Horns&Hooves campaign delivers NetSupport RAT and BurnsRAT
CategoryDetailsThreat ActorsUnknown, targeting private users, retailers, and service businesses.Campaign OverviewMalicious email campaign distributing JS/HTA…
DarkRaaS & CornDB: Evidence of a Coordinated Network?
Category Details Threat Actors DarkRaaS and CornDB Campaign Overview DarkRaaS emerged in October 2024, initially…
Arctic Wolf Observes Threat Campaign Targeting Palo Alto Networks Firewall Devices
CategoryDetailsKey Takeaways- Arctic Wolf observed intrusions involving Palo Alto Network firewall devices.- Affected devices downloaded…
C2 Hunting: How to Find C2 Servers with Shodan
CategoryDetailsTools for C2 Hunting- Shodan: Search for internet-connected devices.- FOFA: Asia-focused tool for device discovery.-…
Security News This Week: Andrew Tate’s ‘Educational Platform’ Was Hacked
Key DetailInformationUS Ad Data Enabling TrackingUS companies collecting digital ad data allow adversaries to cheaply…
Russian Script Kiddie Builds Massive DDoS Botnet
Key DetailsInformationThreat ActorsIndividual attacker tracked as "Matrix" by Aqua Nautilus.Campaign OverviewA Russian attacker uses publicly…
Ransomware Gangs Seek Pentesters to Boost Their Arsenal
Key DetailsInformationThreat ActorsRansomware groups like LockBit, RansomHub, PLAY, Hunters International, Akira; emerging groups recruiting skilled…
Microsoft Hacking Warning—450 Million Windows Users Must Now Act
Key DetailsInformationThreat ActorsRomCom (Russia-backed cyber threat group)Campaign OverviewExploited two zero-day vulnerabilities (CVE-2024-49039 and CVE-2024-9680) to…
SpyLoan Android malware on Google play installed 8 million times
Key DetailsInformationThreat ActorSpyLoan operatorsCampaign OverviewDiscovery of 15 SpyLoan Android malware apps on Google Play, with…
Russia arrests cybercriminal Wazawaka for ties with ransomware gangs
Key DetailsInformationThreat ActorMikhail Pavlovich Matveev (aka Wazawaka, Uhodiransomwar, m1x, Boriselcin)Campaign OverviewMatveev arrested and indicted for…