#threat-actors
#threat-actors

[ follow ]

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

A new malware, FrigidStealer, is being distributed by the threat actor TA2727 using fake update lures.

TA2727 is part of a threat ecosystem working with other financially motivated actors to spread malware.

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

North Korean threat actors are using npm packages to spread BeaverTail malware and a new RAT loader, indicating advanced obfuscation techniques.

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

A new malware named DslogdRAT has been discovered, exploiting a patched vulnerability in Ivanti Connect Secure (ICS).

Hackers now sending physical malicious letters, Swiss authorities warn

Threat actors have devised sophisticated attacks using counterfeit letters to trick victims into downloading malware disguised as safety apps.

Threat Actors Increasingly Target macOS

macOS is increasingly targeted by threat actors with specific malware and rising vulnerabilities reported for the operating system.

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

More_eggs malware is expanding its malware-as-a-service operation with new families including RevC2 and Venom Loader.

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

A new malware, FrigidStealer, is being distributed by the threat actor TA2727 using fake update lures.

TA2727 is part of a threat ecosystem working with other financially motivated actors to spread malware.

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

North Korean threat actors are using npm packages to spread BeaverTail malware and a new RAT loader, indicating advanced obfuscation techniques.

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

A new malware named DslogdRAT has been discovered, exploiting a patched vulnerability in Ivanti Connect Secure (ICS).

Hackers now sending physical malicious letters, Swiss authorities warn

Threat actors have devised sophisticated attacks using counterfeit letters to trick victims into downloading malware disguised as safety apps.

Threat Actors Increasingly Target macOS

macOS is increasingly targeted by threat actors with specific malware and rising vulnerabilities reported for the operating system.

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

More_eggs malware is expanding its malware-as-a-service operation with new families including RevC2 and Venom Loader.

moremalware

#cybersecurity

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Russian-aligned threat actors are exploiting Signal's linked devices feature to compromise accounts through malicious QR codes.

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Cisco has identified that the Chinese threat actor Salt Typhoon gained access to U.S. telecommunications companies using legitimate credentials and a known security flaw.

Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited-CISA Sounds Alarm

CISA has documented new vulnerabilities due to active exploitation, emphasizing the importance of prompt security updates.

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Threat actors exploit AWS misconfigurations to launch phishing campaigns, increasing risks for organizations.

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

Affiliates from the Black Basta ransomware group are transitioning to CACTUS, sharing malicious tools to maintain persistent control over infected systems.

7-year-old vulnerability exploited in Salt Typhoon attack

Salt Typhoon exploits old vulnerabilities and stolen credentials, highlighting the critical need for stronger identity security and proactive measures against cyber threats.

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Russian-aligned threat actors are exploiting Signal's linked devices feature to compromise accounts through malicious QR codes.

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Cisco has identified that the Chinese threat actor Salt Typhoon gained access to U.S. telecommunications companies using legitimate credentials and a known security flaw.

Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited-CISA Sounds Alarm

CISA has documented new vulnerabilities due to active exploitation, emphasizing the importance of prompt security updates.

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Threat actors exploit AWS misconfigurations to launch phishing campaigns, increasing risks for organizations.

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

Affiliates from the Black Basta ransomware group are transitioning to CACTUS, sharing malicious tools to maintain persistent control over infected systems.

7-year-old vulnerability exploited in Salt Typhoon attack

Salt Typhoon exploits old vulnerabilities and stolen credentials, highlighting the critical need for stronger identity security and proactive measures against cyber threats.

morecybersecurity

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

Sniper Dz facilitates phishing attacks and has over 140,000 active phishing websites, allowing cybercriminals, even those with little tech knowledge, to easily conduct scams.

#deepfakes

The summer of 2024: A season of disinformation

The summer of 2023 has seen unprecedented events that fuel misinformation and the misuse of AI technology.

Generative AI poses threat to election security, federal intelligence agencies warn

Generative AI poses a serious threat to election security, both domestically and internationally.

The summer of 2024: A season of disinformation

The summer of 2023 has seen unprecedented events that fuel misinformation and the misuse of AI technology.

Generative AI poses threat to election security, federal intelligence agencies warn

Generative AI poses a serious threat to election security, both domestically and internationally.

moredeepfakes

Summer Olympics: What IT Teams Need to Do Before & During the Event for Their Businesses

Threat actors exploit excitement of Paris Olympics, targeting online users for financial gain.

[ Load more ]

#threat-actors#threat-actors

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Hackers now sending physical malicious letters, Swiss authorities warn

Threat Actors Increasingly Target macOS

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Hackers now sending physical malicious letters, Swiss authorities warn

Threat Actors Increasingly Target macOS

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited-CISA Sounds Alarm

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

7-year-old vulnerability exploited in Salt Typhoon attack

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited-CISA Sounds Alarm

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

7-year-old vulnerability exploited in Salt Typhoon attack

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

The summer of 2024: A season of disinformation

Generative AI poses threat to election security, federal intelligence agencies warn

The summer of 2024: A season of disinformation

Generative AI poses threat to election security, federal intelligence agencies warn

Summer Olympics: What IT Teams Need to Do Before & During the Event for Their Businesses

#threat-actors
#threat-actors