pxa-stealer
PXA Stealer: New Python Malware Breaches 200,000 Passwords via Telegram A new information stealer, dubbed PXA Stealer, has emerged as a significant threat, compromising over 200,000 unique passwords and numerous credit card details. This Python-based malware is being distributed through Telegram channels, posing a serious risk to unsuspecting
malware
LNK Files Weaponized: New Malware Delivers Remcos Backdoor A new malware campaign is making waves in the cybersecurity world, and it's one you need to be aware of. This attack leverages malicious LNK (shortcut) files to deliver the Remcos Remote Access Trojan (RAT) onto unsuspecting Windows machines. This
ai
AI-Powered Crypto Drain: Malicious npm Package Targets Solana Wallets The rise of artificial intelligence has brought many benefits to software development, but it has also opened new doors for malicious actors. Recently, a new threat has emerged: AI-generated malicious npm packages designed to drain cryptocurrency wallets. This article delves into
bitlocker
BitLocker Under Attack: Hackers Exploit WMI for Malicious Code Execution A critical vulnerability has emerged, threatening the security of systems using BitLocker drive encryption. Hackers are now able to manipulate BitLocker registry keys via Windows Management Instrumentation (WMI) to execute malicious code with user-level privileges. This novel technique allows attackers
apt37
APT37 Weaponizes JPEGs: MSPaint Used in Sophisticated Windows Attacks In a concerning development, the North Korean-linked hacking group APT37 is now using JPEG image files to launch cyberattacks against Windows users. This sophisticated technique leverages the built-in MSPaint application to deliver malware, bypassing traditional security measures. APT37 hackers deploy new
apt37
APT37 Weaponizes JPEGs: How Hackers Use Images to Attack Windows In the ever-evolving landscape of cyber threats, a new and concerning trend has emerged: the APT37 group, linked to North Korea, is now leveraging seemingly harmless JPEG image files to deliver malware to Windows systems. This sophisticated attack vector utilizes
interlock-ransomware
Interlock Ransomware: How ClickFix Bypasses Security Defenses A new ransomware threat called Interlock is making waves in the cybersecurity world, not just for its double extortion tactics, but also for its innovative use of social engineering. This ransomware employs a technique called ClickFix to gain initial access to systems, bypassing
linux-security
Linux Servers Under Siege: Defending Against Undetectable SSH Attacks Linux servers are the backbone of countless applications and services, making them prime targets for malicious actors. A new wave of attacks, often dubbed "undetectable plague" due to its stealthy nature, is targeting Linux servers to gain persistent SSH
qilin-ransomware
Qilin Ransomware Surges as RansomHub Collapses: A New Threat Emerges The ransomware landscape is constantly shifting, with new players emerging and old ones fading away. Recently, we've witnessed a significant power shift: the rise of Qilin ransomware coinciding with the collapse of RansomHub. This article delves into the
microsoft-excel
Microsoft Excel Tightens Security: Blocking External Links to Risky Files Microsoft Excel is getting a significant security boost! In a move to protect users from potential threats, Microsoft will soon disable external workbook links to file types deemed unsafe by default. This change aims to reduce the risk of malware
rmm-tools
Silent Infiltration: How Threat Actors Abuse RMM Tools for Initial Access In today's evolving threat landscape, cybercriminals are constantly seeking new ways to infiltrate organizations. One increasingly popular tactic involves abusing legitimate Remote Monitoring and Management (RMM) tools. These tools, designed to help IT professionals manage and maintain
north-korea
Unmasking North Korea's Cyber Tactics: A Deep Dive into Illicit Access In the ever-evolving landscape of cybersecurity, North Korean threat actors continue to pose a significant challenge. Recent reports have shed light on their sophisticated technical strategies for gaining illicit access to sensitive systems and data. Understanding these