Category Security

A threat activity cluster associated with the Chinese and Russian cybercrime ecosystems has been observed using a new malware designed to load Cobalt Strike onto infected machines. dubbing silk loader This malware from Finnish cybersecurity company WithSecure utilizes DLL sideloading…

Some of the malware designed to load Cobalt Strike beacons onto the victim’s machine has been traced back to both Chinese and Russian actors. In a new report, Finnish security vendor WithSecure claimed to have detected “SilkLoader” in several human-operated…

March 16, 2023Rabbi LakshmananCryptojacking / Cyberattack Cryptojacking group known as Team TNT It is suspected behind a previously undiscovered strain of malware used to mine the Monero cryptocurrency on compromised systems. This comes from Cado Security, which discovered the sample…

The UK’s leading security agency claims ChatGPT and tools like it pose a low risk, effectively democratizing cybercrime for the masses, but for those with “high technical competence”. I warn you that it might be useful. David C, Technical Director…

March 16, 2023Rabbi LakshmananCyber ​​Crime / Cryptocurrency A coalition of European and US law enforcement agencies has announced the takedown of ChipMixer, an unlicensed cryptocurrency mixer that began operating in August 2017. “ChipMixer software blocked the blockchain trail of funds,…

According to Secureworks, the number of business email compromise (BEC) incidents doubled last year, displacing ransomware as the most prevalent cybercrime category. A threat detection and response company Learning from Incident Response Reports from hundreds of real-world incidents called for…

March 16, 2023Rabbi LakshmananCyber ​​attack/vulnerability Multiple attackers, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to compromise an unnamed federal agency in the United States. This disclosure is a joint advisory issued by the Cybersecurity…

Last year’s edition of Security Navigator pointed out that manufacturing appears to be completely overrepresented in the cyber-extortion victim dataset. Neither the number of companies nor the average revenue stood out in particular to explain this. Manufacturing is also the…

March 16, 2023Rabbi LakshmananZero-day / Vulnerability On March 15, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the security vulnerability affecting Adobe ColdFusion to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation. Added. The critical…

A twisted tale of two Teslas and a deepfake sandwich. All of this is discussed in the latest edition of the “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault. WARNING: This podcast may contain nuts, adult…