A software package available from the official NPM repository has been revealed to be actually a front for a tool that’s designed to steal saved passwords from the Chrome web browser. The package in...
ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation...
Researchers have found that the hackers are using a new attack technique in phishing campaigns in which they use non-malicious documents to disable Macro security warnings before executing macro code on targeted computers. The...
Kaspersky said that the most professional, most aggressive espionage attacks are carried out by those who speak English, Russian and Chinese. As for the most professional cybercrime groups, they almost all speak Russian, “because...
In mid-March 2021, we observed two new spam campaigns. The messages in both cases were written in English and contained ZIP attachments or links to ZIP files. Further research revealed that both campaigns ultimately...
The LV variant operators have been observed in the wild since October 2020, deploying a tweaked version of REvil’s binary with references to REvil’s C2 and data exfiltration infrastructure removed. click here to read...
Namecheap refines strategy to fight malicious domains click here to read full Article Read More on latest Security Updates
Sonatype researchers have recently discovered malicious packages in PyPI, a software code repository, that turns developers’ workstations into cryptomining machines. click here to read full Article Read more on Malware updates & News
A new research has found that anti-virus programs for Android continue to remain vulnerable against different permutations of malware, in what could pose a serious risk as malicious actors evolve their toolsets to better...
Researchers detected WordPress website compromises with attackers abusing the plugin upload functionality in the wp-admin dashboard to redirect visitors and website owners to malicious websites. click here to read full Article Read more on...
iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform...
The malicious link was shared through WhatsApp, SMS, and email on June 9. Some officials even received phone calls where the caller said he was calling from an Army Hospital. click here to read...
Siemens said an unauthenticated, remote attacker with network access to TCP port 102 could write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks. click here to...
Out of this, 98.34 percent of the attacks appear to have originated from IP addresses in Bangladesh, with 76.08% of targeted users in South Korea, 17% in Australia, and 1% in the US. click...
Hunting for Malicious Strings Usage: AMSI calls (xmas tree mode) -d, –debug Show Debug Info -m, –maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, –chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h,...
Once again, the Magecart gang has made it to the news owing to a unique… Magecart Now Hides Malicious PHP Web Shells In Website Favicons on Latest Hacking News. click here to read full...
