Lazarus Group Uses npm Brandjacking Campaign to Target Developers

North Korean Lazarus Group targets npm developers with brandjacking packages that mimic trusted tools, drop malware and put credentials at risk.

·

Brandjacking, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Lazarus, Malware, Security

¶¶¶¶¶

China-Linked TA4922 Hackers Target UK, Europe With New SilentRunLoader Malware

Proofpoint says TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.

·

Atlas RAT, China, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, DLL, Malware, Phishing, Proofpoint, RomulusLoader, Security, SilentRunLoader, TA4922, ValleyRAT, Winos4.0

¶¶¶¶¶

Iran’s Nimbus Manticore Used Trojanized Zoom Installers Against US Firms

Iran’s Nimbus Manticore hackers used trojanized Zoom installers to deploy malware against US firms during a wider IRGC linked cyber campaign.

·

CPR, Cyber Attack, Cyber-Attacks, cybersecurity, Iran, Malware, MiniFast, Nimbus Manticore, SCAM, Security, UNC1549

¶¶¶¶¶

FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack

Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.

·

ClickFix, Cloudflare, Cyber Attack, Cyber-Attacks, cybersecurity, FBI, Hacking News, Infostealer, Kash Patel, Malware, Security

¶¶¶¶¶

RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers.

·

ASUS, Botnet, Cyber Attack, Cyber-Attacks, cybersecurity, IoT, Malware, Mirai, RondoDox, Routers, Security

¶¶¶¶¶

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

·

Cyber Attack, Cyber-Attacks, cybersecurity, GitHub, Malware, Megalodon, SafeDep, Security, Supply Chain

¶¶¶¶¶

Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign

Government Backed Hackers abused Cloudflare storage services in a Malaysian espionage campaign involving hidden C2 systems and data exfiltration.

·

Cloudflare, Cyber Attack, Cyber Espionage, Cyber-Attacks, cybersecurity, Malaysia, Malware, Oasis Security, Phishing, Privacy, Security, Spying

¶¶¶¶¶

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…

·

Azerbaijan, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Malware, Microsoft, MS Exchange, Oil and Gas, Security

¶¶¶¶¶

China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage

A new Darktrace report reveals how Chinese hackers use fake Apple and Yahoo sites and the FDMTP malware framework to spy on organisations.

·

Apple, China, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Security, Twill Typhoon, Yahoo

¶¶¶¶¶

Why Canadian Telecom Providers Are Prime Targets for Cyberattacks

Canadian telecom providers face mounting cyber threats from ransomware, SIM swapping, data breaches, and nation-state attacks targeting critical infrastructure.

·

Canada, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, Privacy, Security, SIM Swapping, Telecom

¶¶¶¶¶

00110010.com

00110010.com

Category: Cyber-Attacks