Tag Archive

There is a malicious Chrome browser extension known as ChromeLoader that classified as a pervasive browser hijacker caught that modifies the browser settings to redirect users’ traffic to a malicious websites and stealing credentials.. After first surfacing in January of …

Microsoft issues a warning about a rise in the use of publicly revealed zero-day exploits by threat actors in their attacks. The researchers noted a shortening of the period between the disclosure of a vulnerability and its commoditization and noted …

There is evidence found pointing to the connection between FIN7 (aka Carbanak), a financially motivated hacking group, and the Black Basta ransomware gang.  The cybersecurity researchers at Sentinel Lab conducted an analysis in which they found this illicit connection between …

It seems that the Google app store has still not been able to catch malicious applications, as they are still being listed there. In the Google Play store, there are currently four malicious apps that are available. The 4 malicious …

In a recent disclosure, Dropbox revealed that a security breach had occurred. On GitHub, 130 of the company’s source code repositories have been accessed unauthorizedly by the threat actors. Threat actors gained access to the GitHub repositories of Dropbox by …

There have been two high-severity security vulnerabilities recently discovered and patched by the OpenSSL Project in its open-source cryptographic library. Encryption of communication channels and HTTPS connections is achieved through the use of this cryptographic library. In OpenSSL version 3.0.7 …

An intrusion was detected by The DFir Report in early June 2022 that leveraged the NetSupport Atera Agent Cobalt Strike Threat actors have exploited the CVE-2022-30190 (Follina vulnerability) in this intrusion and here they used a malicious Word document to …