Iranian state-sponsored group Charming Kitten has deployed BellaCPP, a new C++ variant of the BellaCiao malware, discovered by Kaspersky during an Asian system breach investigation. The malware, which serves as a custom payload dropper, targets organizations in the US, Middle East, and Ind...
Two malicious Python packages, zebo and cometlogger, were discovered on PyPI repository, targeting users worldwide. Zebo captures keystrokes and screenshots, while cometlogger steals sensitive data from popular platforms and monitors system activities. Both packages employ sophisticated te...
Comprehensive cybersecurity update covering LockBit developer's arrest, new threats from Lazarus Group and APT29, critical vulnerabilities in major software, and emerging security tools. Notable developments include Russian actions against Recorded Future, China-US cyber tensions, and wide...
Following a technical failure in the Rockstar 2FA phishing-as-a-service platform, a newer service called FlowerStorm has gained prominence. Both services target Microsoft 365 credentials and share similar designs, with FlowerStorm primarily attacking service industries in North America, UK...
A new cyber attack campaign leverages Microsoft Teams to distribute DarkGate malware, with attackers posing as client representatives to gain system access. The sophisticated operation involves email flooding, social engineering through Teams, and deployment of remote access tools. DarkGat...
