Beware of the new phishing technique “file archiver in the browser” that exploits zip domains

“file archiver in the browser” is a new phishing technique that can be exploited by phishers when victims visit a .ZIP domain. A new phishing technique called “file archiver in the browser” can be used by phishers to “emulate” a file archiver software in a web browser when a victim visits a .ZIP domain. The […]

The post Beware of the new phishing technique “file archiver in the browser” that exploits zip domains appeared first on Security Affairs.

May 30, 2023
Read More >>

All Future Military Wargames To Include Elements From All Three Defence Forces

New Delhi: Amid efforts by the government to enhance integration and jointness among the three services, it has been decided that all war games to be carried out by services must include elements from all three armed forces.At present, the exercises that are conducted individually by the respective services include their elements only but from now on, they will include elements from all three

May 30, 2023
Read More >>

Lockbit ransomware attack on MCNA Dental impacts 8.9M individuals

Managed Care of North America (MCNA) Dental disclosed a data breach that impacted more than 8.9 million individuals. Managed Care of North America (MCNA) Dental suffered a data breach that impacted 8,923,662 patients. MCNA Dental is one of the largest US dental care and oral health insurance providers. The security breach exposed the personal information […]

The post Lockbit ransomware attack on MCNA Dental impacts 8.9M individuals appeared first on Security Affairs.

May 29, 2023
Read More >>

New Go-written GobRAT RAT targets Linux Routers in Japan

A new Golang remote access trojan (RAT), tracked as GobRAT, is targeting Linux routers in Japan, the JPCERT Coordination Center warns. JPCERT/CC is warning of cyberattacks against Linux routers in Japan that have been infected with a new Golang remote access trojan (RAT) called GobRAT. Threat actors are targeting Linux routers with publicly exposed WEBUI to execute […]

The post New Go-written GobRAT RAT targets Linux Routers in Japan appeared first on Security Affairs.

May 29, 2023
Read More >>

Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks

Experts warn of phishing attacks that are combining the use of compromised Microsoft 365 accounts and .rpmsg encrypted emails. Trustwave researchers have observed threat actors using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts in a phishing campaign aimed at stealing Microsoft credentials. RPMSG files are used to deliver e-mails with Rights-Managed Email Object Protocol enabled. […]

The post Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks appeared first on Security Affairs.

May 29, 2023
Read More >>

Industrial automation giant ABB disclosed data breach after ransomware attack

Swiss electrification and automation technology giant ABB confirmed it has suffered a data breach after a ransomware attack. ABB has more than 105,000 employees and has $29.4 billion in revenue for 2022. On May 7, 2023, the Swiss multinational company, leading electrification and automation technology provider, suffered a cyber attack that reportedly impacted its business operations. […]

The post Industrial automation giant ABB disclosed data breach after ransomware attack appeared first on Security Affairs.

May 28, 2023
Read More >>

New Bandit Stealer targets web browsers and cryptocurrency wallets

Bandit Stealer is a new stealthy information stealer malware that targets numerous web browsers and cryptocurrency wallets. Trend Micro researchers discovered a new info-stealing malware, dubbed Bandit Stealer, which is written in the Go language and targets multiple browsers and cryptocurrency wallets. At this time, the malware only targets Windows systems, but experts pointed out […]

The post New Bandit Stealer targets web browsers and cryptocurrency wallets appeared first on Security Affairs.

May 28, 2023
Read More >>

Is the BlackByte ransomware gang behind the City of Augusta attack?

The city of Augusta in Georgia, U.S., admitted that the recent IT system outage was caused by a cyber attack. While the City of Augusta revealed that a cyberattack caused the recent IT outage, the BlackByte ransomware gang has claimed responsibility for the attack. The attack took place on May 21, the administrator at the City […]

The post Is the BlackByte ransomware gang behind the City of Augusta attack? appeared first on Security Affairs.

May 27, 2023
Read More >>

New Buhti ransomware operation uses rebranded LockBit and Babuk payloads

The recently identified Buhti operation targets organizations worldwide with rebranded LockBit and Babuk ransomware variants. Researchers from Symantec discovered a new ransomware operation called Buhti (aka Blacktail) that is using LockBit and Babuk variants to target Linux and Windows systems worldwide. The ransomware operation hasn’t its own ransomware payload, however, it uses a custom information […]

The post New Buhti ransomware operation uses rebranded LockBit and Babuk payloads appeared first on Security Affairs.

May 27, 2023
Read More >>