CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

News April 30, 2021

Mamba Ransomware Weaponizing DiskCryptor Software, FBI Warns

2 min read - The operators of the Mamba ransomware strain have added weaponized DiskCryptor to their ongoing attacks, the FBI warned. An open-encryption solution, DiskCryptor, is capable of encrypting all disk partitions including the system partition. While not malicious by itself, this enables…

News April 28, 2021

QBot Malware Spotted Using Windows Defender Antivirus Lure

2 min read - Attackers are using fake Windows Defender Antivirus emails to distribute QBot malware. The QBot Attack Campaign In late August 2020, Bleeping Computer revealed that QBot had begun using a new template in its email attacks. This template also used stolen…

News April 26, 2021

Hog Ransomware to Victims: ‘Join Our Discord Server to Get Your Files Decrypted’

2 min read - Most ransomware actors are in it for the money. But, that doesn’t appear to be the case for whoever created the ‘Hog’ crypto-malware strain. Instead, Hog’s operators informed at least some of their victims that they’ll restore the affected files…

News April 21, 2021

Google Blocks Remote Access Trojan Targeting Android

2 min read - Clast82, a malware dropper that helps attackers spread the AlienBot mobile remote access Trojan and malware-as-a-service, has been detected on Google’s Play Store. After Clast82 sought to evade Google’s detection, it was patched in February. Read on to find how enterprise can…

News April 15, 2021

Trickbot: Attackers Using Traffic Violation Scam to Spread Malware

2 min read - Digital attackers launched a new phishing scheme using fake traffic violations to infect victims with Trickbot. With the prospect of a traffic violation, some people would be scared into opening an attack email. In the aftermath of a successful Trickbot…

News April 13, 2021

Over Half of Malware Delivered via Cloud Applications

2 min read - Malware actors aren’t struggling to adapt their attack campaigns to cloud applications. If they were, then they probably wouldn’t have sent 61% of their malicious payloads in 2020 via cloud-based apps. That’s up from 48% of malware samples in 2019,…

News April 6, 2021

Crypto Malware ‘AppleJeus’ Opens Cryptocurrency Wallets to Thieves

3 min read - Digital attackers used a strain of crypto malware called ‘AppleJeus’ to steal cryptocurrency. In a joint advisory published by the FBI and the Department of the Treasury, the U.S. Cybersecurity & Infrastructure Security Agency (CISA) warned that the Hidden Cobra…

News March 31, 2021

REvil Ransomware Gang Tells All About Alliances, Revenue

2 min read - The threat actors behind the REvil ransomware strain claim they bring in annual revenues of over $100 million. Inside the Lucrative REvil Gang A spokesperson for Sodinokibi REvil ransomware disclosed the haul in an October interview on a YouTube and…

News March 22, 2021

IRS Scam Emails Ask Tax Preparers for EFIN Information

2 min read - Many people are familiar with U.S. Internal Revenue Service (IRS) scam letters fishing for money around tax season. Now, a new form of IRS scam targets tax professionals in a virtual version of the fake IRS letter. The IRS warned tax…

News March 15, 2021

URL Phishing Campaign Hides Attack Behind Morse Code

2 min read - A very old way to send messages has found new life. Threat actors used Morse code in a new URL phishing campaign detected early in February 2021, according to Bleeping Computer. Invented by Samuel Morse and Alfred Vail in the…