Dec 26, 2022Ravie LakshmananCyber Crime / Data Security The pay-per-install (PPI) malware downloader service known as PrivateLoader is being used to distribute a previously documented …
W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names
Dec 24, 2022Ravie LakshmananSoftware Security / Supply Chain Threat actors have published yet another round of malicious packages to Python Package Index (PyPI) with the …
FrodoPIR: New Privacy-Focused Database Querying System
Dec 23, 2022Ravie LakshmananEncryption / Privacy / Browser The developers behind the Brave open-source web browser have revealed a new privacy-preserving data querying and retrieval …
Researchers Warn of Kavach 2FA Phishing Attacks Targeting Indian Govt. Officials
Dec 23, 2022Ravie LakshmananCyber Espionage / Pakistani Hackers A new targeted phishing campaign has zoomed in on a two-factor authentication solution called Kavach that’s used …
The 6 steps of a complete IR
Dec 23, 2022The Hacker NewsIncident Response / XDR Platform Tis the season for security and IT teams to send out that company-wide email: “No, our …
Vice Society Ransomware Attackers Adopt Robust Encryption Methods
Dec 23, 2022Ravie LakshmananRansomware / Endpoint Security The Vice Society ransomware actors have switched to yet another custom ransomware payload in their recent attacks aimed …
France Fines Microsoft €60 Million for Using Advertising Cookies Without User Consent
Dec 23, 2022Ravie LakshmananPrivacy / Data Security France’s privacy watchdog has imposed a €60 million ($63.88 million) fine against Microsoft’s Ireland subsidiary for dropping advertising …
LastPass Admits to Severe Data Breach, Encrypted Password Vaults Compromised
Dec 23, 2022Ravie LakshmananPassword Management / Data Breach The August 2022 security breach[1] of LastPass may have been more severe than previously disclosed by the …
LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen
Dec 23, 2022Ravie LakshmananPassword Management / Data Breach The August 2022 security breach[1] of LastPass may have been more severe than previously disclosed by the …
FIN7 Cybercrime Syndicate Emerges as Major Player in Ransomware Landscape
An exhaustive analysis of FIN7 has unmasked the cybercrime syndicate’s organizational hierarchy, alongside unraveling its role as an affiliate for mounting ransomware attacks. It has …
