‘Codefinger’ hackers encrypting Amazon cloud storage buckets

Section Details Threat Actors Codefinger Campaign Overview Hackers are targeting Amazon Web Services (AWS) S3…

The Database Slayer: Deep Dive and Simulation of the Xbash Malware

Section Details Threat Actors Xbash malware Campaign Overview Xbash malware targets critical databases such as…

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

Category Details Threat Actors Various threat actors leveraging web backdoors, including China-nexus APT groups (e.g.,…

RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

Category Details Threat Actors RedDelta (also known by other aliases like BASIN, Mustang Panda, and…

Banshee Stealer Hits macOS Users via Fake GitHub Repositories

CategoryDetailsThreat ActorsBanshee Stealer (likely a group behind the malware campaign).Campaign Overview• New version detected in…

Fake PoC Exploit Targets Cybersecurity Researchers with Malware

Category Details Threat Actors Unidentified attackers exploiting the fake Proof-of-Concept (PoC) for CVE-2024-49113, referred to…

Black Basta’s Tactical Evolution: Deploying Zbot, DarkGate, and Bespoke Malware

Category Details Threat Actors Black Basta ransomware group Campaign Overview Phishing, social engineering (via Microsoft…

ClickFix Campaign: Fake Google Meet Alerts Spread Malware Across Windows and macOS

Category Details Threat Actors Unknown actors leveraging social engineering and fake Google Meet error messages.…

Botnets Continue to Target Aging D-Link Vulnerabilities

Category Details Threat Actors Unspecified; associated with botnets like "FICORA" (Mirai variant) and "CAPSAICIN" (Keksec…

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

Category Details Threat Actors Not specifically identified. Campaign Overview Vulnerability CVE-2024-52046 in Apache MINA allows…