Category Security

Security vendors claim that of the nearly 10 million .org domains in circulation, only 1.2% have fully implemented DMARC to mitigate the risk of phishing. EasyDMARC surveyed over 9.9 million verified .org email domains and found that only 376,497 (3.8%)…

March 22, 2023Rabbi Lakshmanancyber threat intelligence North Korean Advanced Persistent Threat (APT) Actor Dubbed scar craft uses weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware. According to multiple reports from the AhnLab Security Emergency Response Center (ASEC),…

After uncovering audacious attempts to steal tens of millions of dollars, security experts warn of a growing threat from business email compromise (BEC) attacks that impersonate victims’ vendors and suppliers. The e-mail in question was sent to an insurance company…

March 22, 2023Rabbi LakshmananDevOpsSec / Malware NuGet repositories have been targeted in a new “sophisticated and highly malicious attack” aimed at infecting .NET developer systems with cryptocurrency stealer malware. 13 malicious packages downloaded over 160,000 times in the past month…

Ransomware and data breaches were the most prominent cyber threats to affect the European transport sector last year, according to ENISA, with incidents of the former nearly doubling. The EU security agency’s industry-first Threat Landscape Report covers the period from…

March 22, 2023Rabbi LakshmananNetwork Security / Cyber ​​Threat Threat group tracked as Ref2924 has been observed deploying never-before-seen malware in attacks targeting entities in South and Southeast Asia. The malware, dubbed NAPLISTENER by Elastic Security Labs, is an HTTP listener…

March 22, 2023Rabbi LakshmananCyber ​​Crime / Hacking In a flurry of events, BreachForums’ current administrator, Baphomet, said in an update on March 21, 2023 that the hacking forum was officially removed, but stressed that “it’s not the end”. . In…

Attackers have been observed using the open source package manager NuGet to create malicious packages that target .NET developers. According to JFrog, a software package management company, this discovery represents the first instance of a package containing malicious code found…

An Advanced Persistent Threat (APT) known as CommonMagic has been observed targeting administrative organizations in conflict zones in Russia and Ukraine. According to an advisory issued today by Kaspersky, CommonMagic has been active since at least September 2021, with the…

From January 2022 to January 2023, more than 2,400 fraudulent pages targeting Arabic-speaking job seekers were discovered in 13 countries. The findings were published by Group IB security researchers in an advisory released today. Among them, risk protection analysts Sharef…