Cloudflare’s Server Hacked Using Leaked Access Token in Okta Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare discovered a threat actor on the self-hosted Atlassian server on November 23, 2023. The attack was launched with the use of one stolen access token and three compromised service account credentials that were neglected to change following the October 2023 …

USB Malware Chained with Text Strings on Legitimate Websites Attacks Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Despite the evolution of several tools and tactics, threat actors still go with the traditional approach to attack victims for malicious purposes. One such threat actor is UNC4990, which uses USB devices to exploit victims. UNC4990 is a financially motivated …

VileRAT Attacking Windows Machines via Malicious Software

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new variant of VileRAT is being distributed through fake software pirate websites to infect Windows systems on a large scale. This Python-based VileRAT malware family is believed to be specific to the Evilnum threat group, DeathStalker, which has been active since …

Arrests in $400M SIM-Swap Tied to Heist at FTX?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct …

Russian APT’s Employ HTTP-Shell to Attack Government Entities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Cluster25, a threat intelligence firm, uncovered a spear-phishing campaign dubbed “The Bear and the Shell,” specifically targeting entities critical of the Russian government and aligned with dissident movements.  The campaign leverages social engineering tactics, employing seemingly legitimate lures to …

Hackers Use Compromised Routers to Attack Government Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers continue to use compromised routers as malicious infrastructure to target government organizations in Europe and the Caucasus region. APT28 threat actors (also known as Sofacy, Fancy Bear, etc.) were behind this malicious espionage effort, according to the Ukrainian government’s computer emergency …

Next-Generation Malware Analysis With Sandboxing – Threat Analysis Guide in 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With the increasing complexity and sophistication of malware, traditional signature-based detection technologies are insufficient. Next-generation malware analysis is a significant cybersecurity breakthrough. Sophisticated malware can employ polymorphic and metamorphic code, which modifies with each replication, making signature detection a challenging …

Hackers Exploit Trusted Platform Redirect Flaws For Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers abuse trustworthy platforms for redirection, which involves the use of legitimate websites to redirect users to harmful URL destinations. In this ever-evolving world of cyber threats, phishing attempts are getting more frequent, with email being one of the primary targets. …

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Jan. 9, 2024, U.S. authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key …

Aembit Announces New Workload IAM Integration with CrowdStrike to Help Enterprises Secure Workload-to-Workload Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Aembit Becomes the First Workload IAM Platform to Integrate with the Industry-Leading CrowdStrike Falcon Platform to Drive Workload Conditional Access Aembit, the Workload Identity and Access Management (IAM) platform that enables DevOps and security teams to discover, manage, enforce and …