North Korean hackers behind the "Contagious Interview" campaign are evolving their malware arsenal by merging BeaverTail and OtterCookie capabilities and pioneering the use of blockchain networks as command-and-control servers. The group targets job seekers through fake recruitment scams, ...
Cybersecurity researchers have discovered a new FileFix campaign that uses sophisticated social engineering to distribute StealC malware through fake Facebook security pages. The attack tricks users into copying malicious PowerShell commands disguised as harmless PDF paths, which then down...
Iranian state-sponsored hacking groups UNC1549 and MuddyWater have launched sophisticated cyber espionage campaigns targeting global telecommunications companies through fake LinkedIn recruitment scams. UNC1549 compromised 34 devices across 11 organizations using elaborate social engineeri...
Google Cloud's Mandiant reports significantly reduced activity from the Scattered Spider cybercrime group following UK arrests, but warns organizations to use this reprieve to strengthen defenses. The group previously targeted VMware ESXi hypervisors in retail, airline, and transportation ...
Russian hackers linked to APT29 are exploiting Google's app password feature through sophisticated social engineering attacks targeting academics and Russian critics. The campaign involves impersonating U.S. State Department officials over several weeks to build trust, then tricking victim...
