Security News

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP
2024-12-16 09:09

Cybersecurity researchers have discovered a new PHP-based backdoor called Glutton that has been put to use in cyber attacks targeting China, the United States, Cambodia, Pakistan, and South...

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action
2024-12-14 11:33

Germany's Federal Office of Information Security (BSI) has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold...

Germany blocks BadBox malware loaded on 30,000 Android devices
2024-12-13 15:22

Germany's Federal Office for Information Security (BSI) has disrupted the BadBox malware operation pre-loaded in over 30,000 Android IoT devices sold in the country. [...]

Germany sinkholes BadBox malware pre-loaded on Android devices
2024-12-13 15:22

Germany's Federal Office for Information Security (BSI) has disrupted the BadBox malware operation pre-loaded in over 30,000 Android IoT devices sold in the country. [...]

Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms
2024-12-13 11:44

Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology (OT) environments in Israel and the United States. The malware has been...

New stealthy Pumakit Linux rootkit malware spotted in the wild
2024-12-12 22:35

A new Linux rootkit malware called Pumakit has been discovered that uses stealth and advanced privilege escalation techniques to hide its presence on systems. [...]

New IOCONTROL malware used in critical infrastructure attacks
2024-12-12 20:46

Iranian threat actors are utilizing a new malware named IOCONTROL to compromise Internet of Things (IoT) devices and OT/SCADA systems used by critical infrastructure in Israel and the United States. [...]

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service
2024-12-11 18:02

The Russian nation-state actor tracked as Secret Blizzard has been observed leveraging malware associated with other threat actors to deploy a known backdoor called Kazuar on target devices...

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools
2024-12-11 15:13

A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tipping off endpoint detection and response...

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms
2024-12-11 14:07

Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the...