Malware Gigabyte firmware component can be abused as a backdoor by May 31, 2023 by May 31, 2023 Researchers warn that the UEFI firmware in many motherboards made by PC hardware manufacturer… 0 FacebookTwitterPinterestEmail
PhishingSecurity GoldenJackal APT and its malicious toolset by May 23, 2023 by May 23, 2023 GoldenJackal is an APT group, active since 2019, that usually targets government and diplomatic… 0 FacebookTwitterPinterestEmail
PhishingSecurity Analysis of the CloudWizard APT framework by May 19, 2023 by May 19, 2023 In March 2023, we uncovered a previously unknown APT campaign in the region of… 0 FacebookTwitterPinterestEmail
Malware New APT targets South and Southeast Asia with custom-written backdoor by May 16, 2023 by May 16, 2023 Lancefly, an APT group, is using a custom-written backdoor in attacks targeting government, aviation,… 0 FacebookTwitterPinterestEmail
Malware Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign by May 15, 2023 by May 15, 2023 May 15, 2023Ravie LakshmananCyber Threat / Malware Government, aviation, education, and telecom sectors located… 0 FacebookTwitterPinterestEmail
Malware New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows by May 12, 2023 by May 12, 2023 May 12, 2023Ravie LakshmananLinux / Malware A previously undocumented and mostly undetected variant of… 0 FacebookTwitterPinterestEmail
Malware Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor by April 25, 2023 by April 25, 2023 Apr 25, 2023Ravie LakshmananCyber Threat / PowerShell An Iranian nation-state threat actor has been… 0 FacebookTwitterPinterestEmail
PhishingSecurity Tomiris called, they want their Turla malware back by April 24, 2023 by April 24, 2023 Introduction We introduced Tomiris to the world in September 2021, following our investigation of… 0 FacebookTwitterPinterestEmail
PhishingSecurity Following the Lazarus group by tracking DeathNote campaign by April 12, 2023 by April 12, 2023 The Lazarus group is a high-profile Korean-speaking threat actor with multiple sub-campaigns. We have… 0 FacebookTwitterPinterestEmail
PhishingSecurity Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack by April 3, 2023 by April 3, 2023 On March 29, Crowdstrike published a report about a supply chain attack conducted via… 0 FacebookTwitterPinterestEmail