Malicious npm packages leveraged by North Korean hackers for Windows compromise
North Korean threat operation Stressed Pungsan, which is associated with state-backed hacking collective Moonstone Sleet, has sought to compromise Windows systems with a pair of malicious npm packages "harthat-api" and "harthat-hash."
Increasingly prevalent cybersecurity threats and varied security goals among organizations have prompted the addition of a new Investigations Management tool in Flashpoint Ignite, which would enable not only data gathering, asset mapping, and threat...
Attackers using an email address similar to one of the organization's suppliers were able to lure the firm to pay $42.3 million to a Timor Leste-based account, which was only realized to be fraudulent after complaints from the real supplier, reported...
Cryptonator shut down as operator faces money laundering charges
Most of the funds passing through the service, amounting to $80 million, were from high-risk exchanges, while $54 million were from addresses linked to cyberattacks and cryptocurrency exfiltration activities.
Aside from executing PowerShell scripts enabling in-memory operation of ShadowPad and Cobalt Strike retrieval, APT41 also leveraged Mimikatz to facilitate password collection and further information-gathering activities before proceeding with the...
The 23rd edition of Microsoft’s BlueHat security conference will be hosted by the Microsoft Security Response Center (MSRC) at the Redmond, WA corporate campus, October 29 and 30, 2024. BlueHat brings together security researchers and responders from...