Researchers identified a sophisticated cyberattack through a dormant Python Package Index (PyPI) package named Django-log-tracker, which was unexpectedly updated to deploy the NovaSentinel stealer malware. This discovery highlights a significant …
Windows Malware Dropped From Fake Software Developers Job Offers Scheme
February 24, 2024 – Phylum, a leader in cybersecurity research, has unveiled a sophisticated malware campaign aimed at software developers seeking employment. This alarming scheme, identified in collaboration with Palo …
Huge Surge In Attacks Exploiting User Credentials To Hack Enterprises
There are currently billions of compromised credentials available on the Dark Web, making it the easiest route for criminals to exploit legitimate accounts. Info-stealing malware, which is meant to obtain …
Researchers Unveild Apple’s Shortcuts Vulnerability
Researchers uncovered the vulnerability in Apple’s Shortcuts application, which could leave users’ privacy at risk. This vulnerability highlights the importance of maintaining constant and rigorous security measures to protect sensitive …
LockBit Gang Money Flow Uncovered : New Strain Under Development
Over the past few years, LockBit, a ransomware-as-a-service (RaaS) operation, has been linked to multiple security incidents affecting organizations worldwide. Yet, they appear to have experienced a lot of logistical, …
ScreenConnect Security Flaw Exploited In The Wild By Attackers
The ScreenConnect software is a popular choice for remote access among organizations worldwide. However, recent vulnerabilities have raised concerns about potential exploitation by attackers. Specifically, these vulnerabilities could allow attackers to …
New SSH-Snake Malware Abuses SSH Credentials To Spread Itself In The Network
Threat actors abuse SSH credentials to gain unauthorized access to systems and networks. By exploiting weak or compromised credentials, they can execute malicious activities. SSH credential abuse provides a stealthy …
How to Analyse Crypto Malware in ANY.RUN Sandbox ?
ANY.RUN, an interactive malware sandbox, has published a comprehensive analysis of the growing threat that crypto-malware poses in a time when it is more important than ever to have strong …
Russian Government Software Hijacked to Install Konni RAT
A critical cybersecurity incident recently occurred where the Konni Remote Access Trojan (RAT), a highly covert and sophisticated malware that specializes in data exfiltration, infiltrated the software systems of the …
New Leak Shows Business Side of China’s APT Menace
February 22, 2024 2 Comments A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side …