Tag Archive

In banking attacks, threat actors actively exploit the NodeJS to steal the online banking credentials of the targeted users. Threat actors use JavaScript web injections to alter the login page of a bank’s website.  This stealthy alteration enables the threat …

Raspberry Robin is a malicious worm that spreads through USB drives, and it’s been actively used by the threat actors to download and install hidden malware on Windows systems.  Besides this, the threat actors exploit it for various reasons like …

A new backdoor written in Rust has been discovered to target macOS users with several interesting features. Moreover, there have been 3 variants of backdoor found masquerading under the name of Visual Studio Update. The backdoor is distributed as FAT …

The rise of malicious versions of LLMs, like dark variants of ChatGPT, is escalating cyber warfare by enabling more sophisticated and automated attacks.  These models can generate convincing phishing emails, spread disinformation, and craft targeted social engineering messages.  All these …

A new malware has been reported to be distributed by threat actors, which is likely known to be a stealthy espionage campaign going on since March 2021. This new malware backdoor has been named “Zardoor.” This malware is deployed with …

Fortinet has issued a warning regarding a critical out-of-bounds write vulnerability in FortiOS.  Remote attackers can exploit this vulnerability to execute arbitrary code, posing a significant security threat. A vulnerability known as CVE-2024-21762 (with a CVSSv3 Score of 9.6) can …

Customers of LastPass have been alerted of a fraudulent app on the Apple App Store that poses as the legitimate LastPass app in an attempt to steal personal data. Instead of being called “LastPass,” the app is called “LassPass,” and Parvati …

Network as a Service (NaaS) for Managed Security Service Providers (MSSPs) offers a revolutionary way to provide networking and security services to clients. This model enables MSSPs to provide network infrastructure and management services through a subscription model, seamlessly integrating …

Volt Typhoon, the PRC state-sponsored threat actor, has been discovered to be compromising U.S. critical infrastructure for future crises in case of a conflict with the United States. The CISA has released a security advisory for warning critical infrastructure organizations …