Malware

New IoT Botnet Launching Large-Scale DDoS attacks Hijacking IoT DevicesNew IoT Botnet Launching Large-Scale DDoS attacks Hijacking IoT Devices

New IoT Botnet Launching Large-Scale DDoS attacks Hijacking IoT Devices

Large-scale DDoS attack commands sent from an IoT botnet's C&C server targeting Japan and other countries since late 2024. These…

2 months ago
Thousands of PHP-based Web Applications Exploited to Deploy MalwareThousands of PHP-based Web Applications Exploited to Deploy Malware

Thousands of PHP-based Web Applications Exploited to Deploy Malware

A significant cybersecurity threat has emerged, threatening the integrity of thousands of PHP-based web applications. A report from Imperva Threat…

3 months ago
Google’s “Sign in with Google” Flaw Exposes Millions of Users’ DetailsGoogle’s “Sign in with Google” Flaw Exposes Millions of Users’ Details

Google’s “Sign in with Google” Flaw Exposes Millions of Users’ Details

A critical flaw in Google's "Sign in with Google" authentication system has left millions of Americans vulnerable to potential data…

3 months ago
Weaponized LDAP Exploit Deploys Information-Stealing MalwareWeaponized LDAP Exploit Deploys Information-Stealing Malware

Weaponized LDAP Exploit Deploys Information-Stealing Malware

Cybercriminals are exploiting the recent critical LDAP vulnerabilities (CVE-2024-49112 and CVE-2024-49113) by distributing fake proof-of-concept exploits for CVE-2024-49113 (dubbed "LDAPNightmare"). …

3 months ago
Hackers Mimic Social Security Administration To Deliver ConnectWise RATHackers Mimic Social Security Administration To Deliver ConnectWise RAT

Hackers Mimic Social Security Administration To Deliver ConnectWise RAT

A phishing campaign spoofing the United States Social Security Administration emerged in September 2024, delivering emails with embedded links to…

3 months ago
North Korean Hackers Wipe Cryptocurrency Wallets via Fake Job InterviewsNorth Korean Hackers Wipe Cryptocurrency Wallets via Fake Job Interviews

North Korean Hackers Wipe Cryptocurrency Wallets via Fake Job Interviews

Cybersecurity experts have uncovered a new wave of cyberattacks linked to North Korean threat actors targeting cryptocurrency wallets in an…

3 months ago
LegionLoader Abusing Chrome Extensions To Deliver Infostealer MalwareLegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome extensions, which can manipulate emails, track…

3 months ago
New PLAYFULGHOST Malware Hacking Devices To Remotely Capture Audio RecordingsNew PLAYFULGHOST Malware Hacking Devices To Remotely Capture Audio Recordings

New PLAYFULGHOST Malware Hacking Devices To Remotely Capture Audio Recordings

PLAYFULGHOST, a Gh0st RAT variant, leverages distinct traffic patterns and encryption, which spread via phishing emails and SEO poisoning of…

3 months ago
New Stealthy Malware Leveraging SSH Over TOR Attacking Ukrainian MilitaryNew Stealthy Malware Leveraging SSH Over TOR Attacking Ukrainian Military

New Stealthy Malware Leveraging SSH Over TOR Attacking Ukrainian Military

Researchers recently discovered a malicious campaign targeting Ukrainian military personnel through fake "Army+" application websites, which host a malicious installer…

3 months ago
New ‘OtterCookie’ Malware Attacking Software Developers Via Fake Job OffersNew ‘OtterCookie’ Malware Attacking Software Developers Via Fake Job Offers

New ‘OtterCookie’ Malware Attacking Software Developers Via Fake Job Offers

Palo Alto Networks reported the Contagious Interview campaign in November 2023, a financially motivated attack targeting various organizations, unlike typical…

3 months ago