Security Bulletin

U.S. sanctions imposed against Russian state-backed hacktivist operation Cyber Army of Russia Reborn's leader Yuliya Pankratova and primary hacker Denis Degtyarenko for their involvement in critical infrastructure cyberattacks were dismissed by...

"This trend might also be perpetuated by the wider availability and increased quality of AI tools that lack prompt filtering, which cybercriminals can use to quickly assemble and debug their code," said Europol.

Installation of AsyncRAT and BOINC occurs at the last part of the multi-stage attack, with the latter facilitating system information exfiltration after establishing a connection with a remote server.

Attackers behind the exploit may have leveraged Telegram API to create a payload masquerading as a 30-second video, which when clicked triggers a message suggesting the use of another player that includes an "Open" button that facilitates the...

FLUXROOT exploited Google Cloud container URLs to establish phishing pages distributing the Grandoreiro banking trojan, which proceeded to exfiltrate credentials from widely used LatAm online payments platform Mercado Pago.

Illicit cyber activities conducted by Chinese cybercrime syndicate Vigorish Viper involving a sophisticated technology suite have been supported by the group's illegal betting platforms advertised by sports teams, including European football clubs...

At least 5,000 workstations at the U.S. Citizenship and Immigration Services have been taken down by the incident, which a source close to the matter notes may be resolved in over a week.

Aside from the disruption of DigitalStress' website, the law enforcement sting — which also involved the FBI and the Police Service of Northern Ireland — also resulted in the arrest of a suspected administrator, according to the UK's NCA.

Digital impersonation attacks are at the center of much of the financial fraud caused by hackers, including phishing and malware distribution.

Newly discovered "FrostyGoop" is the first ICS malware that can communicate directly with operational technology systems via the Modbus protocol.

A wide range of phishing lures, some spreading dangerous malware, have popped up around the web.

The Israeli security startup's technology helps organizations map existing accounts and credentials to existing employees to identify those that should be removed.