Cybercrime, the Roaming Mantis smishing campaign now targets Europe
Kaspersky cybersecurity experts: The link in the sms directs or to a phishing page imitating the Apple website or it downloads Wroba malware on Android devices.
Cybercrime, Owowa steals Microsoft Exchange credentials
Kaspersky cybersecurity experts: It’s a IIS module that steals data entered by a user when logging into OWA. It also allows remote access to targeted servers.
Cyber Espionage, IronHusky targets Defense and IT companies with MysterySnail
Kaspersky cybersecurity experts: The Chinese APT exploits the CVE-2021-40449 zero-day vulnerability in the Win32k kernel driver and the malware to escalate privileges.
Cybercrime, WildPressure targets also the macOS platform
Kaspersky cybersecurity experts: Milum malware has been retooled with a PyInstaller bundle containing a trojan dropper Windows and macOS.
Cybercrime, Bizarro targets customers of 70 banks in Europe and South America
Kaspersky cybersecurity experts: The malware attacks Germany, Spain, Portugal, France, Italy, Chile, Argentina and Brazil.
Cyber Espionage, Chinese hackers exploit anti virus flaws to strike
Recorded Future cybersecurity experts: Unit 61419 bought small English AV batches from Western companies through intermediaries.
Cybersecurity, Zero-day exploit in Desktop Window Manager
It’s the CVE-2021-28310, discovered by Kaspersky and linked to escalation of privilege (EoP). It has just been patched, but cybercrime use it.
Cyber Espionage, Lazarus targets Defense industry with ThreatNeedle
Kaspersky cybersecurity experts: The North Korea APT’s malware, a backdoor, moves laterally through infected networks and extracts confidential information.
Cybercrime, DeathStalker has developed a new Windows backdoor
Bleeping Computer cybersecurity experts: The PowerShell-based PowerPepper expoits new obfuscation, execution, and masquerading tricks.
Cybercrime: here it comes Ghimob, last mobile banking trojan
Kaspersky cybersecurity experts: The malware, designed by Guildma, abuses Accessibility Mode and exploits email to spread.