LATEST

A number of phishing attacks have been connected to Kimsuky, a threat actor associated with North Korea. Sending emails from Russian sender addresses is a component of the attacks. The ultima

According to Palo Alto Networks, North Korean threat actors connected to Jumpy Pisces, APT45, and Andariel used Play. It is the first known instance of an underground ransomware network and a

Kaspersky: Ymir, a ransomware family, was used in an attack two days after RustyStealer, a stealer malware. It is thought that the ransomware was installed by gaining unauthorized access to t

FamousSparrow is connected to a cyberattack that targeted a Mexican research institute and a trade association in the United States. The threat actor launches a web shell on an Internet Infor

The Goot loader malware targets users who are looking into whether Bengal cats are legal in Australia. When victims search for specific terms, such as legal documents, the malware is installe

Telegram is used as a command-and-control (C2) communication mechanism in a new Golang-based backdoor. It may have Russian roots, according to Netskope Threat Labs. Malware is made to detect

A recent malware campaign uses a Linux virtual instance with a backdoor to infect Windows systems. Codenamed CRON#TRAP, the "intriguing" campaign begins with a malicious Windows shortcut (LNK

A new strain of Android banking malware has infected more than 1,500 Android devices. Threat actors can carry out fraudulent banking transactions thanks to ToxicPanda. The malware is thought

Microsoft is drawing attention to Storm-2372, an emerging threat cluster. Since August 2024, it has been linked to a fresh wave of cyberattacks targeting various industries. In Europe, North

Kaspersky: Lazarus Group took control of compromised devices by using a zero-day exploit. The vulnerability in question is CVE-2024-4947, a type confusion bug that Google fixed in the middle