New “SockDetour” Fileless, Socketless Backdoor Targets U.S. Defense Contractors

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have taken the wraps off a previously undocumented and stealthy custom malware called SockDetour that targeted U.S.-based defense contractors with the goal of being used as a secondary implant on compromised Windows hosts. “SockDetour is a backdoor that …

Iran’s MuddyWater Hacker Group Using New Malware in Worldwide Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity agencies from the U.K. and the U.S. have laid bare a new malware used by the Iranian government-sponsored advanced persistent threat (APT) group in attacks targeting government and commercial networks worldwide. “MuddyWater actors are positioned both to provide stolen …

Putin Warns Russian Critical Infrastructure to Brace for Potential Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country’s full-blown invasion of Ukraine enters the second day. In addition to cautioning of the “threat of an increase in the intensity of …

Notorious TrickBot Malware Gang Shuts Down its Botnet Infrastructure

Blog WriterThe Hacker News - Original news source is thehackernews.com

The modular Windows crimeware platform known as TrickBot formally shuttered its infrastructure on Thursday after reports emerged of its imminent retirement amid a lull in its activity for almost two months, marking an end to one of the most persistent malware campaigns …

New Flaws Discovered in Cisco’s Network Operating System for Switches

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has released software updates to address four security vulnerabilities in its software that could be weaponized by malicious actors to take control of affected systems. The most critical of the flaws is CVE-2022-20650 (CVSS score: 8.8), which relates to a command …

TrickBot Gang Likely Shifting Operations to Switch to New Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

TrickBot, the infamous Windows crimeware-as-a-service (CaaS) solution that’s used by a variety of threat actors to deliver next-stage payloads like ransomware, appears to be undergoing a transition of sorts, with no new activity recorded since the start of the year. …

From Pet Systems to Cattle Farm — What Happened to the Data Center?

Blog WriterThe Hacker News - Original news source is thehackernews.com

There’s something about craftsmanship. It’s personal, its artistry, and it can be incredibly effective in achieving its goals. On the other hand, mass-market production can be effective in other ways, through speed, efficiency, and cost savings. The story of data …

Warning — Deadbolt Ransomware Targeting ASUSTOR NAS Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

ASUSTOR network-attached storage (NAS) devices have become the latest victim of Deadbolt ransomware, less than a month after similar attacks singled out QNAP NAS appliances. In response to the infections, the company has released firmware updates (ADM 4.0.4.RQO2) to “fix related security issues.” The …

New Wiper Malware Targeting Ukraine Amid Russia’s Military Operation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity firms ESET and Broadcom’s Symantec said they discovered a new data wiper malware used in fresh attacks against hundreds of machines in Ukraine, as Russian forces formally launched a full-scale military operation against the country. The Slovak company dubbed …

Dridex Malware Deploying Entropy Ransomware on Hacked Computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Similarities have been unearthed between the Dridex general-purpose malware and a little-known ransomware strain called Entropy, suggesting that the operators are continuing to rebrand their extortion operations under a different name. “The similarities are in the software packer used to …