A long-running espionage campaign by attackers using tools associated with Chinese hacking groups has breached multiple telecom operators in an Asian country since at least 2021, with evidence suggesting activity …
New Security Vulnerability Let Attackers Microsoft Corporate Email Accounts
A newly discovered security vulnerability allows attackers to impersonate Microsoft corporate email accounts, significantly increasing the risk of phishing attacks. Security researcher Vsevolod Kokorin, also known as Slonser, found this …
Slack Warns Russians Users About 30 Days Account Suspension
The popular corporate messaging platform Slack has warned its Russian users that their accounts will be suspended within 30 days, citing compliance with sanctions and export control laws imposed by …
Threat Actor Server Exposed: Nmap, SQLMap & Backdoor for Hacking
The Research Team has identified an exposed web server used to target the Taiwanese Freeway Bureau and a local data center. The server’s administrator employed open-source tools such as Nmap, …
Fickle Stealer Attacking Windows Machine To Steal Sensitive Data
Hackers often abuse stealers to steal login credentials, financial data, and identity theft data hidden in the infected computer systems. Stealer attacks are a low-risk and highly lucrative way for …
Fortra Warns of Hard-Coded Password Vulnerability in The Filecatalyst
Fortra has issued a critical security advisory regarding a hard-coded password vulnerability in its FileCatalyst software, explicitly affecting the TransferAgent component. CVE-2024-5275 vulnerability poses a significant risk to users, potentially …
Hackers Weaponizing Vortax Meeting Software To Attack macOS Users
Threat actors leverage meeting software applications and tools to penetrate weak security loopholes, infiltrate secure settings and organizations, steal highly confidential information, and restrict organizational functions. Recorded Future’s Insikt group …
How Difficult is Analyzing Malware Shielded by Themida and VMProtect – SOC/DFIR Guide
Researchers analyzed six malware families that are using the protectors Themida and VMProtect. None of the samples used code virtualization, significantly simplifying the analysis, as only one sample had anti-debugging …
Hackers Using Weaponized Word Documents In QR Code Phishing Attacks
Hackers often abuse weaponized Word docs, as they can contain macros that contain or exploit flaws inside those Word files to run destructive code upon being opened by the intended …
IntelBroker Claiming Leak of Apple’s Internal Tools
A notorious figure known as IntelBroker has claimed to have leaked a trove of Apple’s internal tools. The announcement was made via a post on the social media platform Twitter …