers: the WailingCrab malware. Also known as WikiLoader, this multi-component malware has been evolving, especially in...
In the shadowy realm of cybersecurity, new threats emerge with alarming frequency, preying on unsuspecting users and jeopardizing their digital assets. Cyble Research and Intelligence Labs (CRIL) recently unearthed a disturbing discovery – a...
In the ever-evolving landscape of cybersecurity threats, ransomware remains a persistent and formidable adversary. Recently, Qualys Threat Research uncovered a cunning tactic employed by the Phobos ransomware family. This malicious software, known for its...
