Cyber – Page 162 – Welcome to APS Law

Jun

Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

June 4, 2024Cyber

A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts. The attack chain, per Fortinet FortiGuard Labs, involves a Microsoft Excel file that carries an embedded VBA macro to initiate the infection, “The attacker uses a multi-stage malware...

Jun

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

June 4, 2024Cyber

Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign. “We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake’s platform,” the company said in a joint statement along with CrowdStrike and Google-owned Mandiant....

Jun

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

June 4, 2024Cyber

Cyber attacks involving the DarkGate malware-as-a-service (MaaS) operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of the threat actors to continuously stay ahead of the detection curve. The updates have been observed in version 6 of DarkGate released in March 2024...

Jun

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

June 4, 2024Cyber

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2017-3506 (CVSS score: 7.4), the issue concerns an operating system (OS) command injection vulnerability that could be exploited to obtain unauthorized

Jun

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

June 3, 2024Cyber

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that’s designed to drop a remote access trojan (RAT) on compromised systems. The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a “logger for gulp and gulp plugins.” It has been downloaded 175 times...

Jun

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

June 3, 2024Cyber

Law enforcement authorities behind Operation Endgame are seeking information related to an individual who goes by the name Odd and is allegedly the mastermind behind the Emotet malware. Odd is also said to go by the nicknames Aron, C700, Cbd748, Ivanov Odd, Mors, Morse, Veron over the past few years, according to a video released...

Jun

SASE Threat Report: 8 Key Findings for Enterprise Security

June 3, 2024Cyber

Threat actors are evolving, yet Cyber Threat Intelligence (CTI) remains confined to each isolated point solution. Organizations require a holistic analysis across external data, inbound and outbound threats and network activity. This will enable evaluating the true state of cybersecurity in the enterprise. Cato’s Cyber Threat Research Lab (Cato CTRL, see more details below) has...

Jun

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

June 3, 2024Cyber

Now-patched authorization bypass issues impacting Cox modems that could have been abused as a starting point to gain unauthorized access to the devices and run malicious commands. “This series of vulnerabilities demonstrated a way in which a fully external attacker with no prerequisites could’ve executed commands and modified the settings of millions of modems, accessed...

Jun

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

June 3, 2024Cyber

The North Korea-linked threat actor known as Andariel has been observed using a new Golang-based backdoor called Dora RAT in its attacks targeting educational institutes, manufacturing firms, and construction businesses in South Korea. “Keylogger, Infostealer, and proxy tools on top of the backdoor were utilized for the attacks,” the AhnLab Security Intelligence Center (ASEC) said...

Jun

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

June 3, 2024Cyber

Fake web browser updates are being used to deliver remote access trojans (RATs) and information stealer malware such as BitRAT and Lumma Stealer (aka LummaC2). “Fake browser updates have been responsible for numerous malware infections, including those of the well-known SocGholish malware,” cybersecurity firm eSentire said in a new report. “In April 2024, we observed...

1 … 160 161 162 163 164 … 201

Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

SASE Threat Report: 8 Key Findings for Enterprise Security

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta