Stories tagged “Windows Security.”
9 stories
Pakistan-aligned threat group Transparent Tribe deploys new Rust backdoor in cyber attacks targeting Indian and Afghan entities. Uses private GitHub repositories for C2 and mimics popular news sites for malicious scripts.
A Russian state-sponsored hacking group, APT28 (Fancy Bear), has deployed a new backdoor named HOOKEDGE, targeting government and diplomatic organizations in Romania, Spain, and Türkiye. This sophisticated malware, an evolution of HEADLACE, uses macro-enabled Word documen…
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script …
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into …
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report.
A China-nexus operation, tracked as JadeProx, has been targeting government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader.
A previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT has been flagged by cybersecurity researchers. It masquerades as NVIDIA software to blend into target environments.
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
A new remote access trojan (RAT) called MODBEACON has been discovered, attributed to the China-linked cybercrime group Silver Fox. The malware uses gRPC streaming for encrypted command-and-control (C2) traffic and has been found to be used in a campaign targeting technolo…