The latest ZLoader malware variant (2.9.4.0) features advanced DNS tunneling, enhanced C2 communications, and improved ransomware deployment capabilities. With sophisticated anti-analysis features and a two-stage deployment process linked to Black Basta ransomware, this evolution demonstra...
Brazilian hacker Junior Barros De Oliveira faces U.S. charges for a $3.2M Bitcoin extortion scheme after breaching a Brazilian subsidiary of a New Jersey company in 2020. He allegedly stole data of 300,000 customers and demanded 300 bitcoin from the CEO, later reducing his demand to 75 bit...
ZAGG Inc. suffered a data breach through a compromised third-party BigCommerce app, FreshClicks, exposing customer names, addresses, and payment card information between October 26-November 7, 2024. The company is offering affected customers free credit monitoring and has notified authorit...
Apache Traffic Control has patched a critical SQL injection vulnerability (CVE-2024-45387, CVSS 9.9) affecting versions 8.0.1 and earlier. The flaw allows privileged users to execute arbitrary SQL commands through PUT requests. Users should upgrade to version 8.0.2 immediately to address t...
Iranian state-sponsored group Charming Kitten has deployed BellaCPP, a new C++ variant of the BellaCiao malware, discovered by Kaspersky during an Asian system breach investigation. The malware, which serves as a custom payload dropper, targets organizations in the US, Middle East, and Ind...
