SecurityTicks

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry 07/05/2023 at 18:22 By An advanced persistent threat (APT) actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. “The attack is based on a classic side-loading attack, consisting of a clean application, a malicious […]

React to this headline:

Loading spinner

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry Read More »

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks 07/05/2023 at 18:22 By Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw. The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting (XSS) that

React to this headline:

Loading spinner

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks Read More »

New Android Malware ‘FluHorse’ Targeting East Asian Markets with Deceptive Tactics

New Android Malware ‘FluHorse’ Targeting East Asian Markets with Deceptive Tactics 07/05/2023 at 18:22 By Various sectors in East Asian markets have been subjected to a new email phishing campaign that distributes a previously undocumented strain of Android malware called FluHorse that abuses the Flutter software development framework. “The malware features several malicious Android applications that mimic

React to this headline:

Loading spinner

Read More »

Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN

Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN 07/05/2023 at 18:22 By Italian corporate banking clients are the target of an ongoing financial fraud campaign that has been leveraging a new web-inject toolkit called drIBAN since at least 2019. “The main goal of drIBAN fraud operations is to infect Windows workstations inside corporate environments

React to this headline:

Loading spinner

Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN Read More »

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks 07/05/2023 at 18:22 By The North Korean state-sponsored threat actor known as Kimsuky has been discovered using a new reconnaissance tool called ReconShark as part of an ongoing global campaign. “[ReconShark] is actively delivered to specifically targeted individuals through spear-phishing emails, OneDrive links leading to document downloads,

React to this headline:

Loading spinner

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks Read More »

Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecast

Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecast 07/05/2023 at 11:16 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Former Uber CSO avoids prison for concealing data breach Joe Sullivan, the former Uber CSO who has been convicted last year

React to this headline:

Loading spinner

Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecast Read More »

Scroll to Top