Pesquisadores detectaram duas novas campanhas ativas do trojan bancário Grandoreiro mirando instituições financeiras de Portugal e empresas na Espanha, México e América Latina. O malware, em operação silenciosa desde 2016, sobreviveu a ações de law enforcement que resultaram em p…
A agência de cibersegurança dos Estados Unidos emitiu um alerta para que órgãos federais corrijam imediatamente uma vulnerabilidade de severidade crítica no plugin de usuário final da LiteSpeed para cPanel, que está sendo explorada ativamente. Registrada como CVE-2026-48172 e com…
Pesquisadores identificaram uma técnica que engana agentes de codificação com IA para instalar silenciosamente servidores maliciosos, capazes de roubar segredos e comprometer pipelines de integração contínua. Denominado SymJack pela consultoria Adversa AI, o ataque explora a conf…
Empresas de segurança derrubaram simultaneamente os quatro canais de comando e controle usados pelo malware GlassWorm, que há mais de seis meses mira o ecossistema de código aberto. A CrowdStrike, em parceria com o Google e a Fundação Shadowserver, executou a operação para impedi…
Iran’s Nimbus Manticore hackers used trojanized Zoom installers to deploy malware against US firms during a wider IRGC linked cyber campaign.
Attackers are using AI to dramatically reduce the time they need to develop a working exploit for a CVE, according to new research.
Latin America and Europe become the target of two banking trojan campaigns that are designed to infect Windows and Android devices with Grandoreiro and BTMOB malware, respectively. That's according to new findings from WatchGuard and ESET, which have observed the two malware fam…
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to OX Security, the package, named "mouse5212-super-formatter," is designed to upload files from "/mnt/user-data," a dedicated direc…
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana blockchain transactions and the BitTorrent DHT network. [...]
Extortion Group Conducts Social Engineering Campaign Impersonating Victim's IT Department The HIPAA Journal
Silent Ransom Group, a data theft and extortion group that targets law firms, healthcare organizations, and insurance and finance companies, […] The post Extortion Group Conducts Social Engineering Campaign Impersonating Victim’s IT Department appeared first on The HIPAA Journal.
The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-person data theft attacks. [...]
CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels associated with GlassWorm, a persistent software chain campaign targeting software developers through malicious packages and…
Vulnerabilidades de alta severidade foram identificadas na extensão Angular Language Service para Visual Studio Code, conhecida como Angular.ng-template, permitindo cenários de execução remota de código contra máquinas de desenvolvedores. As falhas afetam versões anteriores à 21.…
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account, password, or other crede…
The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam (AFC Ajax) earlier this year. [...]
Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. "This emerging delivery technique extends social engineering beyond conventional search results and…
Relatório da Check Point Research aponta operações do grupo Nimbus Manticore, ligado à Guarda Revolucionária do Irã, contra setores de aviação e software nos Estados Unidos, Europa e Oriente Médio. Os ataques ocorreram entre fevereiro e abril, durante o conflito regional envolven…
O FBI emitiu um alerta sobre o Kali365, plataforma de phishing como serviço (PhaaS) identificada em abril com foco no Microsoft 365. O golpe não rouba a senha das vítimas, mas engana o usuário para que ele mesmo autorize o acesso de cibercriminosos a e-mails do Outlook, documento…
