Cryptika Cybersecurity News

Hackers abuse Google Sheets to covertly store and transmit stolen data or execute malicious scripts, taking advantage of its trusted platform status and collaboration features. Cybersecurity researchers at Proofpoint identified an unusual campaign in August 2024 involving the use of …

DeadXInject, the group behind AresLoader and AiDLocker ransomware, is offering a new Malware-as-a-Service (MaaS) called ManticoraLoader.  Advertised on underground forums and Telegram since August 8th, 2024, ManticoraLoader is a C-based tool designed to target Windows systems (including servers) and steal …

A new attack vector has emerged, exploiting the critical vulnerability CVE-2023-22527 in Atlassian Confluence. This vulnerability, which affects the Confluence Data Center and Server products, has been weaponized using the Godzilla backdoor, a sophisticated file-less malware. The implications of this …

Cybersecurity researchers at Microsoft recently discovered that Peach Sandstorm, a state-sponsored threat actor affiliated with the IRGC, added Tickler, a new multistage backdoor, to their arsenal between April and July 2024. The threat actors attack satellite devices because they are …

Phishing remains a persistent danger. It’s an email-based cyber threat through which threat actors target sensitive user credentials and distribute malware. More than 963,000 attacks were discovered recently in the APWG’s Phishing Activity Trends Report for Q1 2024. In Business …

The Latrodectus malware has been observed to have enhanced capabilities and sophisticated evasion techniques. Initially discovered by Walmart in October 2023, Latrodectus has gained notoriety for its similarities with the infamous IcedID malware. This article delves into the new features …

Hackers often target NPM packages to inject malicious code into widely used libraries, enabling them to reach a massive developer and application base. Through such exploitation, threat actors can steal sensitive information, such as source code and configuration files, to …

Microsoft discovered a North Korean threat actor exploiting a zero-day vulnerability in the Chromium browser, identified as CVE-2024-7971. This vulnerability, a type confusion flaw in the V8 JavaScript and WebAssembly engine, allowed for remote code execution (RCE) in the sandboxed …

Data protection is safeguarding important information from corruption, compromise, or loss. It is important because data is often valuable and sensitive, and its protection ensures that it is only accessed and used by those authorized to do so. It also …

Global Secure Layer (GSL) successfully mitigated the most considerable packet rate of the Distributed Denial of Service (DDoS) attack ever recorded. The attack, aimed at a Minecraft gaming server, reached a staggering peak of 3.15 billion packets per second (Gpps) …