Malware & Threats - Security Ticks

Indian APT Targeting Mediterranean Ports and Maritime Facilities

APT, India, Malware & Threats, Maritime / SecurityTicks

Indian APT Targeting Mediterranean Ports and Maritime Facilities 2024-07-30 at 17:01 By Ionut Arghire The SideWinder APT has been targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea in recent attacks. The post Indian APT Targeting Mediterranean Ports and Maritime Facilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

React to this headline:

Indian APT Targeting Mediterranean Ports and Maritime Facilities Read More »

Thousands Download New Mandrake Android Spyware Version From Google Play

Android trojan, Google Play, Malware & Threats, Mobile & Wireless, spyware / SecurityTicks

Thousands Download New Mandrake Android Spyware Version From Google Play 2024-07-30 at 13:16 By Ionut Arghire Five Android applications containing the Mandrake spyware have been downloaded over 32,000 times from Google Play since 2022. The post Thousands Download New Mandrake Android Spyware Version From Google Play appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Thousands Download New Mandrake Android Spyware Version From Google Play Read More »

Network of 3,000 GitHub Accounts Used for Malware Distribution

GitHub, Malware, Malware & Threats, Stargazer Goblin / SecurityTicks

Network of 3,000 GitHub Accounts Used for Malware Distribution 2024-07-25 at 14:16 By Ionut Arghire Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories. The post Network of 3,000 GitHub Accounts Used for Malware Distribution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Network of 3,000 GitHub Accounts Used for Malware Distribution Read More »

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine

Andariel, APT45, Lazarus, Malware & Threats, Mandiant, Nation-State, North Korea, Ransomware / SecurityTicks

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine 2024-07-25 at 14:16 By Ryan Naraine A fresh Mandiant report documents North Korea’s APT45 as a distinct hacking team conducting cyberespionage and ransomware operations. The post Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine appeared first on SecurityWeek. This article is

React to this headline:

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine Read More »

Google Boosts Chrome Protections Against Malicious Files

Chrome, Malware & Threats, Safe Browsing / SecurityTicks

Google Boosts Chrome Protections Against Malicious Files 2024-07-25 at 12:16 By Ionut Arghire Google has announced improved protections for Chrome users when downloading files from the internet. The post Google Boosts Chrome Protections Against Malicious Files appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Google Boosts Chrome Protections Against Malicious Files Read More »

Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident

Malware & Threats / SecurityTicks

Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident 2024-07-24 at 19:16 By Kevin Townsend Sygnia discovered what it believes to be a variant of the GhostEmperor infection chain leading to the Demodex rootkit – which was first seen and described in 2021. The post Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber

React to this headline:

Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident Read More »

Telegram Zero-Day Enabled Malware Delivery

Malware, Malware & Threats, Telegram, Zero-Day / SecurityTicks

Telegram Zero-Day Enabled Malware Delivery 2024-07-23 at 15:16 By Ionut Arghire The EvilVideo zero-day vulnerability in Telegram for Android allowed threat actors to send malicious files disguised as videos. The post Telegram Zero-Day Enabled Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Telegram Zero-Day Enabled Malware Delivery Read More »

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams

CrowdStrike, Malware, Malware & Threats, phishing, scam / SecurityTicks

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams 2024-07-22 at 13:47 By Eduard Kovacs The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery. The post CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams Read More »

Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns

APT41, China APT, Cyberwarfare, Malware & Threats, Mandiant, Nation-State, Winnti / SecurityTicks

Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns 2024-07-18 at 22:01 By Ryan Naraine Chinese government-backed hacking team caught breaking into organizations in shipping, logistics and automotive sectors in Europe and Asia. The post Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns appeared first on SecurityWeek. This

React to this headline:

Chinese Hacking Group APT41 Infiltrates Global Shipping and Tech Sectors, Mandiant Warns Read More »

APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer

exploited, Malware & Threats, Void Banshee, Zero-Day / SecurityTicks

APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer 2024-07-16 at 19:16 By Ionut Arghire The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer. The post APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer appeared first on SecurityWeek. This article is an excerpt

React to this headline:

APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer Read More »

Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations

Malware, Malware & Threats, sentenced, Tracking & Law Enforcement, Zeus / SecurityTicks

Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations 2024-07-15 at 14:31 By Ionut Arghire Vyacheslav Igorevich Penchukov was sentenced to nine years in prison for his role in the Zeus and IcedID malware operations. The post Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations appeared

React to this headline:

Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations Read More »

Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident

Advance Auto Parts, Data Breaches, Identity & Access, Malware & Threats, MFA, Scattered Spider, Snowflake / SecurityTicks

Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident 2024-07-12 at 17:31 By Ionut Arghire Advance Auto Parts says the personal information of 2.3 million was compromised after hackers accessed its Snowflake account. The post Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident appeared first on SecurityWeek. This

React to this headline:

Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident Read More »

‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools

CrystalRay, CVE-2019-18394, CVE-2021-3129, CVE-2022-44877, Fraud & Identity Theft, Malware & Threats, SSH-Snake / SecurityTicks

‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools 2024-07-11 at 18:01 By Ionut Arghire A threat actor tracked as CrystalRay has hit 1,500 victims since February, stealing credentials and deploying backdoors. The post ‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools appeared first on SecurityWeek. This article

React to this headline:

‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools Read More »

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited

Adobe, Hyper-V, Incident Response, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities, Zero-Day / SecurityTicks

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited 2024-07-09 at 22:04 By Ryan Naraine Patch Tuesday: Microsoft patches more than 140 security vulnerabilities in the Windows ecosystem, including a pair of exploited zero-days. The post Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited Read More »

Adobe Issues Critical Patches for Multiple Products, Warns of Code Execution Risks

Adobe, Adobe Commerce, Malware & Threats, Patch Tuesday, Vulnerabilities / SecurityTicks

Adobe Issues Critical Patches for Multiple Products, Warns of Code Execution Risks 2024-07-09 at 19:49 By Ryan Naraine Adobe documents at least seven code execution bugs affecting Adobe Premiere Pro, Adobe InDesign and Adobe Bridge on Windows and macOS. The post Adobe Issues Critical Patches for Multiple Products, Warns of Code Execution Risks appeared first

React to this headline:

Adobe Issues Critical Patches for Multiple Products, Warns of Code Execution Risks Read More »

Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals

Malware & Threats, Tracking & Law Enforcement / SecurityTicks

Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals 2024-07-03 at 22:31 By Ryan Naraine European law enforcement agency announces the takedown of nearly 600 Cobalt Strike servers linked to criminal activity. The post Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals Read More »

Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys

Malware & Threats, Polyfill / SecurityTicks

Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys 2024-07-03 at 17:01 By Ionut Arghire Censys has discovered more than 380,000 hosts, including major platforms, still referencing the malicious polyfill.io domain. The post Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys Read More »

Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies

Cisco, cyberespionage, exploited, Featured, Malware & Threats, Velvet Ant, Zero-Day / SecurityTicks

Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies 2024-07-02 at 12:16 By Ionut Arghire Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant. The post Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies Read More »

In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability

In Other News, Malware & Threats / SecurityTicks

In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability 2024-06-28 at 16:31 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Korean ISP delivers malware to customers, Temu sued for allegedly spying on users, Microsoft patches a critical Dataverse vulnerability. The post In Other News: Malware Delivered by ISP,

React to this headline:

In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability Read More »

Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity

Malware & Threats, Polyfill, supply chain, Supply Chain Security / SecurityTicks

Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity 2024-06-28 at 12:46 By Ionut Arghire Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions. The post Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity appeared first on SecurityWeek. This article is

React to this headline:

Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity Read More »