Agent Tesla Malware Spotted Using New Delivery & Evasion Techniques

Blog WriterThe Hacker News - Original news source is thehackernews.com

Security researchers on Tuesday uncovered new delivery and evasion techniques adopted by Agent Tesla remote access trojan (RAT) to get around defense barriers and monitor its victims. Typically spread through social …

Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access (SMA) 100 series devices. The flaw, which affects both physical and virtual SMA …

A New Software Supply‑Chain Attack Targeted Millions With Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today disclosed a new supply chain attack targeting online gamers by compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs. Dubbed “Operation NightScout” …

New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially-motivated threat actor notorious for its cryptojacking attacks has leveraged a revised version of their malware to target cloud infrastructures using vulnerabilities in web server technologies, according to new …

Google Discloses Severe Bug in Libgcrypt Encryption Library—Impacting Many Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

A “severe” vulnerability in GNU Privacy Guard (GnuPG)’s Libgcrypt encryption software could have allowed an attacker to write arbitrary data to the target machine, potentially leading to remote code execution. The …

Italy CERT Warns of a New Credential Stealing Android Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a new family of Android malware that abuses accessibility services in the device to hijack user credentials and record audio and video. Dubbed “Oscorp” by Italy’s CERT-AGID …