Tag: malware

Volexity has uncovered a threat actor exploiting SonicWall SMA 1000 zero day vulnerabilities before disclosure to gain root access and deploy custom malware on VPN appliances.

CERT-UA has linked UAC-0145 to a malware campaign using ClickFix CAPTCHA pages, PowerShell commands, and Android backdoors to target Ukrainian users.

Researchers have uncovered a large scale operation by threat actor Lurking Lizard, which uses fake 7 Zip installers and lookalike websites to turn victim devices into residential proxy nodes.

This week's cybersecurity roundup covers the disruption of the NetNut proxy botnet, AI driven attack techniques, browser based ransomware, phishing campaigns, malware activity, and critical vulnerabilities affecting organizations worldwide.

Researchers have uncovered Operation DragonReturn, a phishing campaign using fake Indian tax filing utilities to deploy DcRAT and steal sensitive data from taxpayers, finance teams, and tax professionals.

Security researchers have uncovered malicious npm packages linked to North Korea that impersonate Rollup polyfill tools to deliver remote access malware and steal developer credentials and sensitive data.

Kaspersky has uncovered a large scale SEO poisoning campaign that uses fake software websites and ScreenConnect to deploy AsyncRAT, enabling remote access, data theft, and persistent compromise of Windows systems.

Securonix has uncovered the VEILDROP malware campaign that abuses Blogger pages, PowerShell, and trusted Microsoft binaries to deploy the PureLogs information stealer while evading traditional security defenses.

Check Point Research has identified AI generated browser ransomware that uses Chromium File System Access API to encrypt files on Windows and Android without requiring a native payload or browser exploit.

This week's cybersecurity roundup covers the DirtyClone Linux kernel vulnerability, AI focused malware techniques, Turla's STOCKSTAY backdoor, major malware disruptions, OpenAI updates, and emerging cyber threats.

Acronis has uncovered two cyber espionage campaigns by Mustang Panda targeting Indian government and hydropower organizations using new malware and Zoho WorkDrive as a command and control channel.

Palo Alto Networks Unit 42 has uncovered the TinyRCT backdoor used by Chinese speaking threat actor CL STA 1062 to target government organizations and critical infrastructure across Southeast Asia.