19 Jun Hackers use fake OnlyFans pics to drop info-stealing malware A malware campaign is using fake OnlyFans content and adult lures to install a remote access trojan known as ‘DcRAT,’ allowing threat actors to steal data and credentials or deploy ransomware on the infected device. […]
19 Jun Android spyware camouflaged as VPN, chat apps on Google Play Three Android apps on Google Play were used by state-sponsored threat actors to collect intelligence from targeted devices, such as location data and contact lists. […]
18 Jun Reddit hackers threaten to leak data stolen in February breach The BlackCat (ALPHV) ransomware gang is behind a February cyberattack on Reddit, where the threat actors claim to have stolen 80GB of data from the company. […]
18 Jun New Mystic Stealer malware increasingly used in attacks A new information-stealing malware named ‘Mystic Stealer,’ has been promoted on hacking forums and darknet markets since April 2023, quickly gaining traction in the cybercrime community. […]
18 Jun Microsoft confirms Azure, Outlook outages caused by DDoS attacks Microsoft has confirmed that recent outages to Azure, Outlook, and OneDrive web portals resulted from Layer 7 DDoS attacks against the company’s services. […]
17 Jun US govt offers $10 million bounty for info on Clop ransomware The U.S. State Department’s Rewards for Justice program announced up to a $10 million bounty yesterday for information linking the Clop ransomware attacks to a foreign government. […]
17 Jun Windows 11 ‘Win32 app isolation’ security feature now in preview Microsoft announced the public preview launch of Win32 app isolation, a new Windows 11 security feature specifically designed to sandbox 32-bit desktop applications. […]
17 Jun SMS delivery reports can be used to infer recipient’s location A team of university researchers has devised a new side-channel attack named ‘Freaky Leaky SMS,’ which relies on the timing of SMS delivery reports to deduce a recipient’s location. […]
16 Jun The Week in Ransomware – June 16th 2023 – Wave of Extortion The MOVEit Transfer extortion attacks continue to dominate the news cycle, with the Clop ransomware operation now extorting organizations breached in the attacks. […]
16 Jun Police cracks down on DDoS-for-hire service active since 2013 Polish police officers part of the country’s Central Cybercrime Bureau detained two suspects believed to have been involved in the operation of a long-running DDoS-for-hire service (aka booter or stresser) active since at least 2013. […]