Blog
AVRecon Botnet Leveraging Compromised Routers to Fuel Illegal Proxy Service
More details have emerged about a botnet called AVRecon, which has been observed making use of compromised small office/home office (SOHO) routers as part of a multi-year campaign active since at least May 2021. AVRecon was first disclosed by Lumen Black Lotus Labs...
Fruity Trojan Uses Deceptive Software Installers to Spread Remcos RAT
Threat actors are creating fake websites hosting trojanized software installers to trick unsuspecting users into downloading a downloader malware called Fruity with the goal of installing remote trojans tools like Remcos RAT. "Among the software in question are...
Linux Version of Abyss Locker Ransomware Targets VMware ESXi Servers
Abyss Locker is a relatively new ransomware operation that is believed to have launched in March 2023. Like other ransomware operations, the threat actors breach corporate networks, steal data for double-extortion, and encrypt devices on the network.
Rolls Royce Cyber Attack: Hacker Group Adds British Manufacturer To Victim List
Rolls Royce, a British engineering company renowned for its production of luxury cars, aircraft engines, and other advanced technological solutions, seems to have become the latest victim of a cyber attack. A threat actor group known as Network-worker Alliance has...
‘Call of Duty: Modern Warfare 2’ Game Servers Taken Offline Due to Malware Concerns
The Call of Duty: Modern Warfare 2 servers were taken offline due to the presence of a self-spreading worm virus targeting PC gamers. Hackers used hacked lobbies to spread the malware, infecting multiple players' devices with the virus.
RA Ransomware Group Claims Cyber Attack on Eastern Media International
Recently, a new hacker group calling themselves the “RA ransomware group” has emerged, taking responsibility for launching a cyber attack on Eastern Media International, a Taiwan-based company known for its extensive range of services, including warehousing and grain...
Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable
Multiple security vulnerabilities have been disclosed in the Ninja Forms plugin for WordPress that could be exploited by threat actors to escalate privileges and steal sensitive data. The flaws, tracked as CVE-2023-37979, CVE-2023-38386, and CVE-2023-38393, impact...
Hackers Deploy “SUBMARINE” Backdoor in Barracuda Email Security Gateway Attacks
"SUBMARINE comprises multiple artifacts — including a SQL trigger, shell scripts, and a loaded library for a Linux daemon — that together enable execution with root privileges, persistence, command and control, and cleanup," the agency said.
Hackers Deploy “SUBMARINE” Backdoor in Barracuda Email Security Gateway Attacks
"SUBMARINE comprises multiple artifacts — including a SQL trigger, shell scripts, and a loaded library for a Linux daemon — that together enable execution with root privileges, persistence, command and control, and cleanup," the agency said.
What Google’s Web Environment Integrity Proposal Means for Future of Open Web
A recent Google proposal of an unexpected web standard – DRM – has raised the eyebrows of the user community. Termed the “Google Web Environment Integrity API,” this proposal has sparked heated debates within the online community. Authored by four Google team members,...
FREE GUIDE