Cybercrime, new global DHL themed phishing campaign
It’s tailored on the victim’s email. A link redirects to a fake company site, where user is asked to digit the password. Goal: to steal and harvest credentials.
Cybercrime, the global Guloader campaign continues
The email text changes, but the system is always the same. Xz attachment contains an exe, the malware itself, which should load other payloads. Today, however, it is unknown which.
Cyber Espionage, Lazarus targets Defense industry with ThreatNeedle
Kaspersky cybersecurity experts: The North Korea APT’s malware, a backdoor, moves laterally through infected networks and extracts confidential information.
Cybersecurity, anomaly in Microsoft account linked to aliases
I discover that I have one. Formally it does not exist, but it has other phone numbers. The company unveals the mystery, but only in part. Bug?
Cybersecurity, VMware released updates to solve many vulnerabilities
The riskiest was the CVE-2021-21972. It was caused by gaps in the validation of user inputs by the vROP plugin in the vCenter Server Web Application.
Cyber Espionage, Ocean Lotus targeted Vietnamese human rights defenders
Amnesty International: The APT (aka APT32) is behind several spyware attacks between 2018 and November 2020.
Cybercrime, false quotation spreads Guloader again
The email Xz attachment contains an executable, the malware itself. This should load other payloads, but it is currently unknown what they are.
Cybersecurity, Silver Sparrow targets Mac devices and the new M1 Chips
The malware has been discovered by a Malwarebytes, Red Canary and VMware Carbon Black research. However, today it doesn’t delivery additional payload.
Anonymous declares war on the military junta in Myanmar
The hactivists target the government sites and help the population to communicate. Furthermore, they are creating a site to document the violent repression.
Cybercrime, new Agent Tesla campaign uses PayPal as bait
The email attachment contains an exe, the malware itself. Objective: to steal information and exfiltrate it via mail.