Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending Saturday, February 22, 2025.
XCSSET Malware Targeting macOS
XCSSET is a sophisticated malware targeting macOS users, especially software developers. Discovered by Trend Micro in 2020, XCSSET has evolved significantly and remains a potent threat.
XCSSET is a modular malware that spreads through infected Xcode projects. Xcode is Apple’s integrated development environment (IDE) for macOS, iOS, watchOS, and tvOS app development. The malware injects malicious code into Xcode projects, which then gets executed when the project is built or run……
Raymond Unfazes a Cyber Attack
Raymond Ltd, a prominent textile and clothing company, recently experienced a significant cyber attack. This incident underscores the importance of robust cybersecurity measures and proactive incident response strategies. The threat actor behind the attack is unknown for now….
EarthKapre Cyberespionage Operation
The EarthKapre campaign, also known as RedCurl or Red Wolf, represents a highly sophisticated and persistent cyberespionage operation targeting organizations worldwide. This campaign has been particularly notable for its advanced tactics, techniques, and procedures (TTPs).
BlackLock Ransomware Dissection
BlackLock ransomware, also known as El Dorado or Eldorado, has emerged as a significant cyber threat since its debut in March 2024. This ransomware-as-a-service (RaaS) group has gained notoriety for its aggressive tactics and rapid expansion. Here’s a comprehensive analysis:
BlackLock has witnessed a dramatic surge in activity, with a 1,425% increase in data leak posts in the last quarter of 2024. This makes it one of the most active ransomware groups, and it is anticipated to be a leading RaaS threat in 2025…
CVE-2025-0107 PoC Exploit Code Released for PaloAlto Flaw
CVE-2025-0107 is a critical OS command injection vulnerability discovered in Palo Alto Networks’ Expedition Tool, version 1.2.101 and earlier. Recently, security researchers released a Proof-of-Concept (PoC) exploit code, which demonstrates how this vulnerability can be exploited to execute arbitrary commands on affected systems, posing significant security risks…..
This brings the end of this week in review security coverage. Thanks for visiting TheCyberThrone. If you like us, please follow us on Facebook, Twitter, Instagram
