Elastic Security researchers reported a three-month-long malware campaign delivering a stealthy loader, dubbed Blister, on Microsoft Windows. The malware loader further deploys second-stage payloads in memory including Cobalt Strike and BitRAT. Researchers suggest deploying...
A new phishing campaign that targets CoinSpot cryptocurrency exchange users employs a new theme revolving around withdrawal confirmations with the end goal of stealing 2FA codes. click here to read full Article Read more...
In June 2021, Kaspersky ICS CERT experts identified malware whose loader has some similarities to the Manuscrypt malware, which is part of the Lazarus APT group’s arsenal. In 2020, the group used Manuscrypt in...
Researchers have discovered another phishing campaign that utilises QR codes in an attempt to exploit… New Phishing Campaign Targets German Banks Via QR Codes on Latest Hacking News. click here to read full Article...
The messages used in a campaign recently discovered by Cofense use QR codes to deceive users of two Geman banks, Sparkasse and Volksbanken Raiffeisenbanken, and steal digital banking information. click here to read full...
The content of the phishing email, written in Korean, asks recipients to open the attached PowerPoint file to review a purchase order. It is designed to infect users with the Agent Tesla malware. click...
There’s a new phishing campaign targeting verified Twitter accounts by urging them, in an email, to update their details if they do not want to lose their verified status. Hackers are reportedly harvesting the credentials...
FortiGuard Labs found a malware sample being distributed in the wild targeting TP-link wireless routers. It leverages a recently post-authenticated RCE vulnerability released barely two weeks prior. click here to read full Article Read...
Overview This February, during our hunting efforts for threat actors using VBS/VBA implants, we came across MS Excel droppers that use hidden spreadsheets and VBA macros to drop their first stage implant. The implant...
According to Kaspersky’s Securelist threat report, the threat actor has targeted a majority of industries in the Middle East. The affected entities are located in Armenia, Cyprus, Egypt, Jordan, Lebanon, Palestine, Syria, and Turkey....
Trend Micro researchers discovered a new cryptocurrency-related campaign that abuses a legitimate Russian RAT known as Safib Assistant via a newer version of the malware called SpyAgent. click here to read full Article Read...
Researchers have discovered a new cryptocurrency-related malware campaign in the wild. Identified as “SpyAgent, this… Latest SpyAgent Malware Campaign Abuses Legit RATs To Target Devices on Latest Hacking News. click here to read full...
Since the end of August 2021, Proofpoint researchers observed multiple high-volume campaigns leveraging customized, actor-owned landing pages spoofing major German banks like Volksbank and Sparkasse. click here to read full Article Read more on...
In a new attack campaign, the Aggah threat group is deploying clipboard hijacking code to replace a victim’s cryptocurrency address with an address to redirect cryptocurrency transactions. Researchers observed seven different cryptocurrency addresses in...
Researchers from Mandiant Threat Intelligence have claimed with high confidence that the Ghostwriter (UNC1151) disinformation campaign is associated with the government of Belarus. click here to read full Article Read more on computer hacking...
In this campaign, operators deployed clipboard hijacking code that replaces a victim’s wallet address with an address specified by the actor. This code also deploys several malicious code files. click here to read full...
