Tag: backdoor
-
North Korean Hackers Spreading Malware Via Fake Interviews
Hackers Backdoor Software Libraries to Deliver Malware. Security researchers found backdoored software packages in the NPM software library, apparent … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/north-korean-hackers-spreading-malware-via-fake-interviews-a-26639
-
Intel Hits Back At China’s Accusations It Bakes In NSA Backdoors
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36490/Intel-Hits-Back-At-Chinas-Accusations-It-Bakes-In-NSA-Backdoors.html
-
In Other News: China Making Big Claims, ConfusedPilot AI Attack, Microsoft Security Log Issues
Noteworthy stories that might have slipped under the radar: China making claims about encryption cracking and Intel backdoors, ConfusedPilot AI attack… First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-china-making-big-claims-confusedpilot-ai-attack-microsoft-security-log-issues/
-
Intel lightly hits back at China’s accusations it bakes in NSA backdoors
First seen on theregister.com Jump to article: www.theregister.com/2024/10/18/intel_china_security_allegations/
-
Intel robustly refutes China’s accusations it bakes in NSA backdoors
First seen on theregister.com Jump to article: www.theregister.com/2024/10/18/intel_replies_china_security_allegations/
-
ShadowLogic Attack Targets AI Model Graphs To Create Codeless Backdoors
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36462/ShadowLogic-Attack-Targets-AI-Model-Graphs-To-Create-Codeless-Backdoors.html
-
The 30-year-old internet backdoor law that came back to bite
First seen on techcrunch.com Jump to article: techcrunch.com/2024/10/07/the-30-year-old-internet-backdoor-law-that-came-back-to-bite/
-
North Korean Hackers Use New Backdoor And RAT For Attacks
As per recent reports, North Korean hackers have been observed using a new backdoor and remote access trojan as part of their attack campaign. VeilShe… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/north-korean-hackers-use-new-backdoor-and-rat-for-attacks/
-
North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks
Threat actors with ties to North Korea have been observed delivering a previously undocumented backdoor and remote access trojan (RAT) called VeilShel… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/north-korean-hackers-using-new.html
-
Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals
A spear-phishing email campaign has been observed targeting recruiters with a JavaScript backdoor called More_eggs, indicating persistent efforts to s… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/fake-job-applications-deliver-dangerous.html
-
DPRK’s APT37 Targets Cambodia With Khmer, ‘VeilShell’ Backdoor
Tags: backdoorFirst seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/dprk-apt37-cambodia-khmer-veilshell-backdoor
-
Cyberattackers Use HR Targets to Lay More_Eggs Backdoor
The FIN6 group is the likely culprit behind a spear-phishing campaign that demonstrates a shift in tactics, from targeting job seekers to going after … First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attackers-targeting-recruiters-more_eggs-backdoor
-
Advanced Cyberattacks: Patchwork APT’s Nexe Backdoor Campaign Exposed
In a new report from Cyble Research and Intelligence Labs (CRIL), the notorious Patchwork APT group has once again demonstrated its cyber-espionage pr… First seen on securityonline.info Jump to article: securityonline.info/advanced-cyberattacks-patchwork-apts-nexe-backdoor-campaign-exposed/
-
(g+) D-Link: Erneut Telnet-Backdoor in mehreren Routermodellen entdeckt
Tags: backdoorFirst seen on golem.de Jump to article: www.golem.de/news/d-link-erneut-telnet-backdoor-in-mehreren-routermodellen-entdeckt-2409-189035.html
-
Critical Zimbra RCE flaw exploited to backdoor servers using emails
Hackers are actively exploiting a recently disclosed RCE vulnerability in Zimbra email servers that can be triggered simply by sending specially craft… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-exploited-to-backdoor-servers-using-emails/
-
Passive Backdoors, Active Threat: UNC1860’s Espionage Tools Exposed
