Nevada Ransomware Has Released Upgraded Locker

GlobalDefenseBot 1 February

3 minutes

Researchers from Resecurity have identified a new version of Nevada Ransomware which recently emerged on the Dark Web right before the start of 2023. Resecurity, California-based cybersecurity company protecting Fortune 500 globally, has identified a new version of Nevada Ransomware which recently emerged on the Dark Web right before the start of 2023. The actors […]

The post <strong>Nevada Ransomware Has Released Upgraded Locker</strong> appeared first on Security Affairs.

breaking news

TrickGate, a packer used by malware to evade detection since 2016

GlobalDefenseBot 1 February

3 minutes

TrickGate is a shellcode-based packer offered as a service to malware authors to avoid detection, CheckPoint researchers reported. TrickGate is a shellcode-based packer offered as a service, which is used at least since July 2016, to hide malware from defense programs. A packer (aka “Crypter” and “FUD”) implements a series of functionalities to make it harder for […]

The post TrickGate, a packer used by malware to evade detection since 2016 appeared first on Security Affairs.

Microsoft OneNote Attachments Become the Latest Method to Spread Malware

CySecBot 31 January

1 minute

With Microsoft disabling macros by default on Office documents, cybercriminals are left needing another means to launch malware that’s victim-supported by default.

breaking news

Pro-Russia group Killnet targets US healthcare with DDoS attacks

GlobalDefenseBot 31 January

2 minutes

The Pro-Russia group Killnet is launching a series of DDoS attacks against the websites of US healthcare organizations and hospitals. The Pro-Russia group Killnet launched a series of DDoS attacks against US healthcare organizations and hospitals. The group announced the attacks on its Telegram channel, calling for action against the US government healthcare. The list of targets […]

The post Pro-Russia group Killnet targets US healthcare with DDoS attacks appeared first on Security Affairs.

A glut of wiper malware hits Ukrainian targets

CySecBot 30 January

1 minute

ESET researchers have discovered yet another wiper malware used to target Ukrainian organizations. Dubbed SwiftSlicer, it is thought to be wielded by the Sandworm APT. Simultaneously, the Ukranian CERT has confirmed that the attackers who recently aime…

Critical Realtek Vulnerability Impacting IoT Devices Worldwide

CySecBot 30 January

1 minute

By Deeba Ahmed
This is a critical vulnerability affecting almost 190 models of devices from 66 different manufacturers.
This is a post from HackRead.com Read the original post: Critical Realtek Vulnerability Impacting IoT Devices Worldwide

breaking news

Sandworm APT group hit Ukrainian news agency with five data wipers

GlobalDefenseBot 30 January

3 minutes

The Ukrainian (CERT-UA) discovered five different wipers deployed on the network of the country’s national news agency, Ukrinform. On January 17, 2023, the Telegram channel “CyberArmyofRussia_Reborn” reported the compromise of the systems at the Ukrainian National Information Agency “Ukrinform”. The Ukrainian Computer Emergency Response Team (CERT-UA) immediately investigated the claims and as of January 27, […]

The post Sandworm APT group hit Ukrainian news agency with five data wipers appeared first on Security Affairs.

Come to the dark side: hunting IT professionals on the dark web

CySecBot 30 January

14 minutes

We have analyzed more than 800 IT job ads and resumes on the dark web. Here is what the dark web job market looks like.

New Research Uncovers Threat Actor Behind Infamous Golden Chickens Malware-as-a-Service

CySecBot 30 January

1 minute

The identity of the individual behind the Golden Chickens malware-as-a-service has been uncovered by cybersecurity experts. The perpetrator, known online as “badbullzvenom,” has been identified in the real world. An extensive 16-month inves…

breaking news

UNC2565 threat actors continue to improve the GOOTLOADER malware

GlobalDefenseBot 30 January

5 minutes

The threat actors behind the GOOTLOADER malware continues to improve their code by adding new components and implementing new obfuscation techniques. Mandiant researchers reported that the UNC2565 group behind the GOOTLOADER malware (aka Gootkit) continues to improve their code by adding new components and implementing new obfuscation techniques. Gootkit runs on an access-a-as-a-service model, it is used […]

The post UNC2565 threat actors continue to improve the GOOTLOADER malware appeared first on Security Affairs.