CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

December 14, 2018

Malspam Campaign Impersonates UK Businesses to Target Victims With Banking Trojan

2 min read - Security researchers discovered a malspam campaign targeting British computer users with the Ursnif/Gozi/ISFB Trojan.

December 14, 2018

Hide ‘N Seek Botnet Continues to Grow by Infecting IoT Devices Using Default Credentials

2 min read - Avast security analysts reported that the Hide 'N Seek botnet continues to grow by infecting vulnerable Internet of Things (IoT) devices still using their default passwords.

December 14, 2018

KoffeyMaker Toolkit Used in Black Box ATM Attacks Against Eastern European Banks

2 min read - In 2017 and 2018, threat actors used a toolkit called KoffeyMaker in multiple black box ATM attacks targeting Eastern European financial institutions.

December 14, 2018

Magecart Group’s Use of Credit Card-Skimming JavaScript Attack on the Rise

2 min read - An online retailer was hit by a JavaScript attack from a group associated with Magecart, a collective of cybercriminals that specializes in skimming credit card numbers from compromised websites.

December 13, 2018

CARROTBAT Malware Family Supports at Least 12 Unique Decoy Documents

2 min read - A malware family known as CARROTBAT is currently using at least 12 unique decoy documents to spread itself among unsuspecting users.

December 11, 2018

Popular JavaScript Library for Node.JS Infected With Malware to Empty Bitcoin Wallets

2 min read - For several months, a version of a popular JavaScript library for Node.js contained malicious code that enabled digital attackers to compromise users' bitcoin wallets.

December 10, 2018

Latest Malware Strains Target Cloudera Hadoop for Bitcoin Mining and DDoS Attacks

2 min read - Security researchers discovered that several new malware strains are targeting known Cloudera Hadoop vulnerabilities for bitcoin mining and distributed denial-of-service (DDoS) purposes.

December 7, 2018

SNAKEMACKEREL Group Uses Brexit-Themed Spear Phishing Attack to Target Government Agencies

2 min read - Analysts discovered a new spear phishing attack campaign from the SNAKEMACKEREL group that uses fake Brexit-related documents to infiltrate major government agencies and steal information.

December 7, 2018

New Macro Downloaders Use PUB Files to Compromise Food and Retail Companies

2 min read - New macro downloaders are sandwiching spam and .PUB files to compromise businesses in the food and retail sector.

December 7, 2018

Sednit Threat Group Adds Delphi Dropper and Mail Downloader to Zebrocy Toolset

2 min read - Security researchers observed the Sednit threat group distributing Zebrocy malware using a Delphi dropper and mail downloader.