Author: Andra Andrioaie

Researchers have noticed a RAT (remote access trojan) dubbed NerbianRAT being distributed via emails. Its name comes from a malware code function’s name. NerbianRAT: How It Is Distributed Researchers from Proofpoint have recently published a report pro…

The Council together with the European Parliament has recently agreed upon a new cybersecurity directive called NIS2 that has the goal to bring about “a high common level of cybersecurity across the Union”. Once implemented, it will work on the improve…

Experts have discovered a phishing campaign that has been going on for over a year. Its target? The German automotive industry. What threat actors are trying to do is to infiltrate password-stealing malware into the victims’ systems. More Details on th…

A new Linux malware dubbed BPFdoor has been recently identified. Its targets have been Linux and Solaris systems and what’s more, is that it has passed unnoticed for over 5 years. More Details on the BPFdoor Malware BPF can be described as a Linux/Unix…

Bitter, an APT group reportedly engaged in cyber espionage activities, has been observed targeting the Bangladesh government by leveraging new malware that shows remote file execution functionalities. The campaign has been active since at least August …

If you’ve lately used Windows Print Spooler, here’s some bad news: you may have been hacked. Between July 2021 and April 2022, threat actors carried out nearly 65,000 cyberattacks through Windows’ Print Spooler application, according to a n…

A credit card stealing service is gaining traction, providing a simple and automated option for low-skilled threat actors to enter the realm of financial fraud. How Do Credit Card Skimmers Work? Credit card skimmers stand for malicious programs that ar…

Bumblebee, a freshly uncovered malware loader, is most probably the Conti syndicate’s latest creation, aimed to replace the BazarLoader backdoor leveraged for ransomware payloads delivery purposes. According to researchers, the appearance of Bumb…

Cybersecurity authorities around the world have published a list of the top 15 vulnerabilities regularly exploited by malicious actors in 2021, in collaboration with the NSA and the FBI. In a joint alert, the cybersecurity authorities recommended enter…

The US Federal Bureau of Investigation (FBI) has recently issued a warning to organizations in the Food and Agriculture (FA) sector that ransomware gangs may be more inclined to target them during harvest and planting seasons. The FBI added that while …

Researchers have recently identified three Lenovo UEFI firmware vulnerabilities of high impact located in various Lenovo laptop models that consumers use. By successfully exploiting these flaws, threat actors can deploy and execute firmware implants on…

CISA, the FBI, and the US Treasury Department have recently issued a warning that firms in the cryptocurrency and blockchain industries are being targeted by the North Korean Lazarus hacking gang. It seems that the threat actors are using trojanized cr…

A warning about a new wave of social engineering cyberattacks that distribute the IcedID malware and employ Zimbra exploits for sensitive data theft purposes has been recently issued by the Computer Emergency Response Team of Ukraine (CERT-UA). More In…

A new info-stealer is making way on the cyber threat landscape as Haskers Gang has just added to their arsenal ZingoStealer. More Details on ZingoStealer The malware, as mentioned above, named ZingoStealer, is being distributed for free to Haskers Gang…

Five serious vulnerabilities in hospital robots that served for the transportation of medical supplies have been patched by vendor Aethon. Vulnerabilities Found in Hospital Robots: More Details As recently reported in Cynerio’s public report of J…

Malicious applications masquerading as antivirus solutions on the Google Play Store have been identified by security experts. These dangerous apps contain the SharkBot trojan, whose targets are Android devices. SharkBot stands for an info-stealer whose…

Threat actors have been detected using the Spring4Shell vulnerability to install malware on victim PCs, according to security researchers. More Details on the Spring4Shell Vulnerability According to ZDNet, the Spring4Shell vulnerability, which has been…

A new META malware, an info-stealer that seems to be more and more popular among hackers, has been discovered being leveraged by threat actors in a recent malspam campaign. What Is Meta Malware? META, along with Mars Stealer and BlackGuard, is one of t…

A cryptomining malware designed particularly to target Amazon Web Services (AWS) Lambda cloud systems has been recently identified by security experts. What Happened? Denonia is the name attributed by security researchers from Cado Security to the iden…

Apparently, the Conti ransomware group is still operational and waging cyberattacks against victims worldwide, regardless of the fact that their activities had been previously leaked online. Conti Still in the Cyber Game To briefly go over Conti’s acti…

