Tag Archive

A massive phishing campaign dubbed “EchoSpoofing” has exploited a critical vulnerability in Proofpoint’s email protection service, allowing cybercriminals to send millions of perfectly spoofed phishing emails impersonating major brands. The exploit, uncovered by cybersecurity firm Guardio Labs, affected Proofpoint’s system …

Microsoft researchers have found a critical vulnerability in VMware’s ESXi hypervisors. Ransomware operators are using this problem to attack systems. This vulnerability, CVE-2024-37085, allows threat actors to gain full administrative permissions on domain-joined ESXi hypervisors, posing a severe risk to …

As Americans engage in major activities such as the 2024 presidential race, large-scale cultural festivals, and high-profile sporting events, cybersecurity will be on high alert. Phishing attacks involve users through emails and messages in a somewhat deceiving way throughout the …

Due to their widespread use, popular productivity tools are often targeted and attacked by hackers. These tools create a large attack surface area and offer the potential to access huge amounts of sensitive data. Successful exploitation of these tools enables …

A threat actor has claimed to have put the source code for sale for the notorious Trik botnet, also known as Phorpiex, in antivirus (AV) circles. This C++ botnet has a suite of modules that make it a formidable threat …

A sophisticated Android spyware campaign known as Mandrake has resurfaced on the Google Play Store, infecting over 32,000 devices between 2022 and 2024. Mandrake has returned after a two-year break with its latest campaign. The malware stays inactive on victims’ …

Researchers identified a new attack campaign (“Operation ShadowCat”) using malicious LNK files distributed via spam emails, which triggers a PowerShell script that drops a .NET loader and a decoy Word document.  The loader fetches a steganographic PNG containing a Gzip-compressed …

By exploiting OS command injection vulnerabilities, threat actors can run arbitrary commands on a host operating system to obtain unauthorized access, control, and the power to either corrupt or steal sensitive data. Such hacking can result in serious security breaches, …

Void Banshee, a threat actor, has been exploiting a critical MSHTML vulnerability, CVE-2024-38112, to distribute the Atlantida InfoStealer malware. This sophisticated campaign has targeted unsuspecting users by attracting PDF books distributed via various public platforms, including online libraries and Discord …

TechCrunch has learned that Spytech, a little-known spyware maker based in Minnesota, has been hacked, exposing sensitive data from thousands of devices worldwide. The breach has unveiled the covert surveillance activities of the company, which has compromised over 10,000 devices …