Malware Archives - Page 9 of 10

Windows malware delays coinminer install by a month to evade detection

08/30/2022
Cyber News
C2, Malware

To avoid raising suspicions and to thwart sandbox analysis, the software activates a dropper from another encrypted RAR file fetched via Wget on the fifth day of the infection.

30 August

Cybercrime Groups Increasingly Adopting Sliver Command-and-Control Framework

Sliver presents an attractive alternative for threat actors looking for a lesser-known attack toolset with a low barrier for entry

26 August

Fake Chrome extension ‘Internet Download Manager’ has 200,000 installs

08/24/2022
Cyber News
Malware

The extension has been sitting on the Chrome Web Store since at least June 2019, according to the earliest reviews posted by users.

24 August

Phishing attacks abusing SaaS platforms see a massive 1,100% growth

If a message that makes bold claims or requests urgent action from you lands in your inbox, avoid clicking embedded links or buttons, but instead use a search engine to locate the official site of the potentially spoofed platform.

24 August

FBI warns of residential proxies used in credential stuffing attacks

Typically, these proxies are made available to cybercriminals by hacking legitimate residential devices such as modems or other IoTs or through malware that converts a home user's computer into a proxy without their knowledge.

23 August

CISA adds 7 vulnerabilities to list of bugs exploited by hackers

08/19/2022
Cyber News
0day, DDoS, Denial of Service, Malware, Patching, Ransomware

The 'Known Exploited Vulnerabilities Catalog' is a list of vulnerabilities shared by CISA that are known to be actively exploited in cyberattacks and must be patched by the Federal Civilian Executive Branch (FCEB) agencies.

19 August

Two more malicious Python packages in the PyPI

08/16/2022
Cyber News
Malware, Python

The malicious packages were intended to steal developers’ personal data and credentials.

16 August

Credential Theft Is (Still) A Top Attack Method

The stats don't lie. Cybercriminals are advancing, there's no doubt, but if there's an option to take the path of least resistance, they'll take it. Too often, that means compromising passwords and exploiting vulnerable access points.

16 August

Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems

The module, named "secretslib" and downloaded 93 times before its deletion, was released to the Python Package Index (PyPI) on August 6, 2022, and is described as "secrets matching and verification made easy."

16 August

Conti Cybercrime Cartel Using ‘BazarCall’ Phishing Attacks as Initial Attack Vector

Three different offshoots of the notorious Conti cybercrime cartel have resorted to the technique of call-back phishing as an initial access vector to breach targeted networks.

11 August

Malware Archives - Page 9 of 10 - CyberConvoy Blog