A lasting malicious campaign employed by threat actors linked to the Chinese government has been recently discovered by security experts. Its purpose is the launching of a custom malware loader by means of the VLC Media Player. A Chinese state-backed a…

Threat actors managed to get access to internal customer support and account management systems at MailChimp, the email marketing company reported on Sunday. The hackers’ goal was to perform audience data theft and lead phishing cyberattacks. MailChimp…

Borat, a new remote access trojan (RAT) with easy-to-use capabilities has emerged on the darknet markets. The malware focuses on DDoS (Distributed-Denial-of-Service) cyberattacks, ransomware distribution, and UAC bypass. How Does Borat Work? Borat is a…

A new info-stealer malware dubbed BlackGuard has been identified by security analysts. It seems that it’s put up for sale on Russian hacking forums, according to the researchers who discovered it. BlackGuard Advertised for Sale The malware has been des…

According to the Google Threat Analysis Group (TAG), a great number of threat actors are currently exploiting the event of the Russian invasion in Ukraine to launch phishing and malware cyberattacks against Eastern European and NATO countries. The cybe…

Mars Stealer, a newly released information-stealing malware variant, is gaining traction on the cyber scene. A first large-scale campaign using it has now been observed by security analysts. Mars Stealer Background Mars Stealer stands for a reimagining…

The ones who created Purple Fox malware have upgraded their malware arsenal, as currently, they are using a new FatalRAT version, a remote access trojan. Besides, its functionalities to avoid detection have been also upgraded. New FatalRAT Version Wrea…

Following the identification of a V8 vulnerability in Chrome and Edge that shows an exploit in the wild, users who employ Windows, macOS, and Linux should update Chrome builds to version 99.0.4844.84 as an out-of-band security update has been recently …

A new wave of social engineering attacks has been targeting Morgan Stanley client accounts as Morgan Stanley’s wealth and asset management subsidiary claims. Morgan Stanley Client Accounts Compromised by Social Engineering: What Happened Hackers …

Mustang Panda, a threat actor reportedly related to China, has been waging a harmful campaign with a new version of the Korplug malware known as Hodur and custom loaders for a period of at least eight months, according to security specialists. Who Is M…

The Google Play Store has seen over 100,000 downloads of malicious Android software that performs Facebook credentials theft. It seems that the application is still available for download. Android Password Stealing Malware Poses as Cartoonifier App The…

Good news for victims of Diavol ransomware. Emsisoft, the well-known cybersecurity company, has just provided a free decryptor for this ransomware family linked to the TrickBot gang. Now victims can use this free decryption tool to recover their files …

Github, the well-known code hosting platform, has recently released new analysis features that have the role to automate the identification of new security flaws before they reach production. These features are designed on machine learning-based code s…

Five major banks from Canada were impacted by an hours-long outage that got them offline. Online and mobile banking together with customer e-transfer services were blocked during this time. Canadian Online Banking Off for Hours Among the impacted Canad…

The FBI has recently announced a breach impacting several organizations belonging to US critical infrastructure sectors caused by the BlackByte ransomware. The breach has been extended over the last three months and at least 3 organizations were impact…

Molerats APT group also dubbed TA402 returns by leading a new reportedly cyberespionage campaign that employs NimbleMamba malware. NimbleMamba Malware Leveraged in New Malicious Campaign A report has been recently published by the Proofpoint researcher…

It has been discovered that a hacking group dubbed ‘ModifiedElephant’, described as an APT (advanced persistent threat) actor has been engaging in its malicious activities in secret for a decade, avoiding detection and correlation between a…

Decryptors for three popular ransomware families have been recently released by their supposed operator on the BleepingComputer forums. The ransomware operations under discussion are Maze ransomware, Egregor ransomware as well as Sekhmet ransomware. Ma…

A cyberattack resulting in data theft impacted News Corp, an American media and publishing enterprise extended across various domains like news media, book publishing, cable television, and real estate data. The company owns many news brands. Who Was T…

Medusa malware was noticed to target multiple geographic regions. Its goal? Financial fraud and online credentials theft. More Details on Medusa Malware A new report from the ThreatFabric researchers came out revealing insights into the latest methods …

A new report has been recently published where researchers state that Chinese threat actors have been targeting Taiwanese financial institutions for a period of 18 months. APT Group Targets Taiwan’s Organizations According to the Symantec experts, who …