Disrupting the operations of cryptocurrency mining botnets

GlobalDefenseBot 25 June

4 minutes

Cybersecurity researchers devised two attack techniques to disrupt the operations of cryptocurrency mining botnets. Akamai Researchers uncovered two novel techniques to disrupt cryptocurrency mining botnets by exploiting flaws in common mining topologies. Current methods to stop cryptocurrecy mining botnets are pool bans or infrastructure takedowns, however, both are slow and complex. Researchers developed two faster techniques exploiting […]

breaking news

Prometei botnet activity has surged since March 2025

GlobalDefenseBot 25 June

3 minutes

Prometei botnet activity has surged since March 2025, with a new malware variant spreading rapidly, Palo Alto Networks reports. Palo Alto Networks warns of a spike in Prometei botnet activity since March 2025, the researchers observed a new variant spreading rapidly. Since March 2025, Prometei botnet is targeting Linux systems for Monero mining and credential […]

New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare

CySecBot 25 June

1 minute

Wordfence exposes a sophisticated WordPress malware campaign using a rogue WordPress Core plugin. Active since 2023, it steals credit cards and credentials with advanced anti-detection.

Russian APT Hits Ukrainian Government With New Malware via Signal

CySecBot 25 June

1 minute

Russia-linked APT28 deployed new malware against Ukrainian government targets through malicious documents sent via Signal chats.
The post Russian APT Hits Ukrainian Government With New Malware via Signal appeared first on SecurityWeek.

SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data

CySecBot 24 June

1 minute

Kaspersky uncovers SparkKitty, new spyware in Apple App Store & Google Play. Steals photos, targets crypto info, active since early 2024 via malicious apps.

Androxgh0st Botnet Expands Reach, Exploiting US University Servers

CySecBot 24 June

1 minute

New CloudSEK findings show Androxgh0st botnet evolving. Academic institutions, including UC San Diego, hit. Discover how this sophisticated…

New DRAT V2 Update Enhances C2 Protocol with Shell Command Execution Capabilities

CySecBot 24 June

1 minute

A new variant of the DRAT remote access trojan (RAT), dubbed DRAT V2, has been uncovered as part of a TAG-140 campaign targeting Indian government entities. This threat actor, believed to overlap with SideCopy and linked to Transparent Tribe (aka APT36…

Threat Actors Exploit ConnectWise Configuration to Create Signed Malware

CySecBot 24 June

1 minute

Threat actors have increasingly exploited vulnerabilities and configurations in ConnectWise software to distribute signed malware, masquerading as legitimate applications. Initially observed in February 2024 with ransomware attacks linked to vulnerabil…

breaking news

Russia-linked APT28 use Signal chats to target Ukraine official with malware

GlobalDefenseBot 24 June

2 minutes

Russia-linked group APT28 uses Signal chats as an attack vector to phish Ukrainian officials with new malware strains. Russia-linked cyberespionage group APT28 is targeting Ukrainian government officials using Signal chats to deliver two new types of malware, tracked as BeardShell and SlimAgent. While Signal itself remains secure, attackers are exploiting its growing popularity in official […]

NCSC Warns of SHOE RACK Malware Targeting Fortinet Firewalls via DOH & SSH Protocols

CySecBot 24 June

1 minute

The National Cyber Security Centre (NCSC) has issued a critical alert regarding a newly identified malware, dubbed SHOE RACK, which has been observed targeting Fortinet firewalls and other perimeter devices. Developed using the Go 1.18 programming lang…