Browsing: Threat Campaign

Quick Takeaways Cybercriminals exploit npm packages and mirror services like unpkg to host malicious HTML…

Top Highlights The Ivanti EPMM attacks involved malicious subdomains and domains with links to typosquatting,…

Summary Points Cybercriminals use sophisticated malware like WordlistLoader and SynkLoader, employing techniques such as ClickFix,…

Essential Insights Apollo Global Management experienced a social engineering attack exploiting cloud platform vulnerabilities, exposing…

Summary Points Over 14,530 Dahua devices were compromised through credential attacks, authentication bypass vulnerabilities (CVE-2021-33044…

Essential Insights Threat actors used malicious photo-themed ZIP archives and fake shortcuts to deploy obfuscated…

Essential Insights The StopAndProtect operation hijacks thousands of hacked WordPress sites to distribute malware, steal…

Essential Insights The campaign involves typosquatted RubyGems packages designed to deceive developers and deliver malicious…

Essential Insights CoolClient now uses a kernel-mode driver, enhancing its ability to evade detection. It…

Summary Points The Armored Likho group has expanded its toolkit with new Rust-based modules, Still…