New Golang-based Crypto worm infects Windows and Linux servers
Experts from Intezer discovered a new and self-spreading Golang-based malware that targets Windows and Linux servers. Experts from Intezer discovered...
Month: December 2020
Emotet campaign hits Lithuania’s National Public Health Center and several state institutions
An Emotet campaign hit Lithuania, the malware has infected systems at the National Center for Public Health (NVSC) and several...
T-Mobile data breach: CPNI (Customer Proprietary Network Information) exposed
T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has...
CISA demands US govt agencies to update SolarWinds Orion software
US Cybersecurity and Infrastructure Security Agency (CISA) urges US federal agencies to update the SolarWinds Orion software by the end...
New Golang worm turns Windows and Linux servers into monero miners
Oracle Co-Founder Larry Ellison delivers a keynote address at the Oracle OpenWorld conference in 2006. A newly discovered worm turns...
The most enticing cyberattacks of 2020
In 2020, we experienced a major shift. Much of the world pitched in to limit the spread of the coronavirus,...
Kaspersky has reported hacker attacks on COVID-19 researchers
The hacker group Lazarus attacked the developers of the coronavirus vaccine: the Ministry of Health and a pharmaceutical company in...
Metasploit 2020 Wrap-Up
2020 was certainly an interesting year. There were quite a few newsworthy events and some fantastic exploit content released. Let’s...
Whitelisting an IP address in ModSecurity , WordPress troubleshooting, integration and automation.
I have been recently been using Integromat.com for some automation and integration work. IF you are wondering what it is,...
Google Docs bug could have allowed hackers to hijack screenshots
Google has addressed a bug in its feedback tool incorporated across its services that could have allowed attackers to view...
Discord Channel now available.
I have received a couple of request recently to create a discord channel but had never really had the time...
US Treasury warns of ransomware attacks on COVID-19 vaccine research
The US Treasury Department’s Financial Crimes Enforcement Network (FinCEN) warns of ransomware attacks on COVID-19 vaccine research organizations. The US...
SolarWinds hackers aimed at access to victims’ cloud assets
Microsoft says that SolarWinds hackers aimed at compromising the victims’ cloud infrastructure after deploying the Solorigate backdoor (aka Sunburst). The...
Declaring War Against Cyber Negligence
Amidst perhaps the most widespread and impactful cyberattack in history, American businesses and government agencies alike must take a drastically...
The head of Group-IB Mr. Sachkov described the portrait of a typical Russian hacker
Not only a programmer but also just a specialist with a good knowledge of mathematics can become a hacker in...
Digital Footprint Intelligence Report
Introduction The Digital Footprint Intelligence Service announces the results of research on the digital footprints of governmental, financial and industrial...
SearchDimension search hijackers: An overview of developments
Background information on SearchDimension SearchDimension is the name of a family of browser hijackers that makes money from ad clicks...
Hack The Box Walkthrough Guide To: Doctor
Disclaimer: I do NOT want you to read this if you have not even tried to attempt any of it...
Japanese Kawasaki Heavy Industries discloses security breach
Japanese giant Kawasaki Heavy Industries discovered unauthorized access to a Japanese company server from multiple overseas offices. Kawasaki Heavy Industries...
CISA releases a PowerShell-based tool to detect malicious activity in Azure, Microsoft 365
Cybersecurity and Infrastructure Security Agency (CISA) released a tool for detecting potentially malicious activities in Azure/Microsoft 365 environments. The Cybersecurity...
Threat actor is selling a dump allegedly including 2,5M customers of service provider Ho Mobile
Threat intelligence analyst discovered a threat actor that is selling a database of the Italian mobile service provider Ho mobile....
Finland confirms that hackers breached MPs’ emails accounts
The Parliament of Finland confirmed that threat actors had access to email accounts of multiple members of parliament (MPs). “Parliament...
Nefilim ransomware operators leak data stolen from Whirlpool
The American multinational manufacturer and marketer of home appliances Whirlpool was hit by the Nefilim ransomware gang. The American multinational manufacturer and marketer of home appliances Whirlpool...
Multi-platform card skimmer targets Shopify, BigCommerce, Zencart, and Woocommerce stores
Experts warn of a multi-platform credit card skimmer that can target online stores running on Shopify, BigCommerce, Zencart, and Woocommerce....
