Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes.

·

backdoor, ClingSTUN, Cyber Attack, FortiGuard, IoT, Linux, Malware, Security, STUN, vulnerability

¶¶¶¶¶

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.

·

Callisto Group, CosmicPulse, Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Phishing, RedFlick, Russia, Security, Star Blizzard, Ukraine, USA

¶¶¶¶¶

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

·

0day, AI, Artificial Intelligence, Cyber Attack, cybersecurity, Data Breaches, Dutch, Privacy, Security, Zammad

¶¶¶¶¶

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding

A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC…

·

cybersecurity, GPS, GPS Spoofing, Privacy, Red Sea, Security, Ships, Spoofing, Technology

¶¶¶¶¶

New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.

·

backdoor, CloudSyncD, cybersecurity, Jamf Threat Labs, jQuery, macOS, Malware, Security, Zoom

¶¶¶¶¶

Japanese Car-Sharing Site Times Car Data Breach Affects 6.6M Accounts

Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver’s license images and documents too.

·

Cyber Attack, cybersecurity, Data Breach, Data Breaches, hacking, Japan, Security, Times Car

¶¶¶¶¶

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

·

Blockchain, CloudSEK, Cyber Attack, Cyber-Attacks, cybersecurity, MALFEX, Malware, Overlord, RAT, SCAM, Security, Solana, Supply Chain

¶¶¶¶¶

Global Group Ransomware Abuses WinMerge to Deploy Encryptor

Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.

·

Black Lock, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Encryptor, GLOBAL GROUP, Malware, Mamona, Phishing, Ransomware, Security, WinMerge

¶¶¶¶¶

Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details

An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.

·

Amazon, Amazon Prime, cybersecurity, Fraud, Phishing, Phishing Scam, Privacy, SCAM, Security

¶¶¶¶¶

8 Top Red Teaming Service Providers for Enterprise Adversary Emulation

Compare 8 top red teaming providers for enterprise adversary emulation, from DeepSeas and Mandiant to CrowdStrike, IBM, SpecterOps, TrustedSec and NCC Group.

·

Adversary Emulation, cybersecurity, Penetration Testing, PENTESTING, Red Team, Red Teaming, Security, Threat Intelligence

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Security