CyberConvoy Blog

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages

The authentic-looking decoy pages function as a reverse proxy to harvest credentials and time-based one-time passwords (TOTPs) entered by the victims

13 May

Babuk code used by 9 ransomware gangs to encrypt VMWare ESXi servers

These add too many other unique, non-Babuk-based ransomware strains targeting VMware ESXi virtual machines discovered in the wild for several years

13 May

Fake in-browser Windows updates push Aurora info-stealer malware

Advertised as an info stealer with extensive capabilities and low antivirus detection

11 May

Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability

An unauthenticated attacker on the internet could use the vulnerability to coerce an Outlook client to connect to an attacker-controlled server

11 May

New Cactus ransomware encrypts itself to evade antivirus

Researchers found that Cactus obtains initial access into the victim network by exploiting known vulnerabilities in Fortinet VPN appliances

8 May

Hackers start using double DLL sideloading to evade detection

These attack variations begin with an initial vector that leverages a clean application that sideloads a second-stage payload which in turn, sideloads a malicious malware loader DLL

5 May

Fortinet Patches High-Severity Vulnerabilities in FortiADC, FortiOS

An attacker could exploit the bug via crafted arguments to existing commands, allowing them to execute unauthorized commands

5 May

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Users may be manipulated into downloading and executing the malware under the guise of legitimate software

5 May

Cisco phone adapters vulnerable to RCE attacks, no fix available

A successful exploit could allow the attacker to execute arbitrary code on the affected device with full privileges

5 May

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

Federal Civilian Executive Branch (FCEB) agencies are required to apply vendor-provided fixes by May 22, 2023, to secure their networks against these active threats

2 May

CyberConvoy Blog - Page 2 of 22 - Live Fearless