According to Mandiant, UNC2596 has been launching such campaigns since August 2021. It has targeted utility providers, government agencies, and organizations that support non-profits and healthcare entities. click here to read full Article Read...
A threat actor previously tied to the Thieflock ransomware operation may now be using the emerging Yanluowang ransomware in a series of attacks against U.S. corporations, researchers have found. click here to read full...
BLUELIGHT malware was discovered being delivered to a victim alongside RokRAT. RokRAT is a backdoor previously attributed to use by ScarCruft/APT37, which is also known as InkySquid. click here to read full Article Read...
When you click the link to visit the fake Royal Mail page, there’s a fair bit of code for detecting potential VM use. It tests for WebGL renders and whether site visitors have a...
A new botnet is hunting down and transforming infected routers, DVRs, and UPnP network devices into honeypots that help it find other targets to infect. The botnet comes with support for x86, ARM, MIPS,...
The Iranian-backed Fox Kitten hacking group is suspected to be at the rear of the nefarious acts of Spend2Critical ransomware that began a new wave of attacks in November-December 2020. Impression and Posting Resource...
This kind of destructive dropper is tricky to detect due to the fact its target is not to directly execute a backdoor, remote shell, or file add, but somewhat link attackers to other malicious...
