Multi-stage TOITOIN Trojan Abusing Amazon EC2 Instances to Evade Detections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New advanced malware targets LATAM businesses with TOITOIN Trojan, revealing intricate layers. The complete attack is based on a multi-stage process that involves the following key things which highlight the severe effect of it:- Phishing emails Custom built modules Sophisticated …

Flaw in Atlassian Companion for macOS Let Attacker Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

When Atlassian Companion is installed on macOS, a vulnerability has been detected that enables remote code execution on users’ computers when they click the Edit button on a Confluence page. With the Atlassian Companion app, users can edit Confluence files …

MalasLocker Ransomware Attacks Users of Zimbra Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Notorious MalasLocker Ransomware, which has been active since March 2023, targets Zimbra servers and demands charity donations instead of Ransom. This group mostly targets corporate companies providing business services, software, and Manufacturing services around Italy, Russia, and the United …

Critics Mastodon “TootRoot” Vulnerability Allows Server Hijacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mastodon is an open-source self-hosted social networking service company that is maintained as a non-profit. The platform is similar to Twitter, with a lot more features, and is privacy-focused. It works as a federated model with contributors from all over …

What is ICMP Protocol ? – How Does ICMP Works – Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ICMP protocol is mainly used for error handling and primarily used for network devices (routers). Many different types of errors exist in the network layer that time ICMP can use to debug those errors. ICMP’s full form is Internet Control …

New Critical and High-Severity SQL Injection Flaw in MOVEit Transfer Software

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical-severity SQL injection flaw and two other high-severity vulnerabilities have been fixed in MOVEit Transfer, the software at the focus of the recent widespread Clop ransomware outbreaks. Progress Software detected SQL injection vulnerability, tracked as CVE-2023-36934, which can allow unauthenticated attackers access …

ARCrypt Ransomware Adapts TOR Communication Channels to Avoid detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly evolved linux variant of AR crypt malware developed with GO language started targeting worldwide. The emergence of AR Crypt malware was seen in the year of  Aug 2022, able to target both Linux and Windows machines. According to …

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

When the marital infidelity website AshleyMadison.com learned in July 2015 that hackers were threatening to publish data stolen from 37 million users, the company’s then-CEO Noel Biderman was quick to point the finger at an unnamed former contractor. But as …

VMware SD-WAN Vulnerability Let Attacker Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An authentication bypass vulnerability exists in VMware SD-WAN (Edge). Upon successful exploitation, unauthorized attackers gain access to the application’s Diagnostic package under VMware SD-WAN Management. “An unauthenticated attacker can download the Diagnostic bundle of the application under Management”, according to …

Beware of New Phishing Attacks Mimicking Booking.com and Airbnb

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Beware of attackers masquerading as well-known vacation rental websites such as Airbnb and Booking.com. Scammers that prey on tourists for Phishing Attacks are more active once the summer travel season is in full force. It is recommended to double-check the …