Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware Cybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT. Remcos RAT “provides purchases with a wide range of advanced features to remotely control computers belonging to the buyer,” Read more…
Ticketmaster Hackers Are Stealing Tickets Out of Customers’ Accounts Hackers are breaking into some Ticketmaster users’ accounts and transferring tickets to themselves. Two concertgoers said it was shocking, but they got their tickets back to attend their shows. After BI asked Ticketmaster for comment, it refunded the two concertgoers the Read more…
Why did the UK’s oldest space satellite end up thousands of miles from where it should have been? BBC/Gerry Fletcher Artwork: The half-tonne Skynet-1A satellite was launched in November 1969 Someone moved the UK’s oldest satellite and there appears to be no record of exactly who, when or why. Launched Read more…
Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns Nov 09, 2024Ravie LakshmananVulnerability / Network Security Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability. “Palo Alto Read more…
Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering Nov 09, 2024Ravie LakshmananCryptocurrency / Cybercrime The 36-year-old founder of the Bitcoin Fog cryptocurrency mixer has been sentenced to 12 years and six months in prison for facilitating money laundering activities between 2011 and 2021. Roman Sterlingov, a dual Read more…
Scattered Spider, BlackCat criminals claw back • The Register Two high-profile criminal gangs, Scattered Spider and BlackCat/ALPHV, seemed to disappear into the darkness like their namesakes following a series of splashy digital heists last year, after which there were arrests and website seizures. Over the last couple months, however, both Read more…
Legal protections for security researchers sought in new German draft law A German draft law announced this week would protect researchers who discover security vulnerabilities from potential criminal prosecution under the nation’s computer crimes law. The proposed amendment to German Criminal Code § 202a, drafted by the country’s Federal Ministry Read more…
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services Nov 08, 2024Ravie LakshmananIoT Security / Vulnerability The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. “This botnet utilizes remote code Read more…
Malicious NPM Packages Target Roblox Users with Data-Stealing Malware Nov 08, 2024Ravie LakshmananOpen Source / Malware A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with open-source stealer malware such as Skuld and Blank-Grabber. “This incident highlights the alarming Read more…
IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools Nov 08, 2024Ravie LakshmananCyber Espionage / Threat Intelligence High-profile entities in India have become the target of malicious campaigns orchestrated by the Pakistan-based Transparent Tribe threat actor and a previously unknown China-nexus cyber espionage group dubbed IcePeony. The intrusions linked Read more…