FBI confirms that North Korea-linked Lazarus APT is behind Harmony Horizon Bridge $100 million cyber heist

GlobalDefenseBot 24 January

4 minutes

The U.S. FBI attributes the $100 million cyber heist against Harmony Horizon Bridge to North Korea-linked Lazarus APT. The U.S. Federal Bureau of Investigation (FBI) this week confirmed that in June 2022 the North Korea-linked Lazarus APT group and APT38 stole $100 million worth of cryptocurrency assets from the Blockchain company Harmony Horizon Bridge. “The FBI continues […]

The post FBI confirms that North Korea-linked Lazarus APT is behind Harmony Horizon Bridge $100 million cyber heist appeared first on Security Affairs.

Chinese Hackers Exploit FortiOS Zero-Day Vulnerability to Deploy New Malware

CySecBot 24 January

1 minute

Mandiant recently reported that a group of hackers originating from China utilized a vulnerability within FortiOS SSL-VPN that had only recently been discovered, and marked as a zero-day exploit, in December. The hackers targeted both a governmen…

A closer look at malicious packages targeting Python developers

CySecBot 24 January

1 minute

In this Help Net Security video, Carlos Fernandez, Security Researcher at Sonatype, talks about how their AI system caught packages that attack Python developers with a unique tactic. Sonatype calls them RAT mutants because they’re a mix of remote acce…

Report: Cyberespionage threat actor exploits CVE-2022-42475 FortiOS vulnerability

CySecBot 23 January

1 minute

A possible Chinese cyberespionage actor has exploited a FortiOS vulnerability to successfully compromise companies.
The post Report: Cyberespionage threat actor exploits CVE-2022-42475 FortiOS vulnerability appeared first on TechRepublic.

Hackers remotely interrupting GTA Online PC Gameplay

CySecBot 23 January

1 minute

By Deeba Ahmed
PC players of GTA Online are warned of a new remote attack in which hackers can modify their character, delete stats, and ban or delete the account.
This is a post from HackRead.com Read the original post: Hackers remotely interrupting G…

Roaming Mantis Malware Returns with DNS Changer Capability

CySecBot 23 January

1 minute

By Deeba Ahmed
Roaming Mantis malware was last seen in April 2018 targeting iOS and Android devices with cryptocurrency mining malware but this time, it has new DNS changer capabilities.
This is a post from HackRead.com Read the original post: Roaming …

ChatGPT Can Be Used to Create Dangerous Polymorphic Malware

CySecBot 23 January

1 minute

The cybersecurity experts at CyberArk have provided information on the mechanism by which the ChatGPT AI chatbot can produce a new strain of polymorphic malware. Polymorphic malware could be easily made using ChatGPT. With relatively little effort or e…

Kaspersky releases 2023 predictions

CySecBot 23 January

1 minute

A new report from Kaspersky details what their digital forensics and incident response teams predict as the main 2023 threats to corporations and government agencies. Learn more about it.
The post Kaspersky releases 2023 predictions appeared first on T…

breaking news

Massive Ad fraud scheme VASTFLUX targeted over 11 million devices

GlobalDefenseBot 23 January

3 minutes

Researchers dismantled a sophisticated ad fraud scheme, dubbed VASTFLUX, that targeted more than 11 million devices. HUMAN’s Satori Threat Intelligence and Research Team dismantled a sophisticated ad fraud operation dubbed VASTFLUX. The name VASTFLUX comes from the evasion technique “fast flux” and VAST, the Digital Video Ad Serving Template that was abused by threat actors in this fraudulent scheme. The researchers […]

The post Massive Ad fraud scheme VASTFLUX targeted over 11 million devices appeared first on Security Affairs.

breaking news

Roaming Mantis uses new DNS changer in its Wroba mobile malware

GlobalDefenseBot 22 January

3 minutes

Roaming Mantis threat actors were observed using a new variant of their mobile malware Wroba to hijack DNS settings of Wi-Fi routers. Researchers from Kaspersky observed Roaming Mantis threat actors using an updated variant of their mobile malware Wroba to compromise Wi-Fi routers and hijack DNS settings. Roaming Mantis surfaced in March 2018 when hacked routers in Japan to […]

The post Roaming Mantis uses new DNS changer in its Wroba mobile malware appeared first on Security Affairs.