Tag Archive

Modern-day malware is much more menacing and vicious than ever before. They can evade early detection not just by traditional security tools but even advanced solutions like anti-malware, intrusion prevention systems, and intelligent email filters. Therefore, they are being widely …

Recently, Group-IB’s cybersecurity researchers have discovered that threat actors exploiting two vulnerabilities from point-of-sale payment devices and stolen more than 167,000 credit cards data. During a security audit conducted by Group-IB on April 19, 2022, a C2 server for the …

An event log can be remotely cleared and backed up with the help of ElfClearELFW, which is an MS-EVEN function. And this function also involves two parameters and here below we have mentioned them:- LogHandle BackupFileName However, there is a …

Zscaler ThreatLabz found a new backdoor called ‘WarHawk’ being used by the SideWinder APT threat group to target entities in Pakistan. The SideWinder group goes by the names Rattlesnake, Hardcore Nationalist, RAZOR TIGER, T-APT-04, and APT-C-17, with a history of …

It has recently been discovered by the security researchers at Guardio Labs that a new malvertising campaign is on the loose. This malicious campaign is intended to achieve the following objectives: Push search hacking Chrome extensions. Put affiliate links on …

The malware analysis tools simply allow us to know in a quick and effective way, what actions a threat makes in the system. In this way, you can easily collect all the information about the created files, network connections, changes …

Researchers at ESET found a new version of the Android malware ‘FurBall’ targeting Iranian citizens in mobile surveillance campaigns conducted by the Domestic Kitten hacking group, also called APT-C-50. Earlier in June 2021, reports say it has been distributed as …

Microsoft Azure Service Fabric has been exposed to a spoofing vulnerability that has been unveiled recently in a proof-of-concept exploit. The flaw has been tracked as CVE-2022-35829 with medium severity by the security researchers at Orca Security, and they dubbed …

The SafeBreach Labs research team has detected a new fully undetectable (FUD) In this case, two PowerShell scripts are designed, the first one is to connect to a remote command-and-control (C2) server and retrieve a command to be launched on …