Mandiant has uncovered alarming evidence of a sophisticated Iranian state-sponsored cyber campaign orchestrated by UNC1860, a threat actor likely affi… First seen on securityonline.info Jump to article: securityonline.info/passive-backdoors-active-threat-unc1860s-espionage-tools-exposed/
-
Patchwork APT Group Unleashes Nexe Backdoor: A New Era in Cyber Espionage Tactics
Recent analyses by Cyble Research and Intelligence Labs (CRIL) have brought to light an ongoing cyber campaign orchestrated by the notorious Patchwork… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/patchwork-apt-group/
-
US Transportation and Logistics Firms Targeted With Infostealers, Backdoors
A malicious campaign is targeting transportation and logistics organizations in North America with various malware families. The post US Transportatio… First seen on securityweek.com Jump to article: www.securityweek.com/us-transportation-and-logistics-firms-targeted-with-infostealers-backdoors/
-
North Korea-linked APT Gleaming Pisces deliver new PondRAT backdoor via malicious Python packages
North Korea-linked APT group Gleaming Pisces is distributing a new malware called PondRAT through tainted Python packages. Unit 42 researchers uncover… First seen on securityaffairs.com Jump to article: securityaffairs.com/168781/apt/gleaming-pisces-malicious-python-packages.html
-
New EAGLEDOOR backdoor spread in suspected Chinese APT attacks against Asia-Pacific
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-eagledoor-backdoor-spread-in-suspected-chinese-apt-attacks-against-asia-pacific
-
UNC2970’s Backdoor Deployed via Trojanized PDF Reader Targets Critical Infrastructure
Mandiant has unveiled a new wave of cyber-espionage attacks orchestrated by the North Korea-linked group UNC2970. This group has recently employed a s… First seen on securityonline.info Jump to article: securityonline.info/unc2970s-backdoor-deployed-via-trojanized-pdf-reader-targets-critical-infrastructure/
-
Novel Backdoor Leveraged in North Korean Hackers’ Global Aerospace, Energy Attacks
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-backdoor-leveraged-in-north-korean-hackers-global-aerospace-energy-attacks
-
Iran backdoors planted across Middle East telecoms, government agencies, Google says
First seen on therecord.media Jump to article: therecord.media/iran-backdoors-planted-across-middle-east-telecoms-government-orgs
-
UNC2970 Hackers Attacking Job Seekers Using Weaponized PDF Reader
UNC2970, a North Korean cyber espionage group, used customized SumatraPDF trojans to deliver MISTPEN backdoors to victims through phishing emails pret… First seen on gbhackers.com Jump to article: gbhackers.com/unc2970-hackers-job-pdf-attack/
-
‘Ancient’ MSFT Word Bug Anchors Taiwanese Drone-Maker Attacks
An attack dubbed WordDrone that uses an old flaw to install a backdoor could be related to previously reported cyber incidents against Taiwan’s milita… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/ancient-msft-word-bug-taiwanese-drone-maker-attacks
-
Smart Licensing Utility: Admin-Backdoor in Cisco-Lizenzierungstool entdeckt
First seen on golem.de Jump to article: www.golem.de/news/smart-licensing-utility-cisco-warnt-vor-admin-backdoor-in-lizenzierungstool-2409-188712.html
-
Part 1: Can Just Anyone Access Your ServiceNow Articles?
What if I told you that thousands of companies (30% of the accounts we reviewed) are leaving a backdoor open to their ServiceNow databases for anyone … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/part-1-can-just-anyone-access-your-servicenow-articles/
-
Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor
In addition to its longstanding password spraying attacks, Microsoft says Iran-backed hacker group Peach Sandstorm, or APT 33, has developed custom ma… First seen on wired.com Jump to article: www.wired.com/story/iran-peach-sandworm-tickler-backdoor/
-
GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botn… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/geoserver-vulnerability-targeted-by.html
-
New Vo1d malware infects 1.3 million Android streaming boxes
Threat actors have infected over 1.3 million TV streaming boxes running Android with a new Vo1d backdoor malware, allowing the attackers to take full … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-vo1d-malware-infects-13-million-android-streaming-boxes/