Cybersecurity researchers at Malwarebytes have identified an updated version of a pernicious malware targeting macOS, known as Atomic Stealer (AMOS). The frequent updates indicate the malefactors’ active pursuit of refining the functionalities of this...
On January 3, 2024, the account of cybersecurity firm Mandiant on Elon Musk’s platform X was compromised to disseminate phishing links leading to pages designed for cryptocurrency theft. The hacked account was restored without...
Trend Micro has documented the active proliferation of the malicious software PikaBot by the group Water Curupira. Their operations commenced in the first quarter of 2023 and continued until the end of June, resuming...
A new cyber threat has been identified: malefactors are exploiting YouTube videos related to pirated software to disseminate a data-stealing malware known as Lumma. These videos typically contain information about hacked applications and are...
Over the past 11 months, an active campaign has been underway to disseminate the malicious software AsyncRAT, targeting selective objectives. This campaign employs hundreds of unique loaders and over 100 domains. AsyncRAT is an...
The hacker collective known as UAC-0050 has been actively employing phishing attacks to disseminate the malicious software Remcos RAT. This software is designed for remote surveillance and control and plays a pivotal role in...
Recently, the Cactus ransomware group claimed to have infiltrated Sweden’s largest supermarket chain, Coop, threatening to disclose a vast amount of personal information across more than 20,000 directories. It is understood that Coop operates...
Specialists at Security Research Labs (SRLabs) have developed a decryptor, the Black Basta Buster, which exploits a vulnerability in the encryption algorithm of the Black Basta ransomware program, enabling victims to recover their files...
According to a report presented by CloudSEK, a new hacking method enables hackers to exploit the OAuth 2.0 authorization protocol functionality to compromise Google accounts. This technique maintains valid sessions by regenerating cookie files,...
The Chinese cybersecurity firm QiAnXin has identified a new campaign by the Lazarus group, which employs npm packages to launch supply chain attacks through a multi-tiered loading method to conceal the traces of their...
In the ever-evolving landscape of cyber threats, the Lazarus Group stands as a formidable name, notorious for its sophisticated attacks and elusive tactics. Recently, Cisco Talos discovered their new campaign, dubbed “Operation Blacksmith,” has...
In the shadowy world of cyber espionage, the Kimsuky threat group, believed to be backed by North Korea, stands out for its persistent and evolving tactics. Active since 2013, Kimsuky initially focused on South...
The ransomware group ALPHV/BlackCat has claimed to have gained access to the data of companies Roblox and Twitch. This breach is reportedly a consequence of hacking Tipalti, a provider of accounting software solutions. ALPHV...
In the ever-evolving landscape of cybersecurity threats, a new and concerning campaign has emerged, known as the Cactus Ransomware Campaign. This campaign, as observed and analyzed by Arctic Wolf Labs, marks a novel method...
VirusTotal has introduced a new study actively exploring the potential of large language models, including neural networks, for identifying and automatically analyzing malicious code. This advancement is poised to save time for experts, focusing...
Security researchers at Cybereason have identified a new variant of the ransomware “DJVU,” masquerading as free software. According to security expert Ralph Villanueva, perpetrators employ a well-known attack scheme, but this time, it involves...
