Jan 27, 2023Ravie LakshmananThreat Response / Cyber Crime Cybersecurity researchers have discovered the real-world identity of the threat actor behind Golden Chickens malware-as-a-service, who goes …
Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices
Jan 27, 2023Ravie LakshmananEndpoint Security / Malware Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices …
3 Lifehacks While Analyzing Orcus RAT in a Malware Sandbox
Jan 27, 2023The Hacker NewsMalware Analyzing Orcus[1] is a Remote Access Trojan with some distinctive characteristics. The RAT allows attackers to create plugins and offers …
British Cyber Agency Warns of Russian and Iranian Hackers Targeting Key Industries
Jan 27, 2023Ravie LakshmananNation-State-Sponsored Attacks The U.K. National Cyber Security Centre (NCSC) on Thursday warned of spear-phishing attacks mounted by Russian and Iranian state-sponsored actors …
Hive Ransomware Infrastructure Seized in Joint International Law Enforcement Effort
Jan 26, 2023Ravie LakshmananEncryption / Ransomware The infrastructure associated with the Hive ransomware-as-a-service (RaaS) operation has been seized as part of a coordinated law enforcement …
Google Takes Down 50,000 Instances of Pro-Chinese DRAGONBRIDGE Influence Operation
Jan 26, 2023Ravie LakshmananThreat Analysis Google on Thursday disclosed it took steps to dismantle over 50,000 instances of activity orchestrated by a pro-Chinese influence operation …
Researchers Release PoC Exploit for Windows CryptoAPI Bug Discovered by NSA
Jan 26, 2023Ravie LakshmananEncryption / Windows Security Proof-of-concept (Poc) code has been released for a now-patched high-severity security flaw in the Windows CryptoAPI that the …
Researchers Uncover Connection b/w Moses Staff and Emerging Abraham’s Ax Hacktivists Group
Jan 26, 2023Ravie Lakshmanan New research has linked the operations of a politically motivated hacktivist group known as Moses Staff to another nascent threat actor …
Is Once-Yearly Pen Testing Enough for Your Organization?
Any organization that handles sensitive data must be diligent in its security efforts, which include regular pen testing. Even a small data breach can result …
PY#RATION: New Python-based RAT Uses WebSocket for C2 and Data Exfiltration
Jan 26, 2023Ravie LakshmananThreat Detection / Endpoint Security Cybersecurity researchers have unearthed a new Python-based attack campaign that leverages a Python-based remote access trojan (RAT) …
