Eval PHP Plugin used to backdoor WordPress Sites
Researchers came with a warning that attackers were seen installing the abandoned Eval PHP plugin on compromised WordPress sites for backdoor deployment. With an Eval PHP plugin, the threat actor…
X Conti Colloborates on Domino Malware.
Reseaechers found that the former members of the Conti ransomware group are using the FIN7 group developed Domino tool in their attack. Domino malware is used to drop either the…
Money Ransomware Dissection
Researchers have spotted a new emerging threat group dubbed Money Ransomware. It has adopted the increasingly popular tactic of encrypting and exfiltrating sensitive data from organizations and threatening to leak…
Rilide Malware Dissection
Researchers discovered a new malware dubbed as Rilide that fakes legitimate Google Drive extensions to inject malicious scripts and steal cryptocurrency. The malware targets Chromium-based browsers like Google Chrome, Microsoft…
Cylance Ransomware Dissection
Researchers have spotted a new ransomware strain with the name Cylance Ransomware. Samples of the ransomware's payload have already been collected after successful attacks were launched on unnamed victims. Researchers…
AlienFox Malware Toolset -SwissArmy Knife
Researchers have spotted a new cloud service provider credential harvester tool set shared in wild through Telegram. The toolset called as Alien Fox is described as a cloud spammer Swiss…
CatB Ransomware Dissection
Researchers have spotted new tactics employed by the CatB ransomware, also referred to as CatB99 or Baxtoy, which has been steadily expanding its campaign since November 2022. Researchers noted the…
CISA Pre Ransomware Notification Initiative
The US CISA has announced a new Pre-Ransomware notification initiative that aims at alerting organizations of early-stage ransomware attacks. The motto behind the initiative is that ransomware actors initially gain…