Browsing: Threat Campaign

Essential Insights Russian state-sponsored hackers (UAC-0145/Sandworm) are using fake CAPTCHA checks and web cloaking techniques,…

Quick Takeaways A Russian-speaking threat actor, UAT-11795, uses trojanized software and social engineering to target…

Summary Points Malicious npm packages targeting the Vite ecosystem use scoped names to impersonate legitimate…

Essential Insights The campaign employs sophisticated Go-based malware (GoSerpent, Stowaway) with encrypted command and control…

Fast Facts Russian-linked FSB hackers exploit insecure routers worldwide, targeting critical infrastructure through large-scale network…

Essential Insights Threat actors are deploying webshells on compromised CMS sites, leading to potential service…

Quick Takeaways Zero-day exploits in Joomla extensions iCagenda and Balbooa Forms allow remote code execution…

Essential Insights The campaign uses simple JavaScript on fake webpages to trigger payload downloads and…

Essential Insights Attackers are systematically enumerating GitHub organizations and repos using automated tools and dormant…

Summary Points Phishing emails impersonate company employees to deliver malicious XLS files exploiting CVE-2017-0199, leading…