Malware & Threats P2Pinfect Worm Now Dropping Ransomware on Redis Servers The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads. Ionut ArghireJune 26, 2024
Malware & Threats Cyber Assault on Asian Telecoms Traced to Chinese State Hackers A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups. Ionut ArghireJune 20, 2024
Malware & Threats Highly Evasive SquidLoader Malware Targets China A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks. Ionut ArghireJune 20, 2024
Malware & Threats New BadSpace Backdoor Deployed in Drive-By Attacks The BadSpace backdoor is being distributed via drive-by attacks involving infected websites and JavaScript downloaders. Ionut ArghireJune 18, 2024
Malware & Threats Researchers Show How Malware Could Steal Windows Recall Data Cybersecurity researchers are demonstrating how malware could steal data collected by the new Windows Recall feature. Eduard KovacsJune 5, 2024
Malware & Threats TrickBot and Other Malware Droppers Disrupted by Law Enforcement The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame. Ionut ArghireMay 30, 2024
Malware & Threats New ‘Antidot’ Android Trojan Allows Cybercriminals to Hack Devices, Steal Data The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages. Ionut ArghireMay 17, 2024
Malware & Threats 400,000 Linux Servers Hit by Ebury Botnet The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected. Ionut ArghireMay 15, 2024
Malware & Threats Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks Threat actors are using DNS tunneling to track victims’ interaction with spam and to scan network infrastructures. Ionut ArghireMay 14, 2024
Malware & Threats Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices A new Android trojan named Brokewell can steal user’s sensitive information and allows attackers to take over devices. Ionut ArghireApril 26, 2024
Malware & Threats North Korean Hackers Hijack Antivirus Updates for Malware Delivery A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners. Ionut ArghireApril 24, 2024
Malware & Threats Threat Actor Uses Multiple Infostealers in Global Campaign A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide. Ionut ArghireApril 24, 2024