A large-scale malvertising campaign dubbed "DeceptionAds" is distributing Lumma Stealer malware through fake CAPTCHA pages, generating over 1M daily ad impressions across 3,000 websites. The attack tricks users into copying malicious PowerShell commands disguised as CAPTCHA solutions, lead...
German cybersecurity agency disrupts BADBOX malware operation affecting 30,000 Android devices. The malware, discovered in October 2023, was pre-installed on various devices and combined Triada malware with PEACHPIT ad fraud botnet, enabling data theft, malware installation, and unauthoriz...
Chinese state-sponsored group Winnti (APT41) deploys new 'Glutton' PHP backdoor targeting organizations in China and US since December 2023. This sophisticated ELF-based modular malware features fileless execution, framework injection, and credential theft capabilities. Notably, the group ...
Clop ransomware gang claims responsibility for exploiting a critical vulnerability (CVE-2024-50623) in Cleo's file transfer platforms - Harmony, VLTrader, and LexiCom. The attack, following an incomplete patch from October 2023, involved deploying JAVA backdoors for data theft. This contin...
Rhode Island's RIBridges system, managing multiple public assistance programs, suffered a major data breach by the Brain Cipher ransomware gang. The incident exposed sensitive personal information including names, SSNs, and banking details of residents enrolled in programs like Medicaid, S...
