Agent Tesla new enhanced version
Six-year-old keylogger malware called Agent Tesla has been updated again, this time with expanded targeting and improved data exfiltration features. Researchers warn that the newest iteration of the malware, is…
Posted incloudsecurity
VBA Purge Attack
Cyberattacks relying on malicious Office documents have increasingly leveraged a relatively new technique called VBA Purging, VBA purging involves the use of VBA source code only within Office documents, instead…
Posted incloudsecurity
SuperNova WebShell aftermath Solarwinds
As forensic evidence is slowly being unearthed in the aftermath of the SolarWinds supply chain attack, security researchers have discovered a second threat actor that has exploited the SolarWinds software…
Vulnerable TCP/IP Tracking Scripts
A new vulnerabilities in the Treck TCP/IP stack identified by ICS-CERT, Forescout released an open-source tool for detecting whether a network device runs one of the four open-source TCP/IP stacks…
CyberPunk …Installer comes with Ransom
A threat actor is distributing fake Windows and Android installers for the Cyberpunk 2077 game that is installing a ransomware calling itself CoderWare. This tricking users into installing malware, threat…
Posted incybersecurity Endpoint Security Exfilteration
VMWare–>Solarwinds–>🔥 👁️
A VMware vulnerability that allowed access to protected data and federated authentication abuse was used by the SolarWinds hackers to attack high-value targets, KrebsOnSecurity reported. VMware was being used by…
Malicious browser plugins downloaded in thousands
The extensions were apparently designed to help users download videos from some of the most popular platforms out there, including Facebook, Vimeo, Instagram, VK, and others. Code identified in these…
SystemBC RAT..Powerful Ransomware tool
Researchers have been tracking a new ransomware tool available on underground hacking forums which has evolved into a Tor proxy and remote control tool that is now being used in…