SharpSpray – Active Directory Password Spraying Tool. Auto Fetches User List And Avoids Potential Lockouts
SharpSpray is a Windows domain password spraying tool written in .NET C#. IntroductionSharpSpray is a C# port of DomainPasswordSpray with...
Security
A complete PoC exploit for CVE-2021-22005 in VMware vCenter is available online
An exploit for the recently disclosed CVE-2021-22005 vulnerability in VMware vCenter was publicly released, threat actors are already using it....
Russia-linked Nobelium APT group uses custom backdoor to target Windows domains
Microsoft discovered new custom malware, dubbed FoggyWeb, used by the Nobelium cyberespionage group to implant backdoor in Windows domains. Microsoft...
ERMAC, a new banking Trojan that borrows the code from Cerberus malware
ERMAC is a new Android banking Trojan that can steal financial data from 378 banking and wallet apps. Researchers from...
New BloodyStealer malware is targeting the gaming sector
Researchers spotted a new malware, dubbed BloodyStealer, that could allow stealing accounts for multiple gaming platforms. Researchers from Kaspersky have...
Expert found RCE flaw in Visual Studio Code Remote Development Extension
Researchers from the Italian cybersecurity firm Shielder found a remote code execution vulnerability in Visual Studio Code Remote Development Extension....
A week in security (Sept 20 – Sept 26)
Last week on Malwarebytes Labs Freedom Hosting operator gets 27 years for hosting dark web abuse sitesMicrosoft makes a bold...
Cryptoscams Cost Australians About AU$6.6 Million Every Month
From the beginning of the year to the end of August, losses due to cryptocurrency investment scams accounted for over...
Malicious software reportedly generates 39% of all internet traffic
According to experts, the share of malicious bots has been growing for a long time, but the pandemic has accelerated...
Bogus Backup Message from WhatsApp Delivers Malware to Spanish Users
Authorities in Spain have issued a warning about a phishing campaign that impersonates WhatsApp to deceive consumers into installing a...
Newly Discovered ZE Loader Targets Online Banking Users
IBM Security researchers have discovered a new form of overlay malware targeting online banking users. Dubbed ZE Loader, is a...
BloodyStealer and gaming assets for sale
Earlier this year, we covered the threats related to gaming, and looked at the changes from 2020 and the first...
StreamDivert – Redirecting (Specific) TCP, UDP And ICMP Traffic To Another Destination
StreamDivert is a tool to man-in-the-middle or relay in and outgoing network connections on a system. It has the ability...
Cloudquery – Transforms Your Cloud Infrastructure Into SQL Database For Easy Monitoring, Governance And Security
CloudQuery transforms your cloud infrastructure into queryable SQL for easy monitoring, governance and security.What is CloudQuery and why use it?CloudQuery...
Jupyter infostealer continues to evolve and is distributed via MSI installers
Cybersecurity researchers spotted a new version of the Jupyter infostealer which is distributed via MSI installers. Cybersecurity researchers from Morphisec...
Telegram is becoming the paradise of cyber criminals
Telegram is becoming an essential platform for cybercriminal activities, crooks use it but and sell any kind of stolen data...
German Federal Office for Information Security (BSI) investigates Chinese mobile phones
German Federal Office for Information Security is launching an investigation into the cybersecurity of certain Chinese mobile phones. German Federal...
Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18
School is fully back in session for kids all across the world, and for many students, that means logging back...
Malwarebytes research shows an unequal, unsafe Internet
If the Internet was as safe and as private as it is essential for everyday life—increasingly required for job applications,...
The August cyber attacks targeted a dozen Russian banks
Up to 15 Russian financial organizations were subjected to a large-scale cyberattack in August and September of this year.The first...
Exchange/Outlook Autodiscover Bug Exposed $100K Email Passwords
Guardicore Security Researcher, Amit Serper identified a critical vulnerability in Microsoft's autodiscover- the protocol, which permits for the automatic setup...
SonicWall Patches Critical Flaw in SMA 100 Products
SonicWall has released a security advisory to warn users regarding a critical flaw impacting some of its Secure Mobile Access...
Hackers Discover Technique to Make Malware Undetectable on Windows
Investigators within the cybersecurity industry have revealed a unique approach used by a threat actor to purposefully avoid detection using...
Drinik Malware is Fooling Users to Give in their Mobile Banking Details
There's a new malware, and it's wreaking havoc on Android users. Drinik is a malware that steals vital data and...
