A recent phishing campaign targeting Latin America utilized emails with ZIP attachments containing an HTML file disguised as an invoice using free, temporary email addresses with the domain “temporary.link” and …
Practical Guide to Simplify Your Malware Sandboxes Configuration
Malware sandboxes are integral to security applications like intrusion detection, forensics, and threat intelligence, but using them correctly is challenging due to choices in implementations, monitoring techniques, and configurations. Improper …
New Cyber Attack Targeting Hospital IT Helpdesks with Voice Calls
Hospitals across the nation are on high alert as sophisticated cybercriminals use advanced social engineering tactics to target IT help desks. The Health Sector Cybersecurity Coordination Center (HC3) has issued …
Massive boAt Data Breach: 7.5 Million Customers Data Exposed
Personal data belonging to over 7.5 million customers of boAt, a leading Indian consumer electronics brand, has been compromised and is now circulating on the dark web. This breach has …
Cisco Nexus Dashboard Vulnerability Let Attackers Read Arbitrary Files
Cisco Nexus Dashboard Fabric Controller is a network management platform for all NX-OS-enabled devices. It enables data center operation teams to perform deep-dive troubleshooting and maintenance operations. A new vulnerability …
Meet The New Qakbot DLL That Abuses Windows Process For persistence
Law enforcement dismantled the Qakbot botnet’s servers in 2023’s Operation Duck Hunt, but researchers identified its reemergence with a modified DLL, which utilizes the srtasks.exe process for persistence, ensuring its …
Splunk vs Cribl Lawsuit of Terms Violating Enterprise License
The Splunk-Cribl lawsuit is poised to go to trial. Both companies are suing over alleged violations of enterprise license terms. The case, brewing since October 2022, has now escalated to …
JsOutProx Malware Abusing GitLab To Attack Financial Institutions
GitLab is a prominent web-based Git repository manager that is exploited by hackers to gain unauthorized access to confidential source code, steal intellectual property or insert malicious code into projects …
Hackers Hijacked Notepad++ Plugin To Inject Malicious Code
Hackers have manipulated a popular Notepad++ plugin, injecting malicious code that compromises users’ systems upon execution. The AhnLab Security Intelligence Center (ASEC) researchers have revealed that the “mimeTools.dll” plugin, which …
Hackers Use Weaponized PDF Files to Deliver Byakugan Malware on Windows
Due to their high level of trust and popularity, hackers frequently use weaponized PDF files as attack vectors. Even PDFs can contain harmful codes or exploits that abuse the flaws …