Latest Cybersecurity News and Articles

---

Fake Obituary Sites Send Grievers to Adult Sites and Scareware Pages

Security researchers have warned of a slew of fake obituaries designed to make money for their creators by redirecting visitors to adult entertainment sites and initiating antivirus (AV) popups.

---

Sign1 Malware: Analysis, Campaign History & Indicators of Compromise

The malware injects JavaScript to perform unwanted redirects by using sophisticated obfuscation techniques, including time-based randomization and XOR encoding, to evade detection.

---

Tax Hackers Blitz Small Business With Phishing Emails

Worryingly, the social engineering scammers are likely operating with little more than a cheap email list of self-employed US residents, according to the latest advisory from Malwarebytes Labs.

---

Curious Serpens’ FalseFont Backdoor: Technical Analysis, Detection and Prevention

Curious Serpens has been active since at least 2013. This threat actor is associated with espionage and has targeted organizations in the Middle East, the United States, and Europe.

---

Microsoft Warns of New Tax Returns Phishing Scams Targeting You

These attachments, as per Microsoft Threat Intelligence’s blog post, contain malware that steals your login credentials, or they might redirect you to a fake website that looks like a legitimate tax platform designed to capture your information.

---

Russia Hackers Using TinyTurla-NG to Breach European NGO's Systems

The Russia-linked threat actor known as Turla infected several systems belonging to an unnamed European non-governmental organization (NGO) in order to deploy a backdoor called TinyTurla-NG. "The attackers compromised the first system, established persistence and added exclusions to antivirus products running on these endpoints as part of their preliminary post-compromise actions," Cisco

---

The Magnet Goblin group is leveraging one-day vulnerabilities

Security leaders discuss the actions of the Magnet Goblin threat actor group. 

---

Critical Flaw in Atlassian Bamboo Data Center and Server Must Be Fixed Immediately

The vulnerability allows unauthenticated attackers to expose assets in the environment, with a high impact on confidentiality, integrity, and availability, without requiring user interaction.

---

Over 800 npm Packages Found with Discrepancies, 18 Exploitable to 'Manifest Confusion'

New research has discovered over 800 packages in the npm registry which have discrepancies from their registry entries, out of which 18 have been found to exploit a technique called manifest confusion. The findings come from cybersecurity firm JFrog, which said the issue could be exploited by threat actors to trick developers into running malicious code. "It's an actual threat since

---

New ‘Loop DoS’ Attack May Impact up to 300,000 Online Systems

Devised by researchers at the CISPA Helmholtz-Center for Information Security, the attack uses the User Datagram Protocol (UDP) and impacts an estimated 300,000 host and their networks.

---

The Most Prevalent Malware Behaviors and Techniques

An analysis of 100,000+ Windows malware samples has revealed the most prevalent techniques used by malware developers to successfully evade defenses, escalate privileges, execute the malware, and assure its persistence.

---

Ivanti Urges Customers to Fix Critical RCE Flaw in Standalone Sentry

This vulnerability affects all supported versions 9.17.0, 9.18.0, and 9.19.0. Older versions are also impacted. The company urge customers to install the available versions 9.17.1, 9.18.1, and 9.19.1, which address the issue.

---

Australian Techie Jailed for Stealing From Museum

As explained yesterday by the Australian Federal Police (AFP), the man "used his role as a contract IT support worker to access the Museum's accounts payable system and illegally change bank account details to his own."

---

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data. "It works by scanning and taking out important information from .env files, revealing login details linked to AWS and Twilio," Juniper Threat Labs researcher Kashinath T Pattan said. "Classified as an SMTP cracker, it exploits SMTP

---

Spa Grand Prix Email Account Hacked to Phish Banking Information From Fans

In a press release sent to BleepingComputer, the race organizer explained that the email account was hijacked on Sunday, March 17, 2024, and was followed by the threat actor sending fraudulent emails to an undisclosed number of people.

---

Report: Growing AceCryptor Attacks in Europe

In recent months, researchers registered a significant change in how AceCryptor is used, namely that the attackers spreading Rescoms (also known as Remcos) started utilizing AceCryptor, which was not the case beforehand.

---

Hackers Claim to Have Breached Israeli Nuclear Facility’s Computer Network

An Iran-linked hacking group claims to have breached the computer network of a sensitive Israeli nuclear installation in an incident declared by the ‘Anonymous’ hackers as a protest against the war in Gaza.

---

Serial Data Thief Pleads Guilty to Cybercrime Charges

Robert Purbeck, adopting the aliases "Lifelock" and "Studmaster" during his time as a cybercriminal, according to the Department of Justice (DoJ), stole personal data belonging to more than 132,000 people.

---

How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl

In today's digital-first business environment dominated by SaaS applications, organizations increasingly depend on third-party vendors for essential cloud services and software solutions. As more vendors and services are added to the mix, the complexity and potential vulnerabilities within the SaaS supply chain snowball quickly. That’s why effective vendor risk management (VRM) is a

---

'Fluffy Wolf' Spreads Meta Stealer in Corporate Phishing Campaign

Meta Stealer is launched via Remote Utilities, a legitimate remote access tool, allowing threat actors to gain complete control over compromised devices and steal sensitive data.