+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Day

October 22, 2024
22
Oct

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

October 22, 2024
Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit called Gophish to deliver DarkCrystal RAT (aka DCRat) and a previously undocumented remote access trojan dubbed PowerRAT. “The campaign involves modular infection chains that are either Maldoc or HTML-based infections and require the victim’s intervention to trigger the
Read More
22
Oct

DNLU Hosts Educational Session at St. Joseph’s Convent Girls’ School, Jabalpur

October 22, 2024
Jabalpur, M.P. – The Centre for Constitutional Law (CCL) at Dharmashastra National Law University (DNLU), under the leadership of Hon’ble Vice-Chancellor Prof. (Dr.) Manoj Kumar Sinha, conducted an impactful Speed Mentoring Session at St. Joseph’s Convent Girls’ Senior Secondary School, Jabalpur. The session, aimed at educating young students about the “Importance of Fundamental Rights and...
Read More
22
Oct

Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers

October 22, 2024
Details have emerged about a now-patched security flaw in Styra’s Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Technology LAN Manager (NTLM) hashes. “The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server’s local user account to a remote server, potentially allowing...
Read More
22
Oct

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

October 22, 2024
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on compromised instances, according to new findings from Trend Micro. “In this attack, the threat actor used the gRPC protocol over h2c to evade security solutions and execute their crypto mining operations on the Docker host,” researchers Abdelrahman Esmail...
Read More
22
Oct

A Comprehensive Guide to Finding Service Accounts in Active Directory

October 22, 2024
Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without proper monitoring, they can pose a significant security risk due to their elevated privileges. This guide will walk you through how to locate and secure these accounts within Active Directory (AD), and explore how Silverfort’s solutions can help...
Read More
22
Oct

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

October 22, 2024
Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus, which are both malware loaders, are designed to steal personal data, along with downloading and executing additional payloads onto compromised hosts. Tracked under the names BlackWidow, IceNova,...
Read More
22
Oct

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

October 22, 2024
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell (SSH) protocol. The packages attempt to “gain SSH access to the victim’s machine by writing the attacker’s SSH public key in the...
Read More
22
Oct

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

October 22, 2024
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), concerns a case of heap-overflow vulnerability in the implementation of the DCE/RPC protocol. “A malicious actor with network access to vCenter Server may...
Read More
22
Oct

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

October 22, 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 (CVSS v4 score: 9.3), refers to a bug involving an unspecified third-party component that could
Read More