Russia-linked APT Secret Blizzard targets foreign embassies in Moscow with ApolloShadow malware

GlobalDefenseBot 31 July

3 minutes

Russia-linked Secret Blizzard targets foreign embassies in Moscow via ISP-level AitM attacks, deploying custom ApolloShadow malware. Microsoft researchers uncovered a cyberespionage campaign by the Russia-linked APT group Secret Blizzard (aka Turla, Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) targeting foreign embassies in Moscow. The threat actor uses an adversary-in-the-middle (AiTM) method at the ISP level to deploy custom malware called ApolloShadow. This […]

Ransomware Gangs Leverage TrickBot Malware to Steal US $724 Million in Cryptocurrency

CySecBot 31 July

1 minute

Ransomware affiliates associated with groups like Ryuk, Conti, and Diavol have increasingly relied on the modular TrickBot malware to facilitate sophisticated extortion campaigns, resulting in over US$724 million in cryptocurrency theft. Originally eme…

OnlyFans, Discord ClickFix-Themed Pages Spread Epsilon Red Ransomware

CySecBot 31 July

1 minute

Beware of Epsilon Red ransomware as attackers impersonate Discord, Twitch and OnlyFans using fake verification pages with .HTA files and ActiveX to spread malware.

Google

Silver Fox Hackers Exploit Weaponized Google Translate Tools to Deliver Windows Malware

CySecBot 31 July

1 minute

The Knownsec 404 Advanced Threat Intelligence Team has lately discovered increased activity from the Silver Fox cybercrime gang, which has been using fake versions of popular programs as weapons to spread malware in a complex cyber threat landscape. Tr…

New DoubleTrouble Banking Malware Targets Users Through Phishing Sites to Steal Credentials

CySecBot 31 July

1 minute

Researchers at zLabs have been closely monitoring the DoubleTrouble banking trojan, a rapidly evolving malware strain that has shifted its tactics to exploit unsuspecting users across Europe. Initially disseminated via phishing websites mimicking reput…

LAMEHUG: First AI-Powered Malware Targets Organizations via Compromised Official Email Accounts

CySecBot 31 July

1 minute

The Russian state-sponsored threat actor APT28, also known as Fancy Bear or Forest Blizzard, has deployed LameHug, the first publicly documented malware leveraging large language models (LLMs) for automated command generation and execution. According t…

breaking news

Researchers released a decryptor for the FunkSec ransomware

GlobalDefenseBot 31 July

4 minutes

Researchers have released a decryptor for the ransomware FunkSec, allowing victims to recover their encrypted files for free. Researchers at Avast developed a decryptor for the FunkSec ransomware. Gen Digital researchers released a decryptor for the FunkSec ransomware after cooperating with law enforcement to neutralize the threat. “Researchers at Avast developed a decryptor for the […]

Cybersecurity Trends 2025: What’s Really Coming for Your Digital Defenses

CySecBot 30 July

1 minute

Cybersecurity trends in 2025 reveal rising AI threats, quantum risks, and supply chain attacks, pushing firms to adapt or face major data and financial losses.

Threat Actors Use LNK Files to Deploy RedLoader Malware on Windows Systems

CySecBot 30 July

1 minute

Sophos analysts have identified a novel infection chain employed by the financially motivated cybercriminal group GOLD BLADE, also known as RedCurl, Red Wolf, and Earth Kapre, to deploy their custom RedLoader malware on Windows systems. This group, act…

Inc Ransomware Claims 1.2TB Data Breach at Dollar Tree

CySecBot 30 July

1 minute

The notorious INC Ransomware group is claiming responsibility for a data breach at Dollar Tree, the American retail…