Cyber Attack
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs via Fake Jobs
The U.S. Treasury’s Office of Foreign Assets Control said it has sanctioned people and companies tied to a North Korean...
Category: Cyber Attack
Cyber Attack
LeakNet Uses ClickFix Lure and Deno In-Memory Loader
ReliaQuest said a ransomware group known as LeakNet is now using a social engineering tactic called ClickFix delivered from compromised...
Cyber Attack
Konni Uses KakaoTalk and Phishing to Spread EndRAT
South Korean security firm Genians reported that North Korea-linked threat actors known as Konni used spear-phishing to install a remote...
Cyber Attack
GlassWorm ForceMemo Uses Stolen GitHub Tokens to Inject Malware
Security researchers say a new offshoot of the GlassWorm campaign, dubbed ForceMemo, is using stolen GitHub tokens to inject obfuscated...
Cyber Attack
Chrome Zero-Days, Router Botnets and AWS Supply-Chain Breach
This week’s cyber headlines span browser zero-days, large router botnets, a fast cloud takeover after a supply-chain compromise, and a...
Cyber Attack
Attempted Cyberattack on Poland’s MARIA Reactor IT Systems Thwarted
Poland’s National Centre for Nuclear Research (NCBJ) said that its internal defenses detected and blocked a cyber intrusion on March...
Cyber Attack
GlassWorm Abuses 72 Open VSX Extensions to Target Developers
Security firms have uncovered a renewed GlassWorm supply-chain campaign that is using the Open VSX registry to reach developers by...
Cyber Attack
Suspected China-linked Hackers Target Southeast Asian Militaries
Palo Alto Networks Unit 42 says a suspected China-based espionage group has been targeting military organizations in Southeast Asia using...
Cyber Attack
Storm-2561 Uses SEO Poisoning to Steal VPN Credentials
Microsoft disclosed a credential-theft campaign it attributed to the threat cluster Storm-2561 that uses search engine optimization poisoning to push...
Cyber Attack
INTERPOL Takedown Hits 45,000 Malicious IPs, 94 Arrested
INTERPOL said a major international operation dismantled 45,000 malicious IP addresses and servers linked to phishing, malware and ransomware campaigns,...