Tag: malicious
-
How AI can make it less frustrating for employees to report malicious emails
First seen on scmagazine.com Jump to article: www.scmagazine.com/perspective/how-ai-can-make-it-less-frustrating-for-employees-to-report-malicious-emails
-
Malicious installers used in novel Void Arachne attacks
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/malicious-installers-used-in-novel-void-arachne-attacks
-
North Korea’s Moonstone Sleet Widens Distribution of Malicious Code
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/north-koreas-moonstone-sleet-widens-distribution-of-malicious-code-packages
-
Hallucinated Packages, Malicious AI Models, and Insecure AI-Generated Code
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/hallucinated-packages-malicious-ai-models-and-insecure-ai-generated-code/
-
Ascension Attack Caused by Employee Downloading Malicious File
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ascension-attack-employee/
-
Fake Google Chrome errors trick you into running malicious PowerShell scripts
A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell fixes that ins… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-google-chrome-errors-trick-you-into-running-malicious-powershell-scripts/
-
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firew… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/azure-service-tags-vulnerability.html
-
Arid Viper’s AridSpy Trojan Hits Android Users in Palestine, Egypt
roid users in Egypt and Palestine beware! Arid Viper is distributing malicious third-party apps hiding the AridSpy trojan! Learn how this malware stea… First seen on hackread.com Jump to article: hackread.com/arid-vipers-aridspy-trojan-android-users-palestine-egypt/
-
Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/void-arachne-uses-deepfakes-and-ai-to.html
-
Malicious emails trick consumers into false election contributions
Major regional and global events such as military exercises, political or economic summits, political conventions, and elections drove cyber threat ac… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/17/global-cyber-threat-activities/
-
Police Dismantle Asian Crime Ring Behind $25M Android Fraud
Hackers Used Dozens of Servers to Distribute Malicious Android Apps. Law enforcement authorities in Singapore, Malaysia, Hong Kong and Taiwan took dow… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/police-dismantle-asian-crime-ring-behind-25m-android-fraud-a-25541
-
Smishers Stand Up Fake Phone Tower to Blast Malicious Texts
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/smishers-stand-up-fake-phone-tower-to-blast-malicious-texts
-
Ascension Hack Caused By an Employee Who Downloaded a Malicious File
Ascension, a leading healthcare provider, has made significant strides in its investigation and recovery efforts following a recent cybersecurity brea… First seen on gbhackers.com Jump to article: gbhackers.com/ascension-hack-caused/
-
Critical Outlook RCE Vulnerability Exploits Preview Pane Patch Now!
ritical vulnerability (CVE-2024-30103) in Microsoft Outlook allows attackers to execute malicious code simply by opening an email. This zero-click exp… First seen on hackread.com Jump to article: hackread.com/outlook-rce-vulnerability-exploits-preview-pane/
-
Hackers Target Python Developers with Fake Crytic-Compilers Package on PyPI
Cybersecurity researchers have discovered a malicious Python package uploaded to the Python Package Index (PyPI) repository that’s designed to deliver… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/hackers-target-python-developers-with.html
-
Ascension hacked after employee downloaded malicious file
Ascension, one of the largest U.S. healthcare systems, revealed that a May 2024 ransomware attack was caused by an employee who downloaded a malicious… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ascension-hacked-after-employee-downloaded-malicious-file/
-
Visual Studio Code Has a Malicious Extension Problem
Researchers Infiltrate Major Organizations Using Fake Extension. Cybersecurity researchers say an experiment in developing a fake, malicious extension… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/visual-studio-code-has-malicious-extension-problem-a-25519
-
Phishing emails abuse Windows search protocol to push malicious scripts
A new phishing campaign uses HTML attachments that abuse the Windows search protocol (search-ms URI) to push batch files hosted on remote servers that… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-emails-abuse-windows-search-protocol-to-push-malicious-scripts/
-
VSCode extensions with malicious code installed 229M times
Tags: maliciousFirst seen on scmagazine.com Jump to article: www.scmagazine.com/news/vscode-extensions-with-malicious-code-installed-229m-times
-
Malicious resumes used to spread more_eggs malware anew
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/malicious-resumes-used-to-spread-more_eggs-malware-anew
-
Malicious Node on ComfyUI Steals Data from Crypto, Browser Users
First seen on hackread.com Jump to article: hackread.com/comfyui-malicious-node-steal-crypto-browser-data/
-
Ukrainian Systems Hit by Cobalt Strike Via a Malicious Excel File
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ukrainian-systems-hit-by-cobalt-strike-via-a-malicious-excel-file
-
Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing
Tags: cvss, exploit, flaw, malicious, microsoft, remote-code-execution, update, vulnerability, windowsThe Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets. The post ows v… First seen on securityweek.com Jump to article: www.securityweek.com/patch-tuesday-remote-code-execution-flaw-in-microsoft-message-queuing/
-
#Infosec2024: Third of Web Traffic Comes from Malicious Bots, Veracity Says
Tags: maliciousFirst seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/third-web-traffic-malicious-bots/
-
Gitloker attacks abuse GitHub notifications to push malicious oAuth apps
Threat actors impersonate GitHub’s security and recruitment teams in phishing attacks to hijack repositories using malicious OAuth apps in an ongoing … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitloker-attacks-abuse-github-notifications-to-push-malicious-oauth-apps/
-
Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12
A dodgy email containing a link that looks legit but is actually malicious remains one of the most dangerous, yet successful, tricks in a cybercrimina… First seen on techcrunch.com Jump to article: techcrunch.com/2024/05/22/bolster-creator-of-the-checkphish-phishing-tracker-raises-14m-led-by-microsofts-m12/
-
Malicious VSCode extensions with millions of installs discovered
A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to infect over 100 organizations by trojanizing… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/
-
Everything You Need to Know About Cross-Site Scripting
Cross-Site Scripting (XSS) is a sneaky security flaw that lets attackers inject malicious code into seemingly harmless websites. In this article, let’… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/06/07/everything-you-need-to-know-about-cross-site-scripting/
-
The Tolly Group Report Highlights SlashNext’s Gen AI-Powered Email Security Prowess
In the ever-evolving landscape of cyberthreats, email remains a prime target for malicious actors, with zero-hour Business Email Compromise (BEC) and … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/the-tolly-group-report-highlights-slashnexts-gen-ai-powered-email-security-prowess/
-
Sticky Werewolf Weaponizing LNK Files Group Attacking To Attack Organizations
Sticky Werewolf, a cyber threat group, has shifted its targeting strategy from sending phishing emails with download links to malicious files to using… First seen on gbhackers.com Jump to article: gbhackers.com/sticky-werewolf-lnk-files-attacks/