Security News

RansomHub-linked EDR-killing malware spotted in the wild
2024-08-19 01:52

In brief Malware that kills endpoint detection and response software has been spotted on the scene and, given it's deploying RansomHub, it could soon be prolific. A look inside the malware indicates it's not as dangerous as it appears at first glance, provided proper precautions are taken.

Azure domains and Google abused to spread disinformation and malware
2024-08-17 13:00

A clever disinformation campaign engages several Microsoft Azure and OVH cloud subdomains as well as Google search to promote malware and spam sites. [...]

Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware
2024-08-16 13:08

Cybersecurity researchers have shed light on a sophisticated information stealer campaign that impersonates legitimate brands to distribute malware like DanaBot and StealC. The activity cluster,...

Ransomware gang deploys new malware to kill security software
2024-08-15 18:01

RansomHub ransomware operators have been spotted deploying new malware to disable Endpoint Detection and Response (EDR) security software in Bring Your Own Vulnerable Driver (BYOVD) attacks [...]

Black Basta-Linked Attackers Target Users with SystemBC Malware
2024-08-14 17:13

An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to "multiple intrusion attempts" with the goal of conducting credential theft and...

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions
2024-08-10 14:30

An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websites masquerading as popular software....

New AMD SinkClose flaw helps install nearly undetectable malware
2024-08-09 16:56

AMD is warning about a high-severity CPU vulnerability named SinkClose that impacts multiple generations of its EPYC, Ryzen, and Threadripper processors. The vulnerability allows attackers with...

Malware force-installs Chrome extensions on 300,000 browsers, patches DLLs
2024-08-09 15:19

An ongoing and widespread malware campaign force-installed malicious Google Chrome and Microsoft Edge browser extensions in over 300,000 browsers, modifying the browser's executables to hijack...

StormBamboo Compromises ISP, Spreads Malware
2024-08-09 13:42

New research from cybersecurity company Volexity revealed details about a highly sophisticated attack deployed by a Chinese-speaking cyberespionage threat actor named StormBamboo. StormBamboo compromised an ISP to modify some DNS answers to queries from systems requesting legitimate software updates.

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals
2024-08-09 04:30

The sophistication of cyber threats has escalated dramatically, with malicious actors' deploying advanced tactics, techniques, and procedures to exploit vulnerabilities and evade detection, according to Darktrace. "The threat landscape continues to evolve, but new threats often build upon old foundations rather than replacing them. While we have observed the emergence of new malware families, many attacks are carried out by the usual suspects that we have seen over the last few years, still utilizing familiar techniques and malware variants," comments Nathaniel Jones, Director of Strategic Threat and Engagement at Darktrace.