admin 
Cybersecurity researchers at XLab have uncovered a new Android malware strain called “Wpeeper.” This sophisticated backdoor Trojan has been designed to infiltrate Android systems and execute a wide range of malicious commands, posing a significant threat to unsuspecting users. The malware is being distributed through repackaged applications on the UPtodown app store, a popular third-party … Read more
Cybersecurity experts have uncovered a series of sophisticated cyberattacks targeting poorly managed Microsoft SQL (MS-SQL) servers. The attackers, identified as the TargetCompany ransomware group, have been deploying the Mallox ransomware in a bid to encrypt systems and extort victims. This recent campaign draws unsettling parallels with previous attacks involving the Tor2Mine CoinMiner and BlueSky ransomware, … Read more
Cybersecurity communities are on high alert as threat actors have begun selling Remote Desktop Protocol (RDP) access on underground hacker forums. This alarming trend poses significant risks to individual and organizational cybersecurity, potentially allowing unauthorized access to sensitive information and critical systems. According to a recent tweet from Dark Web Informer, threat actors sell access … Read more
Threat intelligence-sharing platform VirusTotal has unveiled new research showing how AI can be used by cyber defenders to enhance malware analysis. Through the research, VirusTotal found that AI is extremely effective in analyzing malicious code, identifying 70% more malicious scripts than traditional techniques alone. Researchers also observed that AI was up to 300% more accurate … Read more
Government,Industry Specific,Security Operations The U.S. Cybersecurity and Infrastructure Security Agency is aiming to provide automated malware analysis support to all federal, state and local government agencies with a new version of its next-generation information system. See Also: Zero Trust Unleashed: Keeping Government Secrets Safer Than the Crown Jewels The agency on Wednesday announced wider availability … Read more
Security researchers have uncovered a previously undetected malware threat for macOS that exhibits characteristics of both an infostealer and spyware. Dubbed “Cuckoo” after the brood parasitic bird, this malicious code infiltrates systems and steals resources for its own gain. The malware was first spotted on April 24th, 2024 in a Mach-O binary file disguised as … Read more
BlackBerry reported a new iOS LightSpy malware, but Huntress researchers found it to be a macOS variant targeting Intel or Apple Silicon with Rosetta 2-enabled devices. This caused media confusion, as Apple’s recent spyware alert likely referred to Pegasus spyware, and there is no evidence of an iOS version in this discovery. The researchers also … Read more
The first instance of Redline using such a method is in a new variant of Redline Stealer malware that McAfee has discovered uses Lua bytecode to obfuscate its malicious code. The malware was discovered on a legitimate Microsoft repository (vcpkg) disguised within a zip file named “Cheat.Lab.2.7.2.zip,” containing an MSI installer that deployed two executables … Read more
Andrew Witty, CEO of UnitedHealth Group, detailed a sophisticated ransomware attack on Change Healthcare, a key component of the UnitedHealth network. The cybercriminals, identifying themselves as ALPHV or BlackCat, infiltrated Change Healthcare’s information technology environments, marking a significant cybersecurity breach within the healthcare sector. The cyberattack, which unfolded on the morning of February 21, 2024, … Read more
Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa. A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. With cyberattackers getting more creative, defenders must start keeping pace. If a recent wily cyber-espionage campaign against … Read more