Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques

14/12/2024 0 Comments 0 tags

Thai government officials have emerged as the target of a new campaign that leverages a technique called DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai. “The target of

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

13/12/2024 0 Comments 0 tags

A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system (CMS) is estimated to have enabled the exfiltration of over 390,000 credentials.

Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware Injection

13/12/2024 0 Comments 0 tags

A security flaw has been disclosed in OpenWrt’s Attended Sysupgrade (ASU) feature that, if successfully exploited, could have been abused to distribute malicious firmware packages. The vulnerability, tracked as CVE-2024-54143,

DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six Years

13/12/2024 0 Comments 0 tags

The U.S. Department of Justice (DoJ) has indicted 14 nationals belonging to the Democratic People’s Republic of Korea (DPRK or North Korea) for their alleged involvement in a long-running conspiracy

Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms

13/12/2024 0 Comments 0 tags

Iran-affiliated threat actors have been linked to a new custom malware that’s geared toward IoT and operational technology (OT) environments in Israel and the United States. The malware has been

How to Generate a CrowdStrike RFM Report With AI in Tines

13/12/2024 0 Comments 0 tags

Run by the team at orchestration, AI, and automation platform Tines, the Tines library contains pre-built workflows shared by real security practitioners from across the community, all of which are

New Linux Rootkit PUMAKIT Uses Advanced Stealth Techniques to Evade Detection

13/12/2024 0 Comments 0 tags

Cybersecurity researchers have uncovered a new Linux rootkit called PUMAKIT that comes with capabilities to escalate privileges, hide files and directories, and conceal itself from system tools, while simultaneously evading

FBI Busts Rydox Marketplace with 7,600 PII Sales, Cryptocurrency Worth $225K Seized

13/12/2024 0 Comments 0 tags

The U.S. Department of Justice (DoJ) on Thursday announced the shutdown of an illicit marketplace called Rydox (“rydox.ru” and “rydox[.]cc”) for selling stolen personal information, access devices, and other tools

Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking Online

12/12/2024 0 Comments 0 tags

Cybersecurity researchers are warning that thousands of servers hosting the Prometheus monitoring and alerting toolkit are at risk of information leakage and exposure to denial-of-service (DoS) as well as remote

Gamaredon Deploys Android Spyware “BoneSpy” and “PlainGnome” in Former Soviet States

12/12/2024 0 Comments 0 tags

The Russia-linked state-sponsored threat actor tracked as Gamaredon has been attributed to two new Android spyware tools called BoneSpy and PlainGnome, marking the first time the adversary has been discovered