New PowerDrop Malware Targeting U.S. Aerospace Industry

07/06/2023 0 Comments 0 tags

An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop. “PowerDrop uses advanced techniques to evade detection such as deception, encoding,

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

07/06/2023 0 Comments 0 tags

A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers. “The main purpose

Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

06/06/2023 0 Comments 0 tags

Thousands of adware apps for Android have been found to masquerade as cracks or modded versions of popular apps to redirect users to serve unwanted ads to users as part

5 Reasons Why IT Security Tools Don’t Work For OT

06/06/2023 0 Comments 0 tags

Attacks on critical infrastructure and other OT systems are on the rise as digital transformation and OT/IT convergence continue to accelerate. Water treatment facilities, energy providers, factories, and chemical plants

Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability – Update Now!

06/06/2023 0 Comments 0 tags

Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild. Tracked as CVE-2023-3079, the vulnerability

Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals

06/06/2023 0 Comments 0 tags

Threat actors associated with the Cyclops ransomware have been observed offering an information stealer malware that’s designed to capture sensitive data from infected hosts. “The threat actor behind this [ransomware-as-a-service] promotes its

Chinese PostalFurious Gang Strikes UAE Users with Sneaky SMS Phishing Scheme

06/06/2023 0 Comments 0 tags

A Chinese-speaking phishing gang dubbed PostalFurious has been linked to a new SMS campaign that’s targeting users in the U.A.E. by masquerading as postal services and toll operators, per Group-IB. The fraudulent

Zyxel Firewalls Under Attack! Urgent Patching Required

06/06/2023 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed two recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The

The Annual Report: 2024 Plans and Priorities for SaaS Security

06/06/2023 0 Comments 0 tags

Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to SaaS ransomware

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

06/06/2023 0 Comments 0 tags

Cybersecurity researchers have unearthed a new ongoing Magecart-style web skimmer campaign that’s designed to steal personally identifiable information (PII) and credit card data from e-commerce websites. A noteworthy aspect that sets