Less than 2 weeks earlier, the United States Cybersecurity & & Infrastructure Security Agency and also FBI launched a joint advising concerning the risk of ransomware assaults from a gang that calls itself “Cuba.”...
Researchers uncovered two malicious campaigns that abuse MSBuild to drop Cobalt Strike on targeted machines. The attackers first gain access to the target environment with an RDP account. As per experts, the Windows Defender...
The malware used in the campaign aims to steal credentials from multiple messaging and file-sharing apps, including Discord, Edge, FileZilla, OpenVPN, Outlook and Telegram, as well as crypto wallets. click here to read full...
Researchers assess with moderate confidence that the initial infection vector is the exploitation of ProxyShell flaws in Microsoft Exchange Server through the deployment of China Chopper web shell. click here to read full Article...
Malware delivered via a compromised website on Chrome browsers can bypass User Account Controls to infect systems and steal sensitive data, such as credentials and cryptocurrency. click here to read full Article Read more...
Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up...
Tracked as CVE-2021-26084 (CVSS score: 9.8), it is an OGNL injection vulnerability that could be exploited to achieve arbitrary code execution on a Confluence Server or Data Center instance. click here to read full...
Vzwpix allows Verizon customers to send texts as emails to recipients instead of phone messages. Threat actors can utilize these services to mass deliver texts that do not show the name of the sender....
A critical security vulnerability in a popular e-learning platform could be abused to allow access to students’ data and test papers – and possibly even manipulate exam results. click here to read full Article...
A strain of cryptocurrency-mining malware was discovered that abuses Windows Safe mode during attacks. The researchers at Avast have dubbed the malware Crackonosh which spreads through pirated and cracked software and is often found...
The vulnerability could lead to the exfiltration of data and traffic, the hijack of other administrator accounts, and the deployment of malware such as keyloggers, backdoors, and more. click here to read full Article...
The features offered by Linktree make this a highly customizable tactic as the page can be modified to suit the needs of the threat actor for whomever they’re impersonating. click here to read full...
In the first week of May, security researchers raised an alarm about a decade-old supply chain flaw in the PHP package manager that could have put millions of websites at risk. click here to...
Threat actors are abusing the Microsoft Build Engine (MSBuild) to deploy remote access tools (RATs) and information-stealing malware filelessly as part of an ongoing campaign. click here to read full Article Read more on...
Passing Apple devices can be used to sneak out portions of information from one place to another, such as a computer on the other side of the world, over the air without any network...
WSH-RAT kit is a complete Remote Administration tool sold in the underground and frequently abused by criminal actors relying on off-the-shelf kits to build their offensive campaigns. click here to read full Article Read...
