Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT …
Nov 11, 2024 · The disclosure comes as Wallarm revealed that threat actors are abusing Docusign APIs to send fake invoices that appear authentic in an attempt to deceive unsuspecting users and conduct phishing campaigns at scale.. The attack entails creating a legitimate, paid Docusign account that enables the attackers to change templates and use the API directly.
New Ymir Ransomware Exploits Memory for Stealthy Attacks; …
Nov 12, 2024 · The attack is notable for installing tools like Advanced IP Scanner and Process Hacker. Also utilized are two scripts that are part of the SystemBC malware, which allow for setting up a covert channel to a remote IP address for exfiltrating files that have a size greater than 40 KB and are created after a specified date.. The ransomware binary, for its part, uses the stream cipher ChaCha20 ...
The Hacker News | #1 Trusted Cybersecurity News Site
The U.S. Department of Justice (DoJ) has indicted 14 nationals belonging to the Democratic People's Republic of Korea (DPRK or North Korea) for their alleged involvement in a long-running conspiracy to violate sanctions and commit wire fraud, money laundering, and identity theft by illegally seeking employment in U.S. companies and non-profit organizations.
Bohemia and Cannabia Dark Web Markets Taken Down After Joint …
Oct 11, 2024 · "The man advertised his service on his own Telegram channels and thematic communities, as well as on a world-famous IT resource, where he positioned himself as a project developer and found like-minded people," the agency said.. It also follows the sentencing of two individuals affiliated with a Russian threat group called Armageddon (aka Gamaredon) to 15 years in prison in absentia for ...
German Police Seize 'Nemesis Market' in Major International …
Mar 24, 2024 · German authorities have announced the takedown of an illicit underground marketplace called Nemesis Market that peddled narcotics, stolen data, and various cybercrime services.. The Federal Criminal Police Office (aka Bundeskriminalamt or BKA) said it seized the digital infrastructure associated with the darknet service located in Germany and Lithuania and confiscated €94,000 ($102,107) in ...
Snowflake Breach Exposes 165 Customers' Data in Ongoing …
Jun 11, 2024 · As many as 165 customers of Snowflake are said to have had their information potentially exposed as part of an ongoing campaign designed to facilitate data theft and extortion, indicating the operation has broader implications than previously thought.
BreachForums Founder Sentenced to 20 Years of Supervised …
Jan 23, 2024 · Among the stolen items commonly sold on the platform were bank account information, Social Security numbers, personally identifying information (PII), hacking tools, breached databases, and account login information for compromised online accounts with service providers and merchants.
New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across …
Oct 7, 2024 · Cybersecurity researchers have discovered a new botnet malware family called Gorilla (aka GorillaBot) that draws its inspiration from the leaked Mirai botnet source code.. Cybersecurity firm NSFOCUS, which identified the activity last month, said the botnet "issued over 300,000 attack commands, with a shocking attack density" between September 4 and September 27, …
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively ...
Oct 9, 2024 · Microsoft makes no mention of how the two vulnerabilities are exploited in the wild, and by whom, or how widespread they are. It credited researchers Andres and Shady for reporting CVE-2024-43572, but no acknowledgment has been given for CVE-2024-43573, raising the possibility that it could be a case of patch bypass.
Update Chrome Browser Now: 4th Zero-Day Exploit Discovered in …
May 24, 2024 · The tech giant did not disclose additional technical details about the flaw, but acknowledged that it "is aware that an exploit for CVE-2024-5274 exists in the wild." It's not clear if the shortcoming is a patch bypass for CVE-2024-4947, which is also a type confusion bug in V8.