Two sophisticated malware campaigns discovered by HP Wolf Security use steganography to hide malicious code in Archive.org-hosted images. The attacks, deploying VIP Keylogger and 0bj3ctivity Stealer, begin with phishing emails and exploit CVE-2017-11882 to steal sensitive data. The campaig...
A sophisticated ransomware attack chain leverages a Python backdoor to deploy RansomHub ransomware, starting with SocGholish JavaScript malware disguised as browser updates. The attack features rapid lateral movement, advanced EDR evasion, credential theft tools, and AWS S3 bucket targetin...
A sophisticated phishing campaign targeting Google Ads users has emerged, using malicious advertisements to steal advertiser credentials. The attackers create fake Google Ads that redirect to phishing sites hosted on Google Sites, capturing login credentials and 2FA codes. Once compromised...
North Korean state-sponsored hackers have stolen $659 million in cryptocurrency through major heists targeting exchanges and blockchain companies, according to US, South Korean, and Japanese authorities. Chainalysis reports even higher losses of $1.34 billion in 2023 alone. The threat exte...
A widespread cyber attack campaign targeting Microsoft 365 accounts has been detected, utilizing FastHTTP Go library for automated password brute-force attempts against Azure Active Directory. With 65% of attacks originating from Brazil, the campaign achieves a 9.7% success rate in account...
