Cyber – Page 172 – Welcome to APS Law

+91-9820096678

Mon - Sat 09:00-22:00

Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

March 19, 2024Cyber

A new variant of a data wiping malware called AcidRain has been detected in the wild that’s specifically designed for targeting Linux x86 devices. The malware, dubbed AcidPour, is compiled for Linux x86 devices, SentinelOne’s Juan Andres Guerrero-Saade said in a series of posts on X. “The new variant […] is an ELF binary compiled...

Mar

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

March 19, 2024Cyber

A new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT. Israeli cybersecurity company Perception Point is tracking the activity under the moniker Operation PhantomBlu. “The PhantomBlu operation introduces a nuanced exploitation method, diverging from NetSupport RAT’s typical delivery mechanism by leveraging OLE (Object

Mar

E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials

March 19, 2024Cyber

A 31-year-old Moldovan national has been sentenced to 42 months in prison in the U.S. for operating an illicit marketplace called E-Root Marketplace that offered for sale hundreds of thousands of compromised credentials, the Department of Justice (DoJ) announced. Sandu Boris Diaconu was charged with conspiracy to commit access device and computer fraud and possession...

Mar

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

March 18, 2024Cyber

A new elaborate attack campaign has been observed employing PowerShell and VBScript malware to infect Windows systems and harvest sensitive information. Cybersecurity company Securonix, which dubbed the campaign DEEP#GOSU, said it’s likely associated with the North Korean state-sponsored group tracked as Kimsuky. “The malware payloads used in the DEEP#GOSU represent a

Mar

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

March 18, 2024Cyber

Fortra has released details of a now-patched critical security flaw impacting its FileCatalyst file transfer solution that could allow unauthenticated attackers to gain remote code execution on susceptible servers. Tracked as CVE-2024-25153, the shortcoming carries a CVSS score of 9.8 out of a maximum of 10. “A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow

Mar

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

March 18, 2024Cyber

Cybersecurity researchers have discovered a new malware campaign that leverages bogus Google Sites pages and HTML smuggling to distribute a commercial malware called AZORult in order to facilitate information theft. “It uses an unorthodox HTML smuggling technique where the malicious payload is embedded in a separate JSON file hosted on an external website,” Netskope Threat Labs

Mar

WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

March 18, 2024Cyber

WordPress users of miniOrange’s Malware Scanner and Web Application Firewall plugins are being urged to delete them from their websites following the discovery of a critical security flaw. The flaw, tracked as CVE-2024-2172, is rated 9.8 out of a maximum of 10 on the CVSS scoring system. It impacts the following versions of the two plugins...

Mar

APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

March 18, 2024Cyber

The Russia-linked threat actor known as APT28 has been linked to multiple ongoing phishing campaigns that employ lure documents imitating government and non-governmental organizations (NGOs) in Europe, the South Caucasus, Central Asia, and North and South America. “The uncovered lures include a mixture of internal and publicly available documents, as well as possible actor-generated

Mar

Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer

March 16, 2024Cyber

Cybersecurity researchers have found a number of GitHub repositories offering cracked software that are used to deliver an information stealer called RisePro. The campaign, codenamed gitgub, includes 17 repositories associated with 11 different accounts, according to G DATA. The repositories in question have since been taken down by the Microsoft-owned subsidiary. “The repositories look

Mar

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

March 15, 2024Cyber

A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution. Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known as Spectre v1 (CVE-2017-5753). The approach combines speculative execution and race conditions. “All the common synchronization primitives implemented

1 … 170 171 172 173 174 … 176

Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta