Hackers Selling Powerful Infostealers on Underground Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The role of info stealers (aka stealers) in the cybercrime world has been growing, according to researchers at the SecureWorks Counter Threat Unit (CTU). While threat actors make use of them to steal the following data from the networks and …

Microsoft Cloud Services Scanning Inside of password-protected Zip Files for Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have been evading in-built scanners in the cloud and local systems but archiving them as password-protected ZIP files. This makes it hard for scanners to crack the password and scan for malicious files. However, recent reports suggest that …

Camaro Dragon Hacker Group Attack TP-Link Routers to Deploy Remote Shells

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, the cybersecurity experts at Checkpoint identified that the Chinese state-sponsored group “Camaro Dragon” employs a custom “Horse Shell” malware embedded in TP-Link routers’ firmware to target European foreign affairs organizations, leveraging residential networks for their attacks. The attack targets …

Hackers are Actively Using the new.zip Domain for Malicious Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Top-Level Domains (TLDs) have been extremely popular ever since the emergence of the internet. ICANN is the organization that is responsible for these TLD registrations. Domains ending with any characters like .xyz, .top, etc., are being registered by this ICANN. …

Russian Hacker “Wazawaka” Indicted for Ransomware

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two indictments unsealed by the Justice Department today. U.S. prosecutors say Mikhail Pavolovich Matveev, a.k.a. “Wazawaka” …

PharMerica Hacked – Over 5 million Patients record stolen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Reports indicate that PharMerica Healthcare has faced a data breach resulting in 5.8 million records being exposed. PharMerica is one of the Fortune 1000 companies that provide Pharmacy management services to customers worldwide. It has a revenue of $2.1B annually, …

Multiple Counter-Strike Zero-Day Flaw Let Hackers Control Client Machine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Neodyme researchers discovered three distinct RCE vulnerabilities in Counter-Strike: Global Offensive, where each vulnerability is exploited through a malicious Python server upon game client connection. Despite fixing several critical vulnerabilities with a patch dated 04/28/2021, Counter-Strike: Global Offensive remains popular …

6 Ways you can Proactively Secure Your organization’s Mobile Endpoints

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over the years, mobile devices like smartphones, tablets, and laptops have been extensively used to get work done, primarily due to these powerful devices facilitating mobility for workforces. Workplace trends from 2022 show that most organizations have moved on from …

Re-Victimization from Police-Auctioned Cell Phones

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 16, 2023 0 Comments Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being …

BPFDoor – New Stealthy Backdoor Malware Targets Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A completely new and previously unreported form of BPFdoor was recently discovered and examined by Deep Instinct’s threat lab. The malware’s use of a Berkley Packet Filter, an unusual method of obtaining instructions and avoiding detection that gets beyond firewall …