City Officials of Grass Valley Negotiates with the Handlers of Ransomware Attack
The city of Grass Valley is one of the latest victims of a ransomware attack. The operators of the ransomware...
News
Malevolent PyPI Packages Detected Filching Developer Data
Repositories of software packages have become a frequent target for supply chain attacks. Reports concerning malware attacks on prominent repository...
Google Plans to Ban ‘Sugar Dating’ Apps From September
Google is all set to remove ‘Super Dating' applications from the Play Store in order to make the Android app...
Security Researchers Discovered Crimea Manifesto Buried in VBA Rat
On Thursday, Hossein Jazi and the Threat Intelligence team at Malwarebytes released a report revealing a new threat actor that...
More evidence suggests that DarkSide and BlackMatter are the same group
Researchers found evidence that the DarkSide ransomware gang has rebranded as a new BlackMatter ransomware operation. BleepingComputer found evidence that...
WordPress Download Manager Plugin was affected by two flaws
An attacker could exploit a vulnerability in the WordPress Download Manager plugin, tracked as CVE-2021-34639, to execute arbitrary code under...
Disaster planning with Lesley Carhart, and the slim chance of a critical infrastructure “big one”: Lock and Code S02E14
The 2021 attacks on two water treatment facilities in the US—combined with ransomware attacks on an oil and gas supplier...
Ransomware Attempt Volume Touching Over 300 Million, Sets Record
A new investigation report has been published by SonicWall network security organization in which it stated that ransomware attacks have...
Hacker Uses Credential Phishing to Gain Access Into PayPal Account
Analysts from Cofense Phishing Defense Center recently found a unique PayPal credential phishing attack. Phishing is a harmful technique that...
Exploit Code Released for a Critical Flaw in Linux Kernel eBPF on Ubuntu Machines
Cybersecurity researcher Manfred Paul revealed the details of the code for abusing a critical flaw in the Linux eBPF (Extended...
Russia’s APT29 is Actively Serving WellMess/WellMail Malware
A year ago, the United Kingdom, the USA, and Canada released a coordinated advisory, during the global pandemic, revealing a...
Evidence Indicates Russia’s SVR is Still Using ‘WellMess’ Malware, Despite US Warnings
President Joe Biden's appeal for Vladimir Putin to crack down on cyberattacks emanating from within Russia appears to have failed...
GhostEmperor, a new Chinese-speaking threat actor targets Southeast Asia
Kaspersky experts spotted a previously undocumented Chinese-speaking threat actor, tracked as GhostEmperor, that is targeting Microsoft Exchange flaws in attacks...
Security Affairs newsletter Round 325
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
Threat actors leaked data stolen from EA, including FIFA code
Threat actors that hacked Electronic Arts in June have leaked full data dump stolen from the company after the failure...
SolarWinds hackers breached 27 state attorneys’ offices
Microsoft Office 365 email accounts of employees at 27 US Attorneys’ offices were breached by the Russia-linked SVR group as part of...
Seven-Fold Surge in Dark Web Ads Providing Corporate Network Access
In the latest study, researchers at Positive Technologies have documented the evolution of hacker-placed ads on the Dark Web from...
Bot that helps hackers write code
The Copilot service developed by Microsoft and GitHub specialists, designed to simplify the work of programmers, can be used by...
Wiper Malware Used in Attack Against Iranian Railway
The cyber-attack that crippled Iran's national railway system at the beginning of the month was caused by a disk-wiping malware...
Two Belarusian Arrested in Black Box ATM Attack
The Polish authorities have detained two individuals committing so-called ‘Black Box’ attacks, targeting ATMs, whereby criminal offenders attach electronic devices...
Following a Ransomware Cyberattack, D-BOX Stated it is Gradually Restarting Operations
After a ransomware cyberattack on its internal information-technology systems, D-BOX Technologies Inc. says it is progressively resuming operations, with restoration...
Android Banking Trojan Vultur uses screen recording for credentials stealing
Experts spotted a new strain of Android banking Trojan dubbed Vultur that uses screen recording and keylogging for the capturing...
CVE-2021-3490 – Pwning Linux kernel eBPF on Ubuntu machines
Researcher published an exploit code for a high-severity privilege escalation flaw (CVE-2021-3490) in Linux kernel eBPF on Ubuntu machines. The...
LemonDuck no longer settles for breadcrumbs
LemonDuck has evolved from a Monero cryptominer into LemonCat, a Trojan that specializes in backdoor installation, credential and data theft,...
