Cybercrime, more than 23,000 hacked databases available on forums-Telegram
ZDNet cybersecurity experts: The collection (estimated at around 50GB and 13 billion user record) have originated from Cit0Day.in.
Cybercrime, QuakBot exploits APP DIVISION ApS certificates to spread
The QBot malspam campaign continues to spread exploiting companies certificates to sign the exe file with malware.
Cybercrime, the new ransomware RegretLocker targets Windows VMs
The cybersecurity experts: The malware doesn’t contain a long-winded ransom note and uses email for communication. It encypts files with .mouse extention.
Cybercrime, new Dridex campaign on false invoices
The emails contain an xlsm attachment which, if opened, contacts a random link from an internal list and downloads a DLL. This starts the malware infection.
Cybercrime, the UPS campaign from Dridex goes to download Zeppelin-Buran
A doc file is downloaded from the link in the email which, if opened, activates the ransomware infection chain. This,can exfiltrate the data as well as encrypt it.
Cybersecurity, new severe RCE vulnerability on WebLogic Server
The company: It is remotely exploitable without authentication, letting remote attacker to take control of an affected system. Patch the CVE-2020-14750 now!
Cybercrime, Dridex strikes again with fake emails from real companies
New malspam campaign: the xlsm attachment, if opened, contacts a random link from an internal list and downloads the DLL that starts the malware infection.
Cybercrime, threat actors continue to exploit CVE-2020-1472 vulnerability
Microsoft cybersecurity experts: It allows an elevation of privilege in Netlogon protocol. Update the systems now!
Cybercrime, QuakBot hides behind OOO Vertical and APPI CZ certificates
The QBot malspam campaign continues to spread exploiting companies certificates to sign the exe file with malware.
Cybercrime, doubleextortion.com declares war on ransomware double extortion
The project, created by cybersecurity expert Luca Mella, has already found that the phenomenon is transversal. It affects big and small companies. Even in sectors not at "cyber risk".