Security News

North Koreans clone open source projects to plant backdoors, steal credentials
2025-01-29 23:29

Stealing crypto is so 2024. Supply-chain attacks leading to data exfil pays off better? North Korea's Lazarus Group compromised hundreds of victims across the globe in a massive secret-stealing...

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks
2025-01-28 16:34

A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targeting users in Poland and Germany. The...

Europeans targeted with new Tor-using backdoor and infostealers
2025-01-28 12:57

A financially motivated threat actor has been targeting German and Polish-speaking users with info-stealing malware and TorNet, a previously undocumented .NET backdoor that leverages the Tor...

New VPN Backdoor
2025-01-27 12:02

A newly discovered VPN backdoor uses some interesting tactics to avoid detection: When threat actors use backdoor malware to gain access to a network, they want to make sure all their hard work...

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet
2025-01-25 11:12

Who could be so interested in chips, manufacturing, and more, in the US, UK, Europe, Russia... Someone has been quietly backdooring selected Juniper routers around the world in key sectors...

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers
2025-01-23 14:55

Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the...

Cryptojacking, backdoors abound as fiends abuse Aviatrix Controller bug
2025-01-13 21:00

This is what happens when you publish PoCs immediately, hm? "Several cloud deployments" are already compromised following the disclosure of the maximum-severity vulnerability in Aviatrix...

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
2025-01-13 13:33

A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform has come under active exploitation in the wild to deploy backdoors and cryptocurrency...

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems
2025-01-13 06:01

No less than 4,000 unique web backdoors previously deployed by various threat actors have been hijacked by taking control of abandoned and expired infrastructure for as little as $20 per domain....

Over 4,000 backdoors hijacked by registering expired domains
2025-01-08 17:34

Over 4,000 abandoned but still active web backdoors were hijacked and their communication infrastructure sinkholed after researchers registered expired domains used for commanding them. [